last executing test programs: 3m23.535422911s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 3m20.947192465s ago: executing program 4 (id=9): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(r0, 0x0, 0x3, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000040)=""/93, 0x5d}, {0x0}], 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf254300000008000300"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) 3m16.988673078s ago: executing program 4 (id=13): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x6, 0x9, 0x1, 'queue1\x00', 0xfffff5a0}) 3m14.233830919s ago: executing program 4 (id=19): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3000001, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$eJzsmb/L00AYx7+XtHl/IIqLg4uDL6jgmyapyrt0qOAoiFXUwaHYWKppK22EtiC0uLj4BwiuLo4ODk4O/gWuOqggONjRTTi5yyW9pmlppWjhfT7Qu28ud8/z3FPyHCQgCOLQ8u3rry/PLx/cOA/gCPawpcZ/mFHPj03P//zi8Q5KV16++fTqQ+vok3dpe0ys4cv7twC8L5sIwXLK49TqHU3vqf4mDJxT+hYY7Ej+5pzzvJRD+GC4o+Y80HQ7Nhj49r12ULvfCHxHNK5oPNEUdf8iqPGIoQZgW0bHOdPud/uDh9Ug8Dtpkeexn5lbq4pF+ZPxlQ2UEGePcwPA7WdPR+Ja5QYOjCR/Lgy4ShfBUFH6AFuwbXuSEm3/J3MT++Yy+/+/4rUUx/f/lVORYMEm7F0Iho0IY90ivxY7LD0iHuhk5MQ4roH6nO8r+rrLsDF/gSxcyIjn424QXP1LyyJjVkaiEjGpT4IzWn3KJaNAIWw+KnT7g/1Gs1r3637L84qXnAuOc9EryEIUtQvq37asT7vJSHwGzGIxCz3xoLo9IOy48roahh0varWKW3nb/inXGNfr0eLTUcfUmZUclCmY+hmyF+qsmT1zOHdPBEEQBEEQBEEQBEEQBEEQ2ZwCk29Z1YcqPgfvmnxD+ScAAP//+tFdLw==") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f00000002c0)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x40000901) close(0x3) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m12.064310524s ago: executing program 4 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) clock_getres(0x3, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) 2m56.953561717s ago: executing program 32 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) clock_getres(0x3, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.760893723s ago: executing program 1 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x4, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x7ff, 0x10000005, 0xff6, 0x8001}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0xc0c4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.641488658s ago: executing program 1 (id=969): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, 0x0, 0x4040040) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r0}, 0x0, 0x10, @inherit={0x48, &(0x7f0000000440)={0x0, 0x0, 0x37fffffffc, 0xb, {0x30, 0x3, 0x6, 0x5, 0x5}}}, @name="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"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) 1.493304014s ago: executing program 1 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) 1.461201905s ago: executing program 5 (id=975): unshare(0x2040400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) 1.403027998s ago: executing program 1 (id=976): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={0x0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{0x0}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000002400010300000000800000001100000004002f80787f079f85320f8ccfa6acd3e51eb721b5c0bd53ce14a3cafff4c04d45bd9f2fc3816845955a4e3fe43d10fa1c813fe2b450abf4a1cf790f3eeb34779b2cf6ce4aa65cfb2f51d19c641afdb0f5f63b3ef7967ec3d51cc8fd830322ef28299040e17baa0788e1cdf701b5ebb2f8a3ee0ad0f8a2aff1745b927e2d0b165639f9f810e2896b987c7027f94a9a44579b2f67b1ba827ebcd38a2cd1689205b4288b41a00d67cdf3be383814e82ca16b740a746fce0ebc5f0c82ecc1baab51c64fbf0658c755a0"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x4000054) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.34533189s ago: executing program 5 (id=978): unshare(0x24020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) 1.334927071s ago: executing program 0 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x38, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 1.233558435s ago: executing program 5 (id=981): r0 = socket(0x1e, 0x4, 0x0) unshare(0x2c020400) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.233234105s ago: executing program 0 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c00010062697477697365002800028008000340000000020800014000000014080002400000001204000580080006400000004409000100"], 0x10c}}, 0x0) 1.187461607s ago: executing program 0 (id=983): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}], 0x4, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.173083328s ago: executing program 3 (id=984): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x9}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "a59c00", "71061734a02cbe0647238c81f23ec29398c67f271139db7c2f9f13cb25109968"}}}}}}}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.12551202s ago: executing program 5 (id=985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffc}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 1.055691353s ago: executing program 5 (id=986): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8912, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x7c}}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001600000400000000080000000a0002000800ca07e5697700"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x3b, r8, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x7, 0xcc, 0x1, 0x4, 0xfffffffffffffffe}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x34ff, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 920.516339ms ago: executing program 3 (id=987): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000440), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdb6}, 0x1, 0x0, 0x0, 0x20000040}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x6851) 768.985796ms ago: executing program 1 (id=989): socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 728.671827ms ago: executing program 3 (id=990): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x20008090, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000800000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002800900010073797a3100000000140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 674.23502ms ago: executing program 3 (id=991): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0xf, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="27030200d63e82da45903e07cd17", 0xe}], 0x1}, 0x40084) 460.437929ms ago: executing program 2 (id=992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="16", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)="c4df", 0x2}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x2, 0x8080) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/182, 0xb6}], 0x1}, 0x2}], 0x1, 0x10040, 0x0) 431.39302ms ago: executing program 2 (id=993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000010000000000000008f700b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) 404.696872ms ago: executing program 3 (id=994): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) 350.296644ms ago: executing program 2 (id=995): unshare(0x24020400) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) 280.351697ms ago: executing program 2 (id=996): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9002}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 279.965077ms ago: executing program 3 (id=997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009fdd8600000000000088a8600081"], 0x3a) 278.989107ms ago: executing program 0 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009f00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x1, @val=@netfilter={0x3, 0x4, 0x600, 0x1}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)={0x1c, 0x5f, 0x1, 0x0, 0x0, {0x17}, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) r4 = socket$kcm(0xf, 0x3, 0x2) r5 = accept4(r4, &(0x7f00000002c0)=@ethernet={0x0, @remote}, &(0x7f0000000380)=0x80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000020000071800028014000180080001000000000008000200ffffffff0000000000000000000005ab"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) r7 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%ps \x00'}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="18027a000000000000000006000000009500000000f1000096899f9dfed63e170ae0e473064b27cb753606e004e3d0d3c645f62bbb33278c951c83e565683a497117f2a88a9099a1909a98808d48640662c6043219cb8fe4d8e319736e1ef71dd035690719dac29a8b"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10}, 0x90) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000001000), 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x8, r0}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x14, 0x11, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3d}, [@map_val={0x18, 0x1, 0x2, 0x0, r8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0xd5, &(0x7f0000000d00)=""/213, 0x41000, 0x4, '\x00', 0x0, @fallback=0x32, r3, 0x8, &(0x7f0000000e00)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r11, r1, 0x1, &(0x7f0000000ec0)=[r12, r2, r13], &(0x7f0000000f00)=[{0x3, 0x4, 0x6, 0x1}], 0x10, 0x6}, 0x94) unshare(0x22020600) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r14, 0x5218) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r15 = socket$nl_crypto(0x10, 0x3, 0x15) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xd) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001040)={[{0x2b, 'net_prio'}, {0x2b, 'rdma'}, {0x2b, 'hugetlb'}, {0x2b, 'rlimit'}]}, 0x21) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e657269632900"/91], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_crypto(r15, &(0x7f0000000200)={0x0, 0x4100, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x8}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 278.652557ms ago: executing program 1 (id=999): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) recvfrom$unix(r3, &(0x7f0000000180)=""/46, 0x2e, 0x10002, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f0000000000)=@tcp6=r3, 0x1}, 0x20) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r5}, 0x18) getpeername$netlink(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x1) socket$alg(0x26, 0x5, 0x0) 185.458121ms ago: executing program 2 (id=1000): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000008001000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 126.872244ms ago: executing program 5 (id=1001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}}, 0x4041080) 108.895584ms ago: executing program 0 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3062b, 0x980c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 9.235209ms ago: executing program 2 (id=1003): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2fffffbff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008000000b000000000001190787801000000000000832b162960c6eac8294d50007b4b143b7421fd777b1c012bd14efb9f4bfcdb8f080c26a04883ad5ca2f8561f584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb3"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8f70120b0a000200aaaaaaaaaabb000004000f8006"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@broadcast, @multicast2, 0x0}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x238, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x55ba}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0xff, 0xff, 0x280b}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x120, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x9, 0xc, 0x6}, {0x5d, 0x29, 0x1, 0x8}, {0xb, 0x8, 0xa4, 0x8}, {0x0, 0x2, 0x3, 0x377e}, {0x5, 0x5, 0x5, 0x1}, {0xb67, 0xf0}]}}}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4044050}, 0x48040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r10, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 0s ago: executing program 0 (id=1004): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) kernel console output (not intermixed with test programs): small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.006525][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.040312][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.047606][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.073784][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.090699][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.097719][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.113796][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.120561][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.127777][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.135735][ T4193] Cannot create hsr debugfs directory [ 53.143726][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.150354][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.156979][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.167405][ T4184] Cannot create hsr debugfs directory [ 53.225855][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.232620][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.239149][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.246802][ T4191] Cannot create hsr debugfs directory [ 53.255327][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.262364][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.268821][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.276532][ T4185] Cannot create hsr debugfs directory [ 53.352691][ T3161] Bluetooth: hci0: command 0x0409 tx timeout [ 53.370314][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 53.376570][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 53.383331][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 53.389405][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.589721][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.602492][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.612008][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.620815][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.673032][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.686200][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.702201][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.714900][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.763290][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.796333][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.807633][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.817430][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.855537][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.885026][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.898546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.908320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.918633][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.940994][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.950068][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.958893][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.970617][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.986964][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.996701][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.006199][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.013431][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.023623][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.046105][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.066427][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.078475][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.087036][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.094305][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.104417][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.113481][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.121059][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.141479][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.155457][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.185543][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.194343][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.203657][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.214115][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.223033][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.232194][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.240453][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.249826][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.258590][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.267232][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.276293][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.285509][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.292622][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.300202][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.309187][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.317863][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.332699][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.355511][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.372087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.380732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.392673][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.399762][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.408474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.422679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.432964][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.441579][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.472288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.488169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.497523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.512849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.521332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.530155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.538600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.558102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.566826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.579895][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.593268][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.627873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.643076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.653831][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.686679][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.693954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.701479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.716448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.725164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.733987][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.741043][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.789500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.798104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.807850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.817612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.826821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.835568][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.842678][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.851304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.860245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.879130][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.907690][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.926810][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.949008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.959019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.967813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.977567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.986221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.994120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.002308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.009732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.017536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.026483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.035779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.045107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.053492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.064143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.072550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.080954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.088754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.097214][ T4191] device veth0_vlan entered promiscuous mode [ 55.108524][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.117485][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.132823][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.152859][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.161385][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.171230][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.182671][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.191142][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.198302][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.207430][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.216059][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.224694][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.231779][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.239555][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.249283][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.261644][ T4191] device veth1_vlan entered promiscuous mode [ 55.294095][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.310185][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.334244][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.345446][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.355099][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.367508][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.376728][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.383824][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.391454][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.400274][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.410894][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.418021][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.425734][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.432188][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 55.433275][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 55.439082][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 55.446003][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.459682][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 55.465887][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 55.498883][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.507610][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.525641][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.540168][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.549775][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.566873][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.579519][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.589375][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.598825][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.607729][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.616559][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.625201][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.633761][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.644875][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.653433][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.661614][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.681419][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.693347][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.719684][ T4191] device veth0_macvtap entered promiscuous mode [ 55.727952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.743031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.751467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.762755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.771339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.781426][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.810592][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.826011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.842535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.851364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.865221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.873929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.882717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.894737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.903061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.918356][ T4191] device veth1_macvtap entered promiscuous mode [ 55.946181][ T4193] device veth0_vlan entered promiscuous mode [ 55.976311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.988849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.002790][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.023678][ T4193] device veth1_vlan entered promiscuous mode [ 56.034767][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.044910][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.053734][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.065646][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.075597][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.092841][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.102339][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.111069][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.120159][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.139639][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.148942][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.159784][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.167644][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.176510][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.221279][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.236135][ T4183] device veth0_vlan entered promiscuous mode [ 56.249006][ T4193] device veth0_macvtap entered promiscuous mode [ 56.257540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.266146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.275208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.284085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.308252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.316486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.325279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.333734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.343883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.354126][ T4183] device veth1_vlan entered promiscuous mode [ 56.363729][ T4193] device veth1_macvtap entered promiscuous mode [ 56.385465][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.399289][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.407643][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.416786][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.439723][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.451216][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.462827][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.488299][ T4184] device veth0_vlan entered promiscuous mode [ 56.497842][ T4185] device veth0_vlan entered promiscuous mode [ 56.508562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.516959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.526571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.535089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.544009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.553322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.561443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.572815][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.583746][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.594700][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.611378][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.621092][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.630212][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.639250][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.655436][ T4185] device veth1_vlan entered promiscuous mode [ 56.663052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.670791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.678646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.687298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.695341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.704028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.714198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.736716][ T4184] device veth1_vlan entered promiscuous mode [ 56.746184][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.756528][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.780332][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.788952][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.797930][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.808378][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.817486][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.844199][ T4183] device veth0_macvtap entered promiscuous mode [ 56.863449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.872471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.881467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.916620][ T4183] device veth1_macvtap entered promiscuous mode [ 56.930625][ T4185] device veth0_macvtap entered promiscuous mode [ 56.952525][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.969286][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.976047][ T4184] device veth0_macvtap entered promiscuous mode [ 57.004215][ T4185] device veth1_macvtap entered promiscuous mode [ 57.013213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.021294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.029872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.039042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.047902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.063486][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.074086][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.085908][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.096406][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.107601][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.122073][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.130041][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.147244][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.158020][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.168306][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.178976][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.189036][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.199746][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.215036][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.233142][ T4184] device veth1_macvtap entered promiscuous mode [ 57.243046][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.254033][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.273892][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.284831][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.293368][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.303686][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.314748][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.327457][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.337659][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.348304][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.359516][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.370100][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.381238][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.391256][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.402262][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.412508][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.428201][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.440099][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.460332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.474335][ T559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.479922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.502475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.508300][ T559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.515720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.520283][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 57.536615][ T4295] loop2: detected capacity change from 0 to 1024 [ 57.539358][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 57.545058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.556709][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 57.565753][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.574582][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.574667][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 57.588559][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.589506][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 57.608647][ T1108] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.610434][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.630383][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.631598][ T1108] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.651258][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.661144][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.669989][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.682592][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.693407][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.703676][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.714684][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.727644][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.754531][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.795587][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.832575][ T4296] fido_id[4296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.856276][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.871288][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.900682][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.921207][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.931212][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.941984][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.952615][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.964164][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.974137][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.984609][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.996937][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.511345][ T154] hfsplus: b-tree write err: -5, ino 4 [ 58.526231][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.535840][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.548132][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.568263][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.618063][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.676170][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.712209][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.732544][ T4304] loop4: detected capacity change from 0 to 512 [ 58.736266][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.489641][ T4304] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.497526][ T4304] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.519609][ T4304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.599960][ T4314] Bluetooth: hci0: command 0x0419 tx timeout [ 59.600901][ T4304] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.5: bad orphan inode 131083 [ 59.606367][ T4314] Bluetooth: hci1: command 0x0419 tx timeout [ 59.627421][ T4314] Bluetooth: hci3: command 0x0419 tx timeout [ 59.629654][ T4304] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 59.634155][ T4314] Bluetooth: hci2: command 0x0419 tx timeout [ 59.659465][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.733261][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.779783][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.796644][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.889697][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.924756][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.072736][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.121320][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.248100][ T4314] Bluetooth: hci4: command 0x0419 tx timeout [ 60.293548][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.307163][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.325942][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.377160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.446688][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.499446][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.517012][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.530019][ T4321] loop2: detected capacity change from 0 to 128 [ 60.530162][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.604532][ T4324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 61.137196][ T4321] EXT4-fs (loop2): Test dummy encryption mode enabled [ 61.215956][ T4321] EXT4-fs (loop2): Test dummy encryption mode enabled [ 61.243323][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.253122][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.261148][ T4321] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 61.311129][ T4321] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 61.396649][ T4321] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.909694][ T4332] loop1: detected capacity change from 0 to 512 [ 62.109191][ T4337] loop4: detected capacity change from 0 to 1024 [ 62.140216][ T4332] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.2: invalid block [ 62.158528][ T4332] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.2: Invalid block bitmap block 0 in block_group 0 [ 62.176846][ T4332] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 62.186805][ T4332] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2: attempt to clear invalid blocks 983261 len 1 [ 62.213055][ T4332] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2: invalid indirect mapped block 2683928664 (level 0) [ 62.239407][ T4332] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.2: Invalid inode table block 0 in block_group 0 [ 62.956504][ T4337] EXT4-fs (loop4): inline encryption not supported [ 62.966158][ T4332] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 62.971950][ T4342] loop0: detected capacity change from 0 to 2048 [ 62.997698][ T4337] EXT4-fs (loop4): Ignoring removed orlov option [ 63.005303][ T4332] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 63.014507][ T4332] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.2: Invalid inode table block 0 in block_group 0 [ 63.030641][ T4332] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 63.055110][ T4332] EXT4-fs error (device loop1): ext4_truncate:4279: inode #13: comm syz.1.2: mark_inode_dirty error [ 63.066756][ T4332] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 63.079575][ T4332] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.2: Invalid inode table block 0 in block_group 0 [ 63.094025][ T4332] EXT4-fs (loop1): 1 truncate cleaned up [ 63.097887][ T4345] loop3: detected capacity change from 0 to 1024 [ 63.099697][ T4332] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 63.151256][ T4337] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800c019, mo2=0002] [ 63.164929][ T4337] System zones: 0-1, 3-12 [ 63.170859][ T4337] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,data_err=ignore,data_err=ignore,nobarrier,inlinecrypt,orlov,nogrpid,nombcache,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 63.198667][ T4342] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 63.207578][ T4342] UDF-fs: Scanning with blocksize 512 failed [ 63.228060][ T4342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.390492][ T4345] EXT4-fs (loop3): inline encryption not supported [ 63.411795][ T4345] EXT4-fs (loop3): Ignoring removed orlov option [ 64.332015][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 64.613012][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.622060][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.631030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.640038][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.649024][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.657993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.666959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.675919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.684872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 64.693823][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 65.240832][ T4345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800c019, mo2=0002] [ 65.312464][ T4345] System zones: 0-1, 3-12 [ 65.386642][ T4345] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data_err=ignore,data_err=ignore,nobarrier,inlinecrypt,orlov,nogrpid,nombcache,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 65.919380][ T4371] Zero length message leads to an empty skb [ 66.820381][ T4376] loop1: detected capacity change from 0 to 8 [ 66.982372][ T4378] loop0: detected capacity change from 0 to 256 [ 67.077369][ T4378] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 256) [ 67.902202][ T4382] loop3: detected capacity change from 0 to 2048 [ 67.943901][ T4382] ======================================================= [ 67.943901][ T4382] WARNING: The mand mount option has been deprecated and [ 67.943901][ T4382] and is ignored by this kernel. Remove the mand [ 67.943901][ T4382] option from the mount to silence this warning. [ 67.943901][ T4382] ======================================================= [ 68.006032][ T4386] loop4: detected capacity change from 0 to 16 [ 68.077082][ T4382] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 68.094983][ T4382] EXT4-fs (loop3): Ignoring removed nobh option [ 68.183025][ T4386] erofs: (device loop4): mounted with root inode @ nid 36. [ 68.320032][ T4388] loop0: detected capacity change from 0 to 128 [ 68.332060][ T4226] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.555209][ T4382] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,errors=remount-ro,nomblk_io_submit,nouid32,usrquota,minixdf,nobh,. Quota mode: writeback. [ 68.622598][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 68.832504][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 69.409552][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41008, setting to 1024 [ 69.452434][ T4386] erofs: (device loop4): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 69.481790][ T4226] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.521819][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.711668][ C0] sched: RT throttling activated [ 69.812277][ T4226] usb 2-1: config 0 descriptor?? [ 69.855266][ T4393] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 69.864172][ T4393] EXT4-fs warning (device loop3): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 70.214364][ T4226] usb 2-1: can't set config #0, error -71 [ 70.461551][ T4226] usb 2-1: USB disconnect, device number 2 [ 71.721124][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.727696][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.731592][ T4402] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.769889][ T4405] loop2: detected capacity change from 0 to 128 [ 71.921746][ T4402] FAT-fs (loop3): unable to read boot sector [ 72.193561][ T4408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.139204][ T4417] loop1: detected capacity change from 0 to 512 [ 73.157901][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.214042][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.664354][ T4418] loop0: detected capacity change from 0 to 1024 [ 73.845972][ T4424] loop2: detected capacity change from 0 to 128 [ 73.857354][ T4417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.26: inode #1: comm syz.1.26: iget: illegal inode # [ 73.926488][ T4417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.26: error while reading EA inode 1 err=-117 [ 74.124412][ T4417] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.133395][ T4424] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.204599][ T4424] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.607871][ T4417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.26: inode #1: comm syz.1.26: iget: illegal inode # [ 74.625810][ T4417] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.26: error while reading EA inode 1 err=-117 [ 74.682163][ T4417] EXT4-fs (loop1): 1 orphan inode deleted [ 74.716653][ T4417] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,noauto_da_alloc,usrjquota=,barrier,,errors=continue. Quota mode: none. [ 74.748834][ T4380] hfsplus: b-tree write err: -5, ino 4 [ 74.939157][ T4417] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.26: unexpected EA_INODE flag [ 75.023178][ T144] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.030123][ T4435] loop3: detected capacity change from 0 to 2048 [ 75.893772][ T4435] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 75.902934][ T4443] loop1: detected capacity change from 0 to 128 [ 75.921273][ T4435] UDF-fs: Scanning with blocksize 512 failed [ 75.958216][ T4441] loop2: detected capacity change from 0 to 2048 [ 75.964049][ T4435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.974673][ T4443] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.981504][ T4443] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.042984][ T4443] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 76.061909][ T4441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.089930][ T4443] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 76.848438][ T4443] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.907890][ T1326] cfg80211: failed to load regulatory.db [ 77.077341][ T4445] fido_id[4445]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.836343][ T4467] loop2: detected capacity change from 0 to 512 [ 78.851318][ T4467] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.369686][ T4468] loop0: detected capacity change from 0 to 16 [ 80.438229][ T4470] loop3: detected capacity change from 0 to 1024 [ 80.498367][ T4470] EXT4-fs (loop3): inline encryption not supported [ 80.542555][ T4470] EXT4-fs (loop3): Ignoring removed orlov option [ 80.637843][ T4470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800c019, mo2=0002] [ 80.658752][ T4470] System zones: 0-1, 3-12 [ 80.724017][ T4470] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data_err=ignore,data_err=ignore,nobarrier,inlinecrypt,orlov,nogrpid,nombcache,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 80.885021][ T4468] erofs: (device loop0): mounted with root inode @ nid 36. [ 81.133656][ T4478] Option 'Óƒd»xÇñõìýM–Aäùy?ø›ƒÿN£~u‚Z@ý: s®ðÌÏ;gû‰' to dns_resolver key: bad/missing value [ 81.227092][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 81.326911][ T4481] loop1: detected capacity change from 0 to 512 [ 81.467678][ T4258] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.584243][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.596795][ T4481] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.498495][ T4488] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 82.508756][ T4488] attempt to access beyond end of device [ 82.508756][ T4488] loop0: rw=524288, want=524304, limit=16 [ 83.554479][ T4197] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4100] [ 83.653227][ T4488] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 83.676997][ T26] audit: type=1800 audit(1764291926.695:2): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.38" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 83.721718][ T4258] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 84.841453][ T4258] usb 3-1: string descriptor 0 read error: -71 [ 84.855249][ T4258] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.944802][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.027945][ T4258] usb 3-1: can't set config #1, error -71 [ 85.078019][ T4258] usb 3-1: USB disconnect, device number 2 [ 85.143642][ T4504] loop0: detected capacity change from 0 to 1024 [ 85.162807][ T4501] loop1: detected capacity change from 0 to 2048 [ 85.252871][ T4506] loop3: detected capacity change from 0 to 2048 [ 85.274623][ T4501] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 85.288679][ T4504] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 85.337070][ T4506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.391248][ T4501] UDF-fs: Scanning with blocksize 512 failed [ 85.473500][ T4501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.743228][ T4322] Bluetooth: hci5: command 0x0409 tx timeout [ 89.271063][ T4511] chnl_net:caif_netlink_parms(): no params data found [ 90.648797][ T4314] Bluetooth: hci5: command 0x041b tx timeout [ 91.512794][ T4559] loop1: detected capacity change from 0 to 128 [ 92.722093][ T4258] Bluetooth: hci5: command 0x040f tx timeout [ 92.743978][ T4240] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.747383][ T4561] loop2: detected capacity change from 0 to 1024 [ 93.515392][ T4240] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.769073][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.792081][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.801253][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.518263][ T4569] fido_id[4569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.671319][ T4560] hfsplus: b-tree write err: -5, ino 4 [ 95.724224][ T1326] Bluetooth: hci5: command 0x0419 tx timeout [ 95.769802][ T4581] loop0: detected capacity change from 0 to 512 [ 96.119122][ T4581] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.748101][ T4583] loop3: detected capacity change from 0 to 512 [ 97.727934][ T4585] loop1: detected capacity change from 0 to 2048 [ 97.742973][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.755760][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.964039][ T4583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.62: inode #1: comm syz.3.62: iget: illegal inode # [ 98.619320][ T4585] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 98.635841][ T4585] EXT4-fs (loop1): Ignoring removed nobh option [ 98.656431][ T4511] device bridge_slave_0 entered promiscuous mode [ 98.669322][ T4583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.62: error while reading EA inode 1 err=-117 [ 98.744930][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.752220][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.842128][ T4583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.62: inode #1: comm syz.3.62: iget: illegal inode # [ 98.872666][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,errors=remount-ro,nomblk_io_submit,nouid32,usrquota,minixdf,nobh,. Quota mode: writeback. [ 98.882704][ T4511] device bridge_slave_1 entered promiscuous mode [ 98.952183][ T4583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.62: error while reading EA inode 1 err=-117 [ 99.114714][ T4597] loop0: detected capacity change from 0 to 128 [ 99.153932][ T4511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.176071][ T4597] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.317288][ T4511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.334671][ T4597] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.346614][ T4583] EXT4-fs (loop3): 1 orphan inode deleted [ 99.359465][ T4583] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,noauto_da_alloc,usrjquota=,barrier,,errors=continue. Quota mode: none. [ 100.074621][ T4600] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 100.082105][ T4600] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 101.103893][ T154] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.347213][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.364342][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.372924][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.927026][ T4511] team0: Port device team_slave_0 added [ 102.282752][ T4323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.648047][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.657189][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.664745][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.955871][ T4193] syz-executor (4193) used greatest stack depth: 20768 bytes left [ 103.077005][ T4511] team0: Port device team_slave_1 added [ 103.352254][ T4323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.433222][ T4623] loop1: detected capacity change from 0 to 16 [ 103.500701][ T4323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.587744][ T4623] erofs: (device loop1): mounted with root inode @ nid 36. [ 103.616141][ T4511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.646867][ T4511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.421428][ T4635] loop3: detected capacity change from 0 to 256 [ 104.435658][ T4635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 104.449534][ T4511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.497876][ T4323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.569190][ T4511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.596693][ T4511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.679654][ T4511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.966649][ T4511] device hsr_slave_0 entered promiscuous mode [ 104.982454][ T4511] device hsr_slave_1 entered promiscuous mode [ 105.143540][ T4511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.200746][ T4511] Cannot create hsr debugfs directory [ 105.951738][ T4226] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.083583][ T4511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.125914][ T4511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.148351][ T4511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.184553][ T4511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.324745][ T4226] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 106.354727][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.395196][ T4226] usb 1-1: config 0 descriptor?? [ 106.424148][ T4511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.445933][ T4226] usb-storage 1-1:0.0: USB Mass Storage device detected [ 106.457178][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.472433][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.517272][ T4511] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.534769][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.615878][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.646167][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.653326][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.696220][ T4227] usb 1-1: USB disconnect, device number 2 [ 106.707521][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.722540][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.748583][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.767640][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.774761][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.802203][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.821115][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.871040][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.899690][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.918152][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.945803][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.967936][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.072015][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.083764][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.110362][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.130783][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.160991][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.287369][ T4323] device hsr_slave_0 left promiscuous mode [ 107.313705][ T4323] device hsr_slave_1 left promiscuous mode [ 107.352372][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.492889][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.579013][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.587731][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.599671][ T4323] device bridge_slave_1 left promiscuous mode [ 107.623626][ T4683] loop1: detected capacity change from 0 to 128 [ 107.678142][ T4684] netlink: 292 bytes leftover after parsing attributes in process `syz.0.80'. [ 107.935217][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.161131][ T4683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.237521][ T4683] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.321535][ T4323] device bridge_slave_0 left promiscuous mode [ 108.334629][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.386772][ T4323] device veth1_macvtap left promiscuous mode [ 108.403103][ T4323] device veth0_macvtap left promiscuous mode [ 108.424300][ T4323] device veth1_vlan left promiscuous mode [ 108.463098][ T4323] device veth0_vlan left promiscuous mode [ 110.790334][ T4704] loop0: detected capacity change from 0 to 256 [ 110.986164][ T4704] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 112.371314][ T4323] team0 (unregistering): Port device team_slave_1 removed [ 112.447921][ T4323] team0 (unregistering): Port device team_slave_0 removed [ 112.531307][ T4323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.601289][ T4323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.859629][ T4323] bond0 (unregistering): Released all slaves [ 113.677463][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.711059][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.793843][ T4511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.116999][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.138001][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.147229][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.854395][ T4736] netlink: 292 bytes leftover after parsing attributes in process `syz.0.89'. [ 116.371879][ T4248] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.532098][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.540993][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.592875][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.695730][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.732407][ T4248] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 116.866522][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.908923][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.949680][ T4511] device veth0_vlan entered promiscuous mode [ 116.956250][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.967189][ T4248] usb 1-1: config 0 descriptor?? [ 116.999020][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.008495][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.016222][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.060124][ T4511] device veth1_vlan entered promiscuous mode [ 117.092819][ T4248] usb-storage 1-1:0.0: USB Mass Storage device detected [ 117.383370][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.446526][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.986822][ T4248] usb 1-1: USB disconnect, device number 3 [ 118.012719][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.087745][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.113599][ T4511] device veth0_macvtap entered promiscuous mode [ 118.126951][ T4511] device veth1_macvtap entered promiscuous mode [ 118.228318][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.326843][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.394749][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.416843][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.577787][ T4778] syz.1.94[4778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.577881][ T4778] syz.1.94[4778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.616387][ T4778] loop1: detected capacity change from 0 to 512 [ 118.751853][ T4781] syz.0.97[4781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.752368][ T4781] syz.0.97[4781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.795475][ T4781] syz.0.97[4781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.807249][ T4781] syz.0.97[4781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.191389][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.322175][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.363116][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.401716][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.451852][ T4394] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.484163][ T4511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.723242][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.783264][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.850963][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.859710][ T4394] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 119.894933][ T4394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.931830][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.006194][ T4394] usb 3-1: config 0 descriptor?? [ 120.012975][ T4778] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.030956][ T4778] EXT4-fs (loop1): mount failed [ 120.103740][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.185042][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.226020][ T4394] usb-storage 3-1:0.0: USB Mass Storage device detected [ 120.251284][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.278885][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.314118][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.368283][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.378398][ T4511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.394827][ T4511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.411612][ T4511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.449335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.462647][ T4394] usb 3-1: USB disconnect, device number 3 [ 120.480399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.536513][ T4511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.624494][ T4511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.670898][ T4511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.690310][ T4511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.575215][ T4819] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.661260][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.697260][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.774912][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.799552][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.145462][ T4829] loop2: detected capacity change from 0 to 512 [ 122.250252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.289445][ T4833] loop1: detected capacity change from 0 to 16 [ 122.293618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.747043][ T4833] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.813947][ T4829] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.103: inode #1: comm syz.2.103: iget: illegal inode # [ 122.939392][ T4829] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.103: error while reading EA inode 1 err=-117 [ 123.193419][ T4829] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.103: inode #1: comm syz.2.103: iget: illegal inode # [ 123.258666][ T4829] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.103: error while reading EA inode 1 err=-117 [ 123.313081][ T4842] loop5: detected capacity change from 0 to 8 [ 123.330156][ T4829] EXT4-fs (loop2): 1 orphan inode deleted [ 123.376974][ T4829] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,noauto_da_alloc,usrjquota=,barrier,,errors=continue. Quota mode: none. [ 123.582123][ T4847] netlink: 292 bytes leftover after parsing attributes in process `syz.3.106'. [ 123.892345][ T4322] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.131722][ T4829] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.103: deleted inode referenced: 15 [ 124.245213][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 124.281765][ T4258] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.503607][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 124.514758][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41008, setting to 1024 [ 124.526321][ T4322] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.536124][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.575845][ T4322] usb 6-1: config 0 descriptor?? [ 124.713183][ T4322] hub 6-1:0.0: USB hub found [ 125.132249][ T4322] hub 6-1:0.0: 1 port detected [ 125.345101][ T4258] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 125.380004][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.435688][ T4258] usb 2-1: config 0 descriptor?? [ 125.502891][ T4258] usb-storage 2-1:0.0: USB Mass Storage device detected [ 125.642908][ T4872] syz.2.111[4872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.643003][ T4872] syz.2.111[4872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.660529][ T4872] loop2: detected capacity change from 0 to 512 [ 125.837912][ T4872] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.854666][ T4872] EXT4-fs (loop2): mount failed [ 126.725791][ T4322] usb 6-1: USB disconnect, device number 2 [ 127.491480][ T4258] usb 2-1: USB disconnect, device number 3 [ 128.148652][ T4893] syz.1.115[4893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.150255][ T4893] syz.1.115[4893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.347031][ T4893] syz.1.115[4893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.360107][ T4893] syz.1.115[4893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.488826][ T4893] capability: warning: `syz.1.115' uses 32-bit capabilities (legacy support in use) [ 130.002153][ T4900] syz.2.117[4900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.002244][ T4900] syz.2.117[4900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.946865][ T4911] loop5: detected capacity change from 0 to 256 [ 132.275905][ T4911] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 256) [ 132.609809][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.618991][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.626621][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.683059][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.692214][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.699709][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.793814][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800163][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992072][ T4933] netlink: 292 bytes leftover after parsing attributes in process `syz.0.124'. [ 134.175443][ T4934] syz.1.125[4934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.175984][ T4934] syz.1.125[4934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.449720][ T4951] syz.3.128[4951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.461673][ T4951] syz.3.128[4951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.483618][ T4980] netlink: 292 bytes leftover after parsing attributes in process `syz.5.129'. [ 139.019851][ T4981] loop1: detected capacity change from 0 to 512 [ 146.225560][ T5011] loop1: detected capacity change from 0 to 512 [ 146.242100][ T5007] loop5: detected capacity change from 0 to 512 [ 146.318186][ T5007] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 146.339890][ T5011] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.138: corrupted in-inode xattr [ 146.345353][ T5007] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 146.361180][ T5007] System zones: 0-1, 15-15, 18-18, 34-34 [ 146.369991][ T5007] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.377564][ T5007] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 146.388232][ T5007] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 146.406518][ T5007] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 146.647866][ T5007] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.141: bg 0: block 40: padding at end of block bitmap is not set [ 147.172034][ T5007] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 147.722135][ T5011] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.138: couldn't read orphan inode 15 (err -117) [ 147.743244][ T5007] EXT4-fs (loop5): 1 truncate cleaned up [ 147.784285][ T5007] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 147.813018][ T5011] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_ioprio=0x0000000000000007,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 148.234814][ T5033] loop2: detected capacity change from 0 to 256 [ 151.963279][ T5052] loop1: detected capacity change from 0 to 256 [ 154.950820][ T5066] netlink: 292 bytes leftover after parsing attributes in process `syz.5.152'. [ 156.531320][ T5073] loop5: detected capacity change from 0 to 8 [ 156.940107][ T5089] loop2: detected capacity change from 0 to 512 [ 157.080121][ T5089] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 157.120003][ T5089] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 157.131797][ T4258] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.183073][ T5089] System zones: 0-1, 15-15, 18-18, 34-34 [ 157.223380][ T5089] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.266328][ T5089] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 157.324337][ T5089] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.342611][ T5089] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 157.374157][ T5089] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.157: bg 0: block 40: padding at end of block bitmap is not set [ 157.396672][ T4258] usb 6-1: Using ep0 maxpacket: 32 [ 157.416094][ T5089] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 157.443089][ T5089] EXT4-fs (loop2): 1 truncate cleaned up [ 157.458843][ T5089] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 157.559493][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 157.591019][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41008, setting to 1024 [ 157.624541][ T4258] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.651094][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.684273][ T4258] usb 6-1: config 0 descriptor?? [ 157.747831][ T4258] hub 6-1:0.0: USB hub found [ 157.889879][ T5113] loop2: detected capacity change from 0 to 16 [ 157.954308][ T4258] hub 6-1:0.0: 1 port detected [ 157.999567][ T5113] erofs: (device loop2): mounted with root inode @ nid 36. [ 158.186993][ T4258] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 158.250785][ T4258] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 158.803273][ T5124] syz.2.163[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.803366][ T5124] syz.2.163[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.819741][ T5124] syz.2.163[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.831083][ T5124] syz.2.163[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.572039][ T4258] usbhid 6-1:0.0: can't add hid device: -71 [ 159.685014][ T5134] loop1: detected capacity change from 0 to 256 [ 159.852301][ T5134] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 159.974768][ T5134] attempt to access beyond end of device [ 159.974768][ T5134] loop1: rw=524288, want=408, limit=256 [ 159.995610][ T5134] attempt to access beyond end of device [ 159.995610][ T5134] loop1: rw=524288, want=664, limit=256 [ 160.007349][ T5134] attempt to access beyond end of device [ 160.007349][ T5134] loop1: rw=0, want=288, limit=256 [ 160.092811][ T26] audit: type=1800 audit(1764292003.035:3): pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.164" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 160.208450][ T4258] usbhid: probe of 6-1:0.0 failed with error -71 [ 161.202085][ T5146] loop5: detected capacity change from 0 to 256 [ 162.730722][ T4258] usb 6-1: USB disconnect, device number 3 [ 165.306372][ T5170] loop1: detected capacity change from 0 to 256 [ 166.713277][ T4226] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 168.698343][ T5170] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 170.531756][ T4248] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.141735][ T4248] usb 2-1: Using ep0 maxpacket: 32 [ 171.421778][ T4248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 171.465657][ T4248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41008, setting to 1024 [ 171.549056][ T5204] syz.3.180[5204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.549621][ T5204] syz.3.180[5204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.754982][ T4248] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.029666][ T4248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.051522][ T4248] usb 2-1: config 0 descriptor?? [ 172.131871][ T4248] usb 2-1: can't set config #0, error -71 [ 172.159095][ T4248] usb 2-1: USB disconnect, device number 4 [ 172.298778][ T5221] syz.1.183[5221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.298869][ T5221] syz.1.183[5221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.556115][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.583128][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.591462][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.388122][ T5252] syz.5.188[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.388213][ T5252] syz.5.188[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.811301][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.658458][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 175.712289][ T5252] syz.5.188[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.712387][ T5252] syz.5.188[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.944576][ T4248] Bluetooth: hci1: command 0x0406 tx timeout [ 176.467738][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 176.479509][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41008, setting to 1024 [ 176.490846][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.499928][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.509636][ T21] usb 4-1: config 0 descriptor?? [ 176.546154][ T4248] Bluetooth: hci2: command 0x0406 tx timeout [ 176.554033][ T4248] Bluetooth: hci3: command 0x0406 tx timeout [ 176.582755][ T21] hub 4-1:0.0: USB hub found [ 176.619401][ T4248] Bluetooth: hci0: command 0x0406 tx timeout [ 176.863618][ T21] hub 4-1:0.0: 1 port detected [ 178.737647][ T21] usb 4-1: USB disconnect, device number 3 [ 179.573804][ T5289] loop1: detected capacity change from 0 to 512 [ 179.660427][ T5289] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.202: corrupted in-inode xattr [ 179.728477][ T5289] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.202: couldn't read orphan inode 15 (err -117) [ 179.755437][ T5289] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_ioprio=0x0000000000000007,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 181.922420][ T4248] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.572302][ T4248] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 182.640599][ T4248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.396449][ T4248] usb 2-1: config 0 descriptor?? [ 183.462792][ T4248] usb-storage 2-1:0.0: USB Mass Storage device detected [ 183.734393][ T21] usb 2-1: USB disconnect, device number 5 [ 183.808440][ T5335] loop5: detected capacity change from 0 to 8 [ 184.367544][ T4248] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 184.621872][ T4248] usb 6-1: Using ep0 maxpacket: 32 [ 184.743021][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 184.781337][ T4248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41008, setting to 1024 [ 184.823654][ T4248] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.866288][ T4248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.929577][ T4248] usb 6-1: config 0 descriptor?? [ 184.993974][ T4248] hub 6-1:0.0: USB hub found [ 185.212868][ T4248] hub 6-1:0.0: 1 port detected [ 185.388962][ T5367] loop1: detected capacity change from 0 to 512 [ 185.597052][ T5367] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 185.752930][ T5367] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 185.801402][ T4248] usb 6-1: USB disconnect, device number 4 [ 185.974434][ T5367] System zones: 0-1, 15-15, 18-18, 34-34 [ 186.317890][ T5367] EXT4-fs (loop1): orphan cleanup on readonly fs [ 186.379702][ T5367] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 186.398741][ T5367] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 186.420362][ T5367] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 186.428044][ T5367] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.216: bg 0: block 40: padding at end of block bitmap is not set [ 186.480096][ T5367] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 186.532025][ T5367] EXT4-fs (loop1): 1 truncate cleaned up [ 186.557214][ T5367] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 186.983259][ T5408] loop5: detected capacity change from 0 to 512 [ 187.095004][ T5409] loop1: detected capacity change from 0 to 256 [ 187.113290][ T5408] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 187.121251][ T5408] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 187.157065][ T5408] System zones: 0-1, 15-15, 18-18, 34-34 [ 187.172734][ T5408] EXT4-fs (loop5): orphan cleanup on readonly fs [ 187.179410][ T5408] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 187.201793][ T5408] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.223104][ T5409] loop1: detected capacity change from 0 to 256 [ 187.242614][ T5409] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 187.311892][ T5408] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 187.332025][ T5408] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.223: bg 0: block 40: padding at end of block bitmap is not set [ 187.368345][ T5408] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 187.378584][ T5408] EXT4-fs (loop5): 1 truncate cleaned up [ 187.400189][ T5408] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 187.596241][ T5420] loop5: detected capacity change from 0 to 1024 [ 187.662702][ T5420] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 187.966253][ T5429] loop1: detected capacity change from 0 to 512 [ 188.116391][ T5429] EXT4-fs (loop1): 1 orphan inode deleted [ 188.128776][ T5429] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.148810][ T5429] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.732886][ T5449] loop1: detected capacity change from 0 to 512 [ 189.797974][ T5449] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 189.811973][ T5449] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 189.886312][ T5449] System zones: 0-1, 15-15, 18-18, 34-34 [ 189.941418][ T5449] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.951294][ T5449] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 189.971087][ T5449] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 190.039177][ T5449] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 190.087951][ T5449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.233: bg 0: block 40: padding at end of block bitmap is not set [ 190.153835][ T5449] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 190.187637][ T5449] EXT4-fs (loop1): 1 truncate cleaned up [ 190.214845][ T5449] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 190.238202][ T5471] loop5: detected capacity change from 0 to 512 [ 190.362051][ T5471] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 190.410037][ T5471] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 190.478444][ T5471] System zones: 0-1, 15-15, 18-18, 34-34 [ 190.485584][ T5471] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.492972][ T5471] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 190.505112][ T5486] syz.3.242[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.505205][ T5486] syz.3.242[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.530705][ T5471] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 190.632494][ T5471] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 190.731778][ T5471] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.238: bg 0: block 40: padding at end of block bitmap is not set [ 190.797126][ T5471] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 191.486226][ T5471] EXT4-fs (loop5): 1 truncate cleaned up [ 191.586623][ T5471] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 192.689030][ T5522] loop5: detected capacity change from 0 to 512 [ 192.764245][ T5522] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.249: inode #1: comm syz.5.249: iget: illegal inode # [ 192.785662][ T5522] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.249: error while reading EA inode 1 err=-117 [ 192.804331][ T5522] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.249: inode #1: comm syz.5.249: iget: illegal inode # [ 192.846434][ T5522] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.249: error while reading EA inode 1 err=-117 [ 192.939347][ T5522] EXT4-fs (loop5): 1 orphan inode deleted [ 192.951807][ T5522] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,noauto_da_alloc,usrjquota=,barrier,,errors=continue. Quota mode: none. [ 193.092405][ T5522] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.249: deleted inode referenced: 15 [ 193.308578][ T5549] syz.5.255[5549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.308669][ T5549] syz.5.255[5549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.326936][ T5549] loop5: detected capacity change from 0 to 512 [ 193.367904][ T5549] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 193.384337][ T5549] EXT4-fs (loop5): mount failed [ 193.579007][ T5560] loop5: detected capacity change from 0 to 512 [ 193.588855][ T5562] loop1: detected capacity change from 0 to 512 [ 193.668355][ T5562] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 193.677080][ T5562] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 193.708887][ T5560] EXT4-fs (loop5): 1 orphan inode deleted [ 193.719887][ T5562] System zones: 0-1, 15-15, 18-18, 34-34 [ 193.731148][ T5560] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.748664][ T5562] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.759062][ T5560] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.775406][ T5562] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 193.785839][ T5562] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 193.800846][ T5562] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 193.814248][ T5562] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.259: bg 0: block 40: padding at end of block bitmap is not set [ 193.908859][ T5562] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 193.938494][ T5562] EXT4-fs (loop1): 1 truncate cleaned up [ 193.955747][ T5562] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 194.155280][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.164326][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.943925][ T5587] syz.0.265[5587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.944425][ T5587] syz.0.265[5587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.986680][ T5586] loop5: detected capacity change from 0 to 512 [ 195.686040][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.266: inode #1: comm syz.5.266: iget: illegal inode # [ 195.826062][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.266: error while reading EA inode 1 err=-117 [ 195.892485][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.266: inode #1: comm syz.5.266: iget: illegal inode # [ 195.941524][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.266: error while reading EA inode 1 err=-117 [ 195.989668][ T5595] loop1: detected capacity change from 0 to 512 [ 196.245846][ T5586] EXT4-fs (loop5): 1 orphan inode deleted [ 196.350501][ T5586] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,noauto_da_alloc,usrjquota=,barrier,,errors=continue. Quota mode: none. [ 197.139424][ T5586] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.266: deleted inode referenced: 15 [ 197.725450][ T5595] EXT4-fs (loop1): Test dummy encryption mode enabled [ 197.822966][ T5595] EXT4-fs error (device loop1): __ext4_iget:4908: inode #11: block 1: comm syz.1.267: invalid block [ 197.838234][ T5595] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.267: couldn't read orphan inode 11 (err -117) [ 197.853665][ T5595] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 197.901429][ T5595] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.267: Directory hole found for htree leaf block 0 [ 199.657139][ T5614] syz.0.272[5614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.657873][ T5614] syz.0.272[5614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.859573][ T5614] syz.0.272[5614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.949159][ T5614] syz.0.272[5614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.281261][ T5622] loop5: detected capacity change from 0 to 128 [ 200.333590][ T26] audit: type=1326 audit(1764292043.275:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 200.420967][ T26] audit: type=1326 audit(1764292043.285:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 200.586266][ T26] audit: type=1326 audit(1764292043.285:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 201.775040][ T26] audit: type=1326 audit(1764292043.285:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 202.544703][ T26] audit: type=1326 audit(1764292043.285:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 202.567130][ T26] audit: type=1326 audit(1764292043.285:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 202.611786][ T26] audit: type=1326 audit(1764292043.285:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 203.725111][ T26] audit: type=1326 audit(1764292043.285:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 203.750699][ T26] audit: type=1326 audit(1764292043.295:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 204.103720][ T26] audit: type=1326 audit(1764292043.295:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff834a6a749 code=0x7ffc0000 [ 204.163968][ T5622] EXT4-fs: failed to create workqueue [ 204.169388][ T5622] EXT4-fs (loop5): mount failed [ 204.714299][ T5655] loop1: detected capacity change from 0 to 512 [ 206.934778][ T5655] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.215313][ T5655] EXT4-fs: failed to create workqueue [ 207.220734][ T5655] EXT4-fs (loop1): mount failed [ 207.694498][ T5675] syz.5.290[5675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.695012][ T5675] syz.5.290[5675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.720820][ T5675] syz.5.290[5675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.732793][ T5675] syz.5.290[5675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.999800][ T5680] loop1: detected capacity change from 0 to 512 [ 209.210501][ T5680] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 209.228799][ T5680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 209.268585][ T5680] System zones: 0-1, 15-15, 18-18, 34-34 [ 209.275527][ T5680] EXT4-fs (loop1): orphan cleanup on readonly fs [ 209.285377][ T5680] __quota_error: 57 callbacks suppressed [ 209.285394][ T5680] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 209.706275][ T26] audit: type=1326 audit(1764292052.685:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.550464][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 212.572004][ T5680] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.697755][ T5680] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 212.712260][ T26] audit: type=1326 audit(1764292052.685:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.761201][ T5680] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.291: bg 0: block 40: padding at end of block bitmap is not set [ 212.784199][ T5680] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 212.798673][ T26] audit: type=1326 audit(1764292052.695:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.827088][ T5680] EXT4-fs (loop1): 1 truncate cleaned up [ 212.834356][ T5680] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ca6,,errors=continue. Quota mode: writeback. [ 212.854144][ T26] audit: type=1326 audit(1764292052.695:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.900709][ T26] audit: type=1326 audit(1764292052.695:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.930506][ T26] audit: type=1326 audit(1764292052.695:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.959131][ T26] audit: type=1326 audit(1764292052.695:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.992350][ T26] audit: type=1326 audit(1764292052.695:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 212.993164][ T5699] loop5: detected capacity change from 0 to 8 [ 213.032959][ T26] audit: type=1326 audit(1764292052.695:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd46f59749 code=0x7ffc0000 [ 215.419587][ T5733] syz.1.308[5733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.421167][ T5733] syz.1.308[5733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.370760][ T5738] loop1: detected capacity change from 0 to 512 [ 218.598082][ T5750] syz.5.310[5750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.598174][ T5750] syz.5.310[5750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.629558][ T5738] EXT4-fs (loop1): 1 orphan inode deleted [ 218.700576][ T5738] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.718112][ T5754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.315'. [ 218.772363][ T5738] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.911439][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 219.972089][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 219.991379][ T5788] team0: Port device batadv1 added [ 220.107214][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 220.116372][ T5799] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.224322][ T5805] tipc: Enabling of bearer rejected, failed to enable media [ 220.500460][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 220.527831][ T5821] device team_slave_0 entered promiscuous mode [ 220.534341][ T5821] device team_slave_1 entered promiscuous mode [ 220.557745][ T5821] device macvtap1 entered promiscuous mode [ 220.579795][ T5821] device team0 entered promiscuous mode [ 220.599393][ T5821] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 220.686070][ T5830] device macvtap1 left promiscuous mode [ 220.715450][ T5830] device team0 left promiscuous mode [ 220.856396][ T5846] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.909241][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.950525][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.977695][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.079335][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.102497][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.125923][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.159640][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.178334][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.199136][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.245583][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.262470][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 221.281685][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.313679][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.354686][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.391117][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.431478][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.451700][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.472685][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.494918][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.527993][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.695869][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 221.953448][ T5875] kthread_run failed with err -4 [ 222.072893][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 222.329192][ T5896] tipc: Enabling of bearer rejected, failed to enable media [ 222.596509][ T5910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.970331][ T5923] syz.2.374 uses obsolete (PF_INET,SOCK_PACKET) [ 223.071963][ T5928] syz.0.376[5928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.072053][ T5928] syz.0.376[5928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.128462][ T5928] netlink: 'syz.0.376': attribute type 12 has an invalid length. [ 223.846258][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'. [ 225.076790][ T6021] device macvtap1 entered promiscuous mode [ 225.091418][ T6021] device dummy0 entered promiscuous mode [ 225.138217][ T6021] team0: Device macvtap1 failed to register rx_handler [ 225.162145][ T6021] device dummy0 left promiscuous mode [ 225.317535][ T6031] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 225.477600][ T6031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.040106][ T6064] netlink: 200 bytes leftover after parsing attributes in process `syz.5.426'. [ 226.113434][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.426'. [ 226.956125][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 226.984640][ T6114] device bridge_slave_1 left promiscuous mode [ 227.003331][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.052652][ T6114] device bridge_slave_0 left promiscuous mode [ 227.059655][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.880792][ T6160] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 227.927235][ T6160] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.959260][ T6157] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 228.024742][ T6157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.053806][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 228.072188][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.465'. [ 228.151273][ T6174] device hsr_slave_1 left promiscuous mode [ 228.556901][ T6209] netlink: 256 bytes leftover after parsing attributes in process `syz.1.477'. [ 228.567159][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.477'. [ 229.239613][ T6229] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 229.240847][ T6228] Illegal XDP return value 4294967294, expect packet loss! [ 229.376768][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.487'. [ 229.414452][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 229.446656][ T6241] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 229.474277][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.492611][ T6241] device bridge_slave_1 left promiscuous mode [ 229.498995][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.548855][ T6241] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 229.591475][ T6241] syz.3.488 (6241) used greatest stack depth: 20480 bytes left [ 229.764347][ T6255] device bridge_slave_1 left promiscuous mode [ 229.782129][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.830797][ T6295] TCP: TCP_TX_DELAY enabled [ 230.985693][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 231.012320][ T6303] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 231.024046][ T6302] netlink: 'syz.2.512': attribute type 4 has an invalid length. [ 231.631157][ T6333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.527'. [ 231.671286][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 232.028636][ T6349] tipc: Enabling of bearer rejected, failed to enable media [ 232.213409][ T6353] device syzkaller0 entered promiscuous mode [ 232.256182][ T6353] tipc: Started in network mode [ 232.264780][ T6353] tipc: Node identity 3295e21176ea, cluster identity 4711 [ 232.282213][ T6353] tipc: Enabled bearer , priority 0 [ 232.343554][ T6353] tipc: Resetting bearer [ 232.375867][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 232.396816][ T6352] tipc: Resetting bearer [ 232.428600][ T6352] tipc: Disabling bearer [ 232.710213][ T6376] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 232.904556][ T6380] IPVS: Scheduler module ip_vs_sip not found [ 233.105760][ T6400] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 233.127539][ T6400] netlink: 3 bytes leftover after parsing attributes in process `syz.2.551'. [ 233.307629][ T6410] netlink: 277 bytes leftover after parsing attributes in process `syz.0.554'. [ 233.782199][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 234.130954][ T6440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.565'. [ 234.377508][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.397771][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.437758][ T6449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.757656][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 234.803146][ T6468] device bond0 entered promiscuous mode [ 234.831771][ T6468] device bond_slave_0 entered promiscuous mode [ 234.839388][ T6468] device bond_slave_1 entered promiscuous mode [ 234.858849][ T6468] device bridge_slave_1 entered promiscuous mode [ 234.883529][ T6468] device geneve0 entered promiscuous mode [ 234.891089][ T6468] device hsr1 entered promiscuous mode [ 234.983094][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 235.317746][ T6477] delete_channel: no stack [ 235.654942][ T6525] netlink: 48 bytes leftover after parsing attributes in process `syz.2.597'. [ 235.730306][ T6529] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 235.745987][ T6529] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 236.155272][ T6554] netlink: 32 bytes leftover after parsing attributes in process `syz.2.609'. [ 236.675135][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.621'. [ 236.764194][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 236.795326][ T6585] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.827297][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 236.886281][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.925191][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.944644][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.974847][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.034815][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 237.068926][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.096585][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.118342][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.144160][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.251099][ T6594] device syzkaller0 entered promiscuous mode [ 238.614200][ T6639] infiniband !yz!: set active [ 238.629822][ T6639] infiniband !yz!: added team_slave_0 [ 238.743329][ T6639] RDS/IB: !yz!: added [ 238.748507][ T6639] smc: adding ib device !yz! with port count 1 [ 238.755486][ T6639] smc: ib device !yz! port 1 has pnetid [ 238.782975][ T6650] tipc: Started in network mode [ 238.791044][ T6650] tipc: Node identity 5637fb976dca, cluster identity 4711 [ 238.837527][ T6650] tipc: Enabled bearer , priority 0 [ 238.896518][ T6651] device syzkaller0 entered promiscuous mode [ 238.988583][ T6650] tipc: Resetting bearer [ 239.049161][ T6649] tipc: Resetting bearer [ 239.090069][ T6649] tipc: Disabling bearer [ 239.777938][ T6680] device team0 entered promiscuous mode [ 239.807780][ T6680] device team_slave_0 entered promiscuous mode [ 239.821812][ T6680] device team_slave_1 entered promiscuous mode [ 239.845048][ T6680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.325123][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 241.940463][ T6758] device syzkaller1 entered promiscuous mode [ 242.026088][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'. [ 242.071203][ T6773] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 242.182038][ T6773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.295798][ T6779] bond2: (slave geneve2): making interface the new active one [ 242.307542][ T6779] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 242.329695][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.683'. [ 242.397679][ T6779] syz.1.688 (6779) used greatest stack depth: 20200 bytes left [ 242.441691][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 243.212101][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 244.087559][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'. [ 244.170845][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.206021][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.227098][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.282431][ T6856] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 244.339801][ T6856] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 244.413170][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.438181][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.457188][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.469456][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.489516][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.509580][ T6856] virt_wifi0 speed is unknown, defaulting to 1000 [ 245.171739][ T6895] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.808384][ T6932] smc: net device bond0 applied user defined pnetid SYZ0 [ 245.970922][ T6937] netlink: set zone limit has 8 unknown bytes [ 246.026740][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'. [ 246.151869][ T1108] Bluetooth: hci5: command 0x0405 tx timeout [ 246.214826][ T4298] infiniband !yz!: set active [ 246.258608][ T4298] infiniband !yz!: set active [ 246.456939][ T6955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.746'. [ 246.502704][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 246.912574][ T6977] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 248.329709][ T7023] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.825102][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 249.854000][ T7102] netlink: set zone limit has 8 unknown bytes [ 249.931858][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 249.960989][ T7105] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 250.115009][ T7105] device bond1 entered promiscuous mode [ 250.188950][ T7105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.295930][ T7113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.323574][ T7113] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 250.358164][ T7113] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 250.389020][ T7113] bond1: (slave gre1): Opening slave failed [ 250.435925][ T7085] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.746090][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 250.960328][ T7138] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.159955][ T7156] tipc: Enabling of bearer rejected, failed to enable media [ 251.704499][ T7181] device geneve3 entered promiscuous mode [ 251.781843][ T7183] netlink: 192 bytes leftover after parsing attributes in process `syz.2.831'. [ 252.105818][ T7195] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 252.159127][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.189238][ T7195] device bridge_slave_1 left promiscuous mode [ 252.201917][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.224488][ T7195] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 252.246004][ T7182] virt_wifi0 speed is unknown, defaulting to 1000 [ 252.297360][ T7198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.319362][ T7198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.328287][ T7198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.375895][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.394608][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.419191][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.437753][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.460826][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.492673][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.504854][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.515701][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.528214][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.545914][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.559002][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.573883][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.585184][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.595963][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.612053][ T7198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.627861][ T7198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.885763][ T7212] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 253.969152][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.863'. [ 254.350703][ T7278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.873'. [ 254.447691][ T7284] netlink: 7 bytes leftover after parsing attributes in process `syz.5.877'. [ 254.492856][ T7284] netlink: 7 bytes leftover after parsing attributes in process `syz.5.877'. [ 255.275066][ T7337] tipc: Enabling of bearer rejected, failed to enable media [ 255.410658][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 255.555115][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'. [ 255.600858][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.607325][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.927323][ T7344] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.037411][ T7368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 256.056422][ T7368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 256.085700][ T7368] device dummy0 entered promiscuous mode [ 256.136379][ T7368] device team0 entered promiscuous mode [ 256.152184][ T7368] device team_slave_0 entered promiscuous mode [ 256.171954][ T7368] device team_slave_1 entered promiscuous mode [ 256.211805][ T7368] device batadv1 entered promiscuous mode [ 256.303780][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 258.438595][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 258.793571][ T7432] tipc: Enabled bearer , priority 0 [ 258.841967][ T7424] device syzkaller0 entered promiscuous mode [ 258.913088][ T7424] tipc: Resetting bearer [ 258.929782][ T7442] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 258.956058][ T7419] tipc: Resetting bearer [ 258.970965][ T7419] tipc: Disabling bearer [ 259.010060][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.937'. [ 259.031964][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.937'. [ 259.061275][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 259.091705][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 259.162188][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 259.193491][ T7454] device hsr_slave_0 left promiscuous mode [ 259.204206][ T7454] device hsr_slave_1 left promiscuous mode [ 259.264843][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.320048][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.356072][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.405632][ T7459] device bridge_slave_0 left promiscuous mode [ 259.427979][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.450145][ T7459] device bridge_slave_1 left promiscuous mode [ 259.461026][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.474796][ T7459] bond0: (slave bond_slave_0): Releasing backup interface [ 259.492353][ T7459] bond0: (slave bond_slave_1): Releasing backup interface [ 259.510177][ T7459] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 259.517709][ T7459] rdma_rxe: ignoring netdev event = 26 for team_slave_0 [ 259.529090][ T7459] rdma_rxe: ignoring netdev event = 21 for team_slave_0 [ 259.540315][ T7459] device team_slave_0 left promiscuous mode [ 259.554744][ T7459] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 259.596445][ T7459] infiniband !yz!: set down [ 259.606004][ T7459] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 259.613813][ T7459] rdma_rxe: ignoring netdev event = 9 for team_slave_0 [ 259.621158][ T7459] rdma_rxe: ignoring netdev event = 8 for team_slave_0 [ 259.629312][ T7459] team0: Port device team_slave_0 removed [ 259.638658][ T7459] device team_slave_1 left promiscuous mode [ 259.656632][ T7459] team0: Port device team_slave_1 removed [ 259.664121][ T7459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.671931][ T7459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.680314][ T7459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.687898][ T7459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.702665][ T7459] bond2: (slave geneve2): Releasing active interface [ 261.037546][ T7572] xt_TCPMSS: Only works on TCP SYN packets [ 261.053296][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 261.691475][ T7591] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.843659][ T7570] syz.0.983 (7570) used greatest stack depth: 16736 bytes left [ 261.957930][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 262.201980][ T7636] [ 262.204353][ T7636] ====================================================== [ 262.211373][ T7636] WARNING: possible circular locking dependency detected [ 262.218408][ T7636] syzkaller #0 Not tainted [ 262.222822][ T7636] ------------------------------------------------------ [ 262.229831][ T7636] syz.2.1003/7636 is trying to acquire lock: [ 262.235808][ T7636] ffff888029f1caa0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 262.245387][ T7636] [ 262.245387][ T7636] but task is already holding lock: [ 262.252744][ T7636] ffffc900018797f0 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 262.262332][ T7636] [ 262.262332][ T7636] which lock already depends on the new lock. [ 262.262332][ T7636] [ 262.272738][ T7636] [ 262.272738][ T7636] the existing dependency chain (in reverse order) is: [ 262.281765][ T7636] [ 262.281765][ T7636] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 262.289770][ T7636] _raw_spin_lock+0x2a/0x40 [ 262.294804][ T7636] __inet_hash+0xe3/0x960 [ 262.299661][ T7636] inet_csk_listen_start+0x22f/0x320 [ 262.305476][ T7636] inet_listen+0x2e1/0x590 [ 262.310422][ T7636] __sys_listen+0x19d/0x220 [ 262.315454][ T7636] __x64_sys_listen+0x56/0x60 [ 262.320790][ T7636] do_syscall_64+0x4c/0xa0 [ 262.325742][ T7636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.332181][ T7636] [ 262.332181][ T7636] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 262.339920][ T7636] __lock_acquire+0x2c33/0x7c60 [ 262.345302][ T7636] lock_acquire+0x197/0x3f0 [ 262.350336][ T7636] mptcp_diag_get_info+0x1db/0x990 [ 262.355974][ T7636] inet_sk_diag_fill+0xef6/0x1b50 [ 262.361557][ T7636] mptcp_diag_dump+0xcca/0x1290 [ 262.367126][ T7636] __inet_diag_dump+0x1f6/0x380 [ 262.372509][ T7636] netlink_dump+0x676/0xcd0 [ 262.377537][ T7636] __netlink_dump_start+0x523/0x700 [ 262.383269][ T7636] inet_diag_handler_cmd+0x1be/0x290 [ 262.389214][ T7636] sock_diag_rcv_msg+0x164/0x3e0 [ 262.394691][ T7636] netlink_rcv_skb+0x1e0/0x430 [ 262.400067][ T7636] sock_diag_rcv+0x26/0x40 [ 262.405007][ T7636] netlink_unicast+0x774/0x920 [ 262.410297][ T7636] netlink_sendmsg+0x8ab/0xbc0 [ 262.415592][ T7636] sock_write_iter+0x29c/0x380 [ 262.420879][ T7636] do_iter_readv_writev+0x497/0x600 [ 262.426600][ T7636] do_iter_write+0x205/0x7b0 [ 262.431710][ T7636] do_writev+0x254/0x410 [ 262.436476][ T7636] do_syscall_64+0x4c/0xa0 [ 262.441411][ T7636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.447832][ T7636] [ 262.447832][ T7636] other info that might help us debug this: [ 262.447832][ T7636] [ 262.458067][ T7636] Possible unsafe locking scenario: [ 262.458067][ T7636] [ 262.465515][ T7636] CPU0 CPU1 [ 262.470875][ T7636] ---- ---- [ 262.476238][ T7636] lock(&h->lhash2[i].lock); [ 262.480914][ T7636] lock(sk_lock-AF_INET6); [ 262.487942][ T7636] lock(&h->lhash2[i].lock); [ 262.495235][ T7636] lock(sk_lock-AF_INET6); [ 262.499737][ T7636] [ 262.499737][ T7636] *** DEADLOCK *** [ 262.499737][ T7636] [ 262.507983][ T7636] 6 locks held by syz.2.1003/7636: [ 262.513096][ T7636] #0: ffffffff8d242568 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 262.522439][ T7636] #1: ffffffff8d242428 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 262.532806][ T7636] #2: ffff888061cd4698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 262.543527][ T7636] #3: ffffffff8d31c948 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 262.553809][ T7636] #4: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 262.563133][ T7636] #5: ffffc900018797f0 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 262.573152][ T7636] [ 262.573152][ T7636] stack backtrace: [ 262.579049][ T7636] CPU: 0 PID: 7636 Comm: syz.2.1003 Not tainted syzkaller #0 [ 262.586420][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.596489][ T7636] Call Trace: [ 262.599768][ T7636] [ 262.602698][ T7636] dump_stack_lvl+0x168/0x230 [ 262.607385][ T7636] ? load_image+0x3b0/0x3b0 [ 262.611897][ T7636] ? show_regs_print_info+0x20/0x20 [ 262.617105][ T7636] ? print_circular_bug+0x12b/0x1a0 [ 262.622303][ T7636] check_noncircular+0x274/0x310 [ 262.627243][ T7636] ? add_chain_block+0x940/0x940 [ 262.632186][ T7636] ? lockdep_lock+0xdc/0x1e0 [ 262.636878][ T7636] ? mark_lock+0x94/0x320 [ 262.641214][ T7636] __lock_acquire+0x2c33/0x7c60 [ 262.646078][ T7636] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 262.652065][ T7636] ? verify_lock_unused+0x140/0x140 [ 262.657268][ T7636] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 262.663252][ T7636] ? verify_lock_unused+0x140/0x140 [ 262.668453][ T7636] ? __local_bh_enable_ip+0xcb/0x1b0 [ 262.673737][ T7636] ? __local_bh_enable_ip+0x12a/0x1b0 [ 262.679108][ T7636] ? lockdep_hardirqs_on+0x94/0x140 [ 262.684315][ T7636] ? __local_bh_enable_ip+0x12a/0x1b0 [ 262.689686][ T7636] ? _local_bh_enable+0xa0/0xa0 [ 262.694538][ T7636] ? skb_put+0x117/0x210 [ 262.698790][ T7636] lock_acquire+0x197/0x3f0 [ 262.703314][ T7636] ? inet_sk_diag_fill+0xef6/0x1b50 [ 262.708523][ T7636] ? read_lock_is_recursive+0x10/0x10 [ 262.713907][ T7636] ? rcu_lock_release+0x5/0x20 [ 262.718679][ T7636] ? __lock_acquire+0x7c60/0x7c60 [ 262.723704][ T7636] ? inet_sk_diag_fill+0xef6/0x1b50 [ 262.728904][ T7636] mptcp_diag_get_info+0x1db/0x990 [ 262.734013][ T7636] ? inet_sk_diag_fill+0xef6/0x1b50 [ 262.739218][ T7636] inet_sk_diag_fill+0xef6/0x1b50 [ 262.744236][ T7636] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 262.749937][ T7636] ? do_raw_spin_lock+0x11d/0x280 [ 262.754948][ T7636] ? inet_diag_bc_sk+0x187/0x10c0 [ 262.759955][ T7636] ? preempt_schedule_thunk+0x16/0x18 [ 262.765314][ T7636] mptcp_diag_dump+0xcca/0x1290 [ 262.770149][ T7636] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 262.776721][ T7636] __inet_diag_dump+0x1f6/0x380 [ 262.781555][ T7636] netlink_dump+0x676/0xcd0 [ 262.786048][ T7636] ? netlink_lookup+0x1d0/0x1d0 [ 262.790880][ T7636] ? __inet_diag_dump_start+0x805/0x970 [ 262.796407][ T7636] __netlink_dump_start+0x523/0x700 [ 262.801603][ T7636] inet_diag_handler_cmd+0x1be/0x290 [ 262.806881][ T7636] ? rcu_lock_release+0x20/0x20 [ 262.811717][ T7636] ? inet_diag_handler_get_info+0xb80/0xb80 [ 262.817593][ T7636] ? inet_diag_dump_start+0x20/0x20 [ 262.822772][ T7636] ? inet_diag_dump+0x50/0x50 [ 262.827434][ T7636] ? dev_queue_xmit+0x20/0x20 [ 262.832089][ T7636] ? memcpy+0x3c/0x60 [ 262.836061][ T7636] ? sock_diag_rcv+0x17/0x40 [ 262.840652][ T7636] ? sock_diag_rcv+0x17/0x40 [ 262.845221][ T7636] ? rcu_lock_release+0x20/0x20 [ 262.850052][ T7636] sock_diag_rcv_msg+0x164/0x3e0 [ 262.854968][ T7636] netlink_rcv_skb+0x1e0/0x430 [ 262.859709][ T7636] ? sock_diag_bind+0xa0/0xa0 [ 262.864365][ T7636] ? netlink_ack+0xb60/0xb60 [ 262.868944][ T7636] ? __lock_acquire+0x7c60/0x7c60 [ 262.873957][ T7636] sock_diag_rcv+0x26/0x40 [ 262.878350][ T7636] netlink_unicast+0x774/0x920 [ 262.883101][ T7636] netlink_sendmsg+0x8ab/0xbc0 [ 262.887847][ T7636] ? netlink_getsockopt+0x560/0x560 [ 262.893032][ T7636] ? aa_sock_msg_perm+0x94/0x150 [ 262.897958][ T7636] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.903321][ T7636] ? security_socket_sendmsg+0x7c/0xa0 [ 262.908758][ T7636] sock_write_iter+0x29c/0x380 [ 262.913509][ T7636] ? sock_read_iter+0x340/0x340 [ 262.918348][ T7636] do_iter_readv_writev+0x497/0x600 [ 262.923528][ T7636] ? generic_file_rw_checks+0x280/0x280 [ 262.929061][ T7636] ? common_file_perm+0x171/0x1c0 [ 262.934083][ T7636] ? fsnotify_perm+0x5d/0x560 [ 262.938739][ T7636] ? security_file_permission+0x75/0xa0 [ 262.944267][ T7636] do_iter_write+0x205/0x7b0 [ 262.948839][ T7636] ? import_iovec+0x6f/0xa0 [ 262.953328][ T7636] do_writev+0x254/0x410 [ 262.957559][ T7636] ? do_readv+0x3e0/0x3e0 [ 262.961870][ T7636] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 262.967832][ T7636] ? lock_chain_count+0x20/0x20 [ 262.972666][ T7636] ? vtime_user_exit+0x2dc/0x400 [ 262.977587][ T7636] ? trace_sys_enter+0x1f/0x80 [ 262.982333][ T7636] do_syscall_64+0x4c/0xa0 [ 262.986730][ T7636] ? clear_bhb_loop+0x30/0x80 [ 262.991386][ T7636] ? clear_bhb_loop+0x30/0x80 [ 262.996044][ T7636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.001932][ T7636] RIP: 0033:0x7f5be0a02749 [ 263.006333][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.025919][ T7636] RSP: 002b:00007f5bdec69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 263.034313][ T7636] RAX: ffffffffffffffda RBX: 00007f5be0c58fa0 RCX: 00007f5be0a02749 [ 263.042302][ T7636] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 263.050272][ T7636] RBP: 00007f5be0a86f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.058308][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.066260][ T7636] R13: 00007f5be0c59038 R14: 00007f5be0c58fa0 R15: 00007fffc58669c8 [ 263.074219][ T7636] [ 263.078479][ T7636] BUG: sleeping function called from invalid context at net/core/sock.c:3288 [ 263.088366][ T7636] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7636, name: syz.2.1003 [ 263.097453][ T7636] INFO: lockdep is turned off. [ 263.102242][ T7636] Preemption disabled at: [ 263.102253][ T7636] [<0000000000000000>] 0x0 [ 263.110993][ T7636] CPU: 0 PID: 7636 Comm: syz.2.1003 Not tainted syzkaller #0 [ 263.118370][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.128419][ T7636] Call Trace: [ 263.131683][ T7636] [ 263.134600][ T7636] dump_stack_lvl+0x168/0x230 [ 263.139271][ T7636] ? show_regs_print_info+0x20/0x20 [ 263.144452][ T7636] ? load_image+0x3b0/0x3b0 [ 263.148941][ T7636] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 263.155084][ T7636] ___might_sleep+0x47c/0x600 [ 263.159745][ T7636] ? __might_sleep+0xf0/0xf0 [ 263.164321][ T7636] ? read_lock_is_recursive+0x10/0x10 [ 263.169679][ T7636] ? rcu_lock_release+0x5/0x20 [ 263.174426][ T7636] __lock_sock_fast+0x2f/0xe0 [ 263.179086][ T7636] ? inet_sk_diag_fill+0xef6/0x1b50 [ 263.184290][ T7636] mptcp_diag_get_info+0x1e7/0x990 [ 263.189471][ T7636] inet_sk_diag_fill+0xef6/0x1b50 [ 263.194494][ T7636] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 263.200196][ T7636] ? do_raw_spin_lock+0x11d/0x280 [ 263.205202][ T7636] ? inet_diag_bc_sk+0x187/0x10c0 [ 263.210206][ T7636] ? preempt_schedule_thunk+0x16/0x18 [ 263.215576][ T7636] mptcp_diag_dump+0xcca/0x1290 [ 263.220431][ T7636] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 263.227024][ T7636] __inet_diag_dump+0x1f6/0x380 [ 263.231874][ T7636] netlink_dump+0x676/0xcd0 [ 263.236380][ T7636] ? netlink_lookup+0x1d0/0x1d0 [ 263.241241][ T7636] ? __inet_diag_dump_start+0x805/0x970 [ 263.246785][ T7636] __netlink_dump_start+0x523/0x700 [ 263.251983][ T7636] inet_diag_handler_cmd+0x1be/0x290 [ 263.257282][ T7636] ? rcu_lock_release+0x20/0x20 [ 263.262115][ T7636] ? inet_diag_handler_get_info+0xb80/0xb80 [ 263.267995][ T7636] ? inet_diag_dump_start+0x20/0x20 [ 263.273178][ T7636] ? inet_diag_dump+0x50/0x50 [ 263.277835][ T7636] ? dev_queue_xmit+0x20/0x20 [ 263.282492][ T7636] ? memcpy+0x3c/0x60 [ 263.286475][ T7636] ? sock_diag_rcv+0x17/0x40 [ 263.291047][ T7636] ? sock_diag_rcv+0x17/0x40 [ 263.295620][ T7636] ? rcu_lock_release+0x20/0x20 [ 263.300450][ T7636] sock_diag_rcv_msg+0x164/0x3e0 [ 263.305371][ T7636] netlink_rcv_skb+0x1e0/0x430 [ 263.310115][ T7636] ? sock_diag_bind+0xa0/0xa0 [ 263.314774][ T7636] ? netlink_ack+0xb60/0xb60 [ 263.319343][ T7636] ? __lock_acquire+0x7c60/0x7c60 [ 263.324359][ T7636] sock_diag_rcv+0x26/0x40 [ 263.328775][ T7636] netlink_unicast+0x774/0x920 [ 263.333527][ T7636] netlink_sendmsg+0x8ab/0xbc0 [ 263.338273][ T7636] ? netlink_getsockopt+0x560/0x560 [ 263.343454][ T7636] ? aa_sock_msg_perm+0x94/0x150 [ 263.348471][ T7636] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 263.353740][ T7636] ? security_socket_sendmsg+0x7c/0xa0 [ 263.359188][ T7636] sock_write_iter+0x29c/0x380 [ 263.363938][ T7636] ? sock_read_iter+0x340/0x340 [ 263.368789][ T7636] do_iter_readv_writev+0x497/0x600 [ 263.373974][ T7636] ? generic_file_rw_checks+0x280/0x280 [ 263.379502][ T7636] ? common_file_perm+0x171/0x1c0 [ 263.384595][ T7636] ? fsnotify_perm+0x5d/0x560 [ 263.389254][ T7636] ? security_file_permission+0x75/0xa0 [ 263.394786][ T7636] do_iter_write+0x205/0x7b0 [ 263.399361][ T7636] ? import_iovec+0x6f/0xa0 [ 263.403849][ T7636] do_writev+0x254/0x410 [ 263.408088][ T7636] ? do_readv+0x3e0/0x3e0 [ 263.412426][ T7636] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 263.418410][ T7636] ? lock_chain_count+0x20/0x20 [ 263.423243][ T7636] ? vtime_user_exit+0x2dc/0x400 [ 263.428168][ T7636] ? trace_sys_enter+0x1f/0x80 [ 263.432918][ T7636] do_syscall_64+0x4c/0xa0 [ 263.437323][ T7636] ? clear_bhb_loop+0x30/0x80 [ 263.441980][ T7636] ? clear_bhb_loop+0x30/0x80 [ 263.446639][ T7636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.452516][ T7636] RIP: 0033:0x7f5be0a02749 [ 263.456913][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.476505][ T7636] RSP: 002b:00007f5bdec69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 263.484903][ T7636] RAX: ffffffffffffffda RBX: 00007f5be0c58fa0 RCX: 00007f5be0a02749 [ 263.492856][ T7636] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 263.500808][ T7636] RBP: 00007f5be0a86f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.508762][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.516711][ T7636] R13: 00007f5be0c59038 R14: 00007f5be0c58fa0 R15: 00007fffc58669c8 [ 263.524672][ T7636] [ 263.621917][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'.