last executing test programs: 7m34.749016455s ago: executing program 4 (id=1675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/19, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 7m34.40398813s ago: executing program 4 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xdc, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 7m33.882853609s ago: executing program 4 (id=1687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102) fallocate(r1, 0x10, 0x3, 0x7c27) 7m33.014674633s ago: executing program 4 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/19, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 7m31.233708998s ago: executing program 4 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7m30.892875768s ago: executing program 32 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7m15.817509788s ago: executing program 33 (id=1701): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x5, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6m2.666382774s ago: executing program 34 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x533c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) syz_usb_connect$uac3(0x5, 0x86, 0x0, 0x0) 5m29.795932542s ago: executing program 35 (id=2242): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 5m25.186023675s ago: executing program 36 (id=2228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_OIF={0x8}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) 3m12.190074905s ago: executing program 7 (id=2844): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0xca, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @tick=0x65757100, 0x3, {0x1, 0xfc}}) 3m11.227354873s ago: executing program 7 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000005e00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x408c0}, 0x40801) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m10.809739363s ago: executing program 7 (id=2858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x232}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048f", 0xc0}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m10.71607265s ago: executing program 8 (id=2859): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m10.627249321s ago: executing program 7 (id=2860): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db5368"], 0xfdef) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 3m10.574783897s ago: executing program 8 (id=2862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x1, 0xffffff7f, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 3m10.436626052s ago: executing program 7 (id=2864): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3m10.276011227s ago: executing program 8 (id=2865): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000c80)="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", 0x583}], 0x1}, 0x408c4) close(0x3) 3m10.275271061s ago: executing program 9 (id=2866): r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 3m10.167607952s ago: executing program 8 (id=2867): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000900)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000005e00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x408c0}, 0x40801) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m10.14294005s ago: executing program 7 (id=2868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 3m10.048047329s ago: executing program 9 (id=2869): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x232}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048f", 0xc0}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m9.859212089s ago: executing program 9 (id=2870): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @local, 0x5}, 0x1c, 0x0}, 0xd4) 3m9.80646868s ago: executing program 8 (id=2871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m9.70649153s ago: executing program 9 (id=2872): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/83, 0x53) 3m9.567259603s ago: executing program 8 (id=2873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x2c020400) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000000180)) 3m9.489116719s ago: executing program 9 (id=2875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)=@getsadinfo={0x1cc, 0x23, 0x400, 0x70bd28, 0x3, 0x0, [@algo_auth_trunc={0xcc, 0x14, {{'xcbc(cast5-generic)\x00'}, 0x400, 0x100, "b825ffb46b7ac51c829f2626e57b838ec9f203cb03e340af0fadbd4fb1858f016f65e34075cbc4ee22413b9c80c928eeedbc1cd2c81642b399bf67e74e62bfcec5b160f240443977472a2a490ee1eebf9d7e774db4ca2c3da98bbd8f96bf278c6a56870e22c1c4a24c9f68f9db503212a7fbda5b16b525597e726d47785aaede"}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x4, 0x4e22, 0x0, 0x2, 0x0, 0x10, 0x2c, r3, r6}, {@in=@empty, 0x10001, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x3, 0x8, 0x0, 0x1, 0x9, 0x15a, 0x80000000, 0x9}, {0x7f, 0x800, 0x7fff, 0xffffffffffffffff}, {0xa, 0x2c053c51, 0x3}, 0x70bd29, 0x3505, 0x2, 0x1, 0x2, 0x31}}, @replay_thresh={0x8, 0xb, 0x8000}]}, 0x1cc}}, 0x20048095) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x44, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3m9.210645119s ago: executing program 5 (id=2876): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000029c0), 0x0, 0x40088c4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 3m9.115777519s ago: executing program 5 (id=2877): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) 3m8.71101049s ago: executing program 5 (id=2878): unshare(0x4000400) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2062) 3m8.443763689s ago: executing program 5 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) 3m8.362151053s ago: executing program 9 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000900)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000005e00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x408c0}, 0x40801) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m8.069442578s ago: executing program 5 (id=2881): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @local, 0x5}, 0x1c, 0x0}, 0xd4) 3m7.994526647s ago: executing program 5 (id=2882): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20885}}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m54.948571465s ago: executing program 37 (id=2868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m54.469489084s ago: executing program 38 (id=2873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x2c020400) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000000180)) 2m52.980243978s ago: executing program 39 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000900)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000005e00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x408c0}, 0x40801) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m52.430901595s ago: executing program 40 (id=2882): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20885}}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m2.274981626s ago: executing program 4 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m47.234821761s ago: executing program 41 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m6.839033816s ago: executing program 6 (id=3218): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 1m2.095452201s ago: executing program 6 (id=3237): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000"], 0xa8}}, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010105, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 59.903528109s ago: executing program 6 (id=3242): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) 59.325139886s ago: executing program 6 (id=3248): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 58.786928893s ago: executing program 6 (id=3251): socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x0, 0x40ca, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x3}}}, 0x118) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0xf}]}) lseek(0xffffffffffffffff, 0x1, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 55.139099848s ago: executing program 6 (id=3267): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) 54.598788175s ago: executing program 42 (id=3267): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) 41.227306448s ago: executing program 2 (id=3374): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) ftruncate(r0, 0x0) 40.942882839s ago: executing program 2 (id=3378): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$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") write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 40.473490136s ago: executing program 0 (id=3383): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x78, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a50f112}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e78458e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d2665a4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x508c570d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 40.355231058s ago: executing program 2 (id=3384): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc, 0x1000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 40.339502993s ago: executing program 0 (id=3386): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x200001, 0x81, 0x100000}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 40.12386395s ago: executing program 2 (id=3388): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) ftruncate(r0, 0x0) 40.059291214s ago: executing program 0 (id=3390): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 39.875774678s ago: executing program 2 (id=3392): r0 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x0, 0x8000007, 0xf}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 39.771801895s ago: executing program 0 (id=3393): r0 = socket$kcm(0x10, 0x2, 0x0) unshare(0x400) shutdown(r0, 0x1) 39.515946909s ago: executing program 0 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1e8db2e8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 39.383093434s ago: executing program 0 (id=3396): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44c", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a", 0x53}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5", 0x64}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 39.236266457s ago: executing program 2 (id=3397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r2 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 34.105882081s ago: executing program 3 (id=3416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 33.684275268s ago: executing program 3 (id=3418): set_mempolicy(0x3, &(0x7f00000002c0)=0xffffffffffffff37, 0x7) socket$netlink(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a50f112}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e78458e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d2665a4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x508c570d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 33.600935317s ago: executing program 3 (id=3419): syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60db900000383aff00000000000000000000ffffac1e0001ff020000000000000000000000000001"], 0x0) 33.478804723s ago: executing program 3 (id=3422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) ftruncate(r0, 0x0) 33.388999222s ago: executing program 3 (id=3423): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 33.266234522s ago: executing program 3 (id=3425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80082, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x3, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x27}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00003c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f0000", 0x2f}], 0x1}, 0x45) 24.336625899s ago: executing program 43 (id=3396): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44c", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a", 0x53}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5", 0x64}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 23.73438879s ago: executing program 44 (id=3397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r2 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 18.003908458s ago: executing program 45 (id=3425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80082, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x3, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x27}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00003c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f0000", 0x2f}], 0x1}, 0x45) 17.99094722s ago: executing program 1 (id=3438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x413, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) 17.055909133s ago: executing program 1 (id=3439): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.946985047s ago: executing program 1 (id=3440): socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x7}, 0x8) 15.844644622s ago: executing program 1 (id=3441): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 15.527052919s ago: executing program 1 (id=3442): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x11, @loopback, 0x4e20, 0x3, 'sed\x00', 0x1c, 0x248, 0x4b}, 0x2c) 15.423010653s ago: executing program 1 (id=3443): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) epoll_create1(0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff080009000000", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 0s ago: executing program 46 (id=3443): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) epoll_create1(0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff080009000000", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) kernel console output (not intermixed with test programs): [ 517.051741][T13472] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.057895][T13472] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 517.135326][T13472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.620825][T12211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.914558][T13497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2612'. [ 520.281887][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2617'. [ 521.091879][T13533] loop7: detected capacity change from 0 to 128 [ 521.093952][T13533] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 521.217643][T13533] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.721441][T13570] loop7: detected capacity change from 0 to 512 [ 522.747740][T13570] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 522.770127][T13570] EXT4-fs (loop7): orphan cleanup on readonly fs [ 522.845616][T13570] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 522.846000][T13570] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 522.848004][T13570] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2633: bad orphan inode 32 [ 522.848240][T13570] loop7: lost filesystem error report for type 5 error -117 [ 522.911927][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 522.911946][ C0] EXT4-fs (loop7): initial error at time 1777728364: ext4_orphan_get:1423 [ 522.911963][ C0] EXT4-fs (loop7): last error at time 1777728364: ext4_orphan_get:1423 [ 522.971915][T13570] ext4_test_bit(bit=31, block=2) = 0 [ 522.978030][T13570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.425835][T13603] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2638'. [ 526.058506][T13618] batadv1: entered promiscuous mode [ 526.111941][T13618] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 526.378158][T12211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.485767][T13636] process 'syz.2.2649' launched '/dev/fd/3' with NULL argv: empty string added [ 526.534715][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2645'. [ 526.537789][T13635] bridge_slave_1: left allmulticast mode [ 526.537818][T13635] bridge_slave_1: left promiscuous mode [ 526.538070][T13635] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.347453][T13655] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 527.434975][T13659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2656'. [ 527.516781][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2659'. [ 527.516812][T13665] netlink: 'syz.9.2659': attribute type 8 has an invalid length. [ 527.568227][T13655] bond5: entered promiscuous mode [ 527.579195][T13655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 527.579636][T13659] bond5: entered allmulticast mode [ 527.662777][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2660'. [ 527.707545][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2659'. [ 527.707574][T13665] netlink: 'syz.9.2659': attribute type 8 has an invalid length. [ 527.763608][ T61] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 527.961263][T13659] bond5: (slave bridge3): making interface the new active one [ 527.961284][T13659] bridge3: entered promiscuous mode [ 527.961484][T13659] bridge3: entered allmulticast mode [ 527.984826][T13659] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 527.984979][ T124] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.068790][ T124] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.070061][ T124] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.070107][ T124] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.538905][T13689] loop8: detected capacity change from 0 to 256 [ 528.713591][T13689] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 528.713611][T13689] FAT-fs (loop8): Filesystem has been set read-only [ 528.713896][T13689] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 528.713919][T13689] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 528.806990][ T38] audit: type=1800 audit(1777728370.265:170): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2668" name="file1" dev="loop8" ino=1048642 res=0 errno=0 [ 529.033350][T13704] loop5: detected capacity change from 0 to 164 [ 529.129541][T13689] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 529.729692][T13704] ISOFS: unable to read i-node block [ 529.729958][T13704] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 529.856380][T13730] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2682'. [ 531.163194][T13761] syzkaller0: entered promiscuous mode [ 531.163218][T13761] syzkaller0: entered allmulticast mode [ 532.419887][T13790] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 533.098835][ T5621] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 533.758550][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2708'. [ 533.758571][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2708'. [ 533.760590][ T5621] usb 9-1: config 0 has no interfaces? [ 533.760620][ T5621] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.760640][ T5621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.769169][ T5621] usb 9-1: config 0 descriptor?? [ 533.799720][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2708'. [ 533.799737][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2708'. [ 534.004216][ T5621] usb 9-1: USB disconnect, device number 2 [ 534.557432][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.657677][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.662802][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.680155][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.687401][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.893960][T13813] netlink: 'syz.9.2717': attribute type 1 has an invalid length. [ 535.086360][T13817] loop5: detected capacity change from 0 to 128 [ 535.099097][T13817] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 535.100306][T13817] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 535.500385][ T7049] syz_tun (unregistering): left allmulticast mode [ 535.500415][ T7049] syz_tun (unregistering): left promiscuous mode [ 535.500536][ T7049] bridge0: port 3(syz_tun) entered disabled state [ 535.606816][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 535.606837][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2720'. [ 535.606996][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 535.607010][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2720'. [ 536.107441][T13840] loop8: detected capacity change from 0 to 512 [ 536.110279][T13840] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 536.213167][ T1536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.240796][T13840] EXT4-fs (loop8): 1 truncate cleaned up [ 536.243243][T13840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.286017][ T38] audit: type=1800 audit(1777728377.795:171): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2728" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 536.383052][T11985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.523126][ T5621] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 536.721000][ T5621] usb 6-1: config 0 has no interfaces? [ 536.721032][ T5621] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 536.721052][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.726363][ T5621] usb 6-1: config 0 descriptor?? [ 536.758881][ T61] Bluetooth: hci6: command tx timeout [ 536.811946][ T1536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.854998][T13850] loop8: detected capacity change from 0 to 128 [ 536.895086][T13850] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 536.896384][T13850] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 536.974312][ T5747] usb 6-1: USB disconnect, device number 5 [ 537.162217][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2733'. [ 537.162249][T13854] netlink: 'syz.9.2733': attribute type 8 has an invalid length. [ 537.163380][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2733'. [ 537.163405][T13854] netlink: 'syz.9.2733': attribute type 8 has an invalid length. [ 537.362438][ T1536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.436185][T13808] lo speed is unknown, defaulting to 1000 [ 537.896900][ T1536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.632780][ T61] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 538.838911][ T61] Bluetooth: hci6: command tx timeout [ 538.931248][T13883] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 538.931351][T13890] loop8: detected capacity change from 0 to 1024 [ 538.932381][T13883] bond1: (slave vcan1): Error -95 calling set_mac_address [ 539.013675][T13890] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.386080][T11985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.403889][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 540.033836][ T1536] bridge_slave_1: left allmulticast mode [ 540.033865][ T1536] bridge_slave_1: left promiscuous mode [ 540.034127][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.178096][T13914] netlink: 'syz.9.2752': attribute type 1 has an invalid length. [ 540.214724][T13912] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2751'. [ 540.258378][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2752'. [ 540.280924][T13921] loop5: detected capacity change from 0 to 512 [ 540.282508][T13921] EXT4-fs: Ignoring removed nobh option [ 540.282577][T13921] EXT4-fs: Ignoring removed orlov option [ 540.375112][T13916] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2751'. [ 540.520628][T13921] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 1: comm syz.5.2753: invalid block [ 540.520861][T13921] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 540.521553][T13921] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2753: couldn't read orphan inode 11 (err -117) [ 540.521581][T13921] loop5: lost filesystem error report for type 5 error -117 [ 540.528690][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 540.528709][ C1] EXT4-fs (loop5): initial error at time 1777728382: __ext4_iget:5481: inode 11: block 1 [ 540.528741][ C1] EXT4-fs (loop5): last error at time 1777728382: ext4_orphan_get:1402 [ 540.604074][T13921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.706029][T10193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.947142][ T5623] Bluetooth: hci6: command tx timeout [ 541.094471][T13942] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2757'. [ 541.449326][ T1536] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 541.449355][ T1536] bridge1 (unregistering): left promiscuous mode [ 541.449399][ T1536] bridge1 (unregistering): left allmulticast mode [ 541.649165][ T1536] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 541.649191][ T1536] bridge3 (unregistering): left promiscuous mode [ 541.649249][ T1536] bridge3 (unregistering): left allmulticast mode [ 541.769242][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.851487][ T1536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.870848][ T1536] bond0 (unregistering): Released all slaves [ 541.877296][ T1536] bond1 (unregistering): Released all slaves [ 541.929405][ T1536] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 542.009538][ T1536] bond2 (unregistering): (slave vcan2): Releasing backup interface [ 542.070451][ T1536] bond2 (unregistering): (slave vcan3): Releasing backup interface [ 542.093871][ T1536] bond2 (unregistering): Released all slaves [ 542.109995][ T1536] bond3 (unregistering): Released all slaves [ 542.126518][ T1536] bond4 (unregistering): Released all slaves [ 542.143569][ T1536] bond5 (unregistering): Released all slaves [ 542.180858][T13914] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 542.208977][ T5276] 8021q: adding VLAN 0 to HW filter on device eth17 [ 542.441039][ T5614] gfs2: fsid=syz:syz.0: 1 glocks left after 183 seconds; still waiting [ 542.609541][ T1536] tipc: Disabling bearer [ 542.609725][ T1536] tipc: Left network mode [ 543.023752][ T5623] Bluetooth: hci6: command tx timeout [ 543.333694][T13976] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2768'. [ 543.441037][T13980] netlink: 'syz.5.2770': attribute type 1 has an invalid length. [ 543.496615][T13983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2770'. [ 543.681538][T13990] loop8: detected capacity change from 0 to 512 [ 543.805686][T13990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.085456][T11985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.335408][ T5623] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 544.396161][T13980] bond3: entered promiscuous mode [ 544.397605][T13980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.491984][ T5276] 8021q: adding VLAN 0 to HW filter on device eth18 [ 544.522197][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 544.951395][T14020] loop7: detected capacity change from 0 to 1024 [ 544.998311][T14020] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.031749][T14020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 545.031878][T14020] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.083013][T14020] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2777'. [ 545.216411][T12211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 545.305523][T13808] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.306041][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.306296][T13808] bridge_slave_0: entered allmulticast mode [ 545.397692][T13808] bridge_slave_0: entered promiscuous mode [ 545.425327][T13808] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.425728][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.426037][T13808] bridge_slave_1: entered allmulticast mode [ 545.465446][T13808] bridge_slave_1: entered promiscuous mode [ 545.939613][T13808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.038004][T14056] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2788'. [ 546.067478][T13808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.702849][T13808] team0: Port device team_slave_0 added [ 546.742009][T13808] team0: Port device team_slave_1 added [ 546.898782][ T1536] hsr_slave_0: left promiscuous mode [ 546.941148][ T1536] hsr_slave_1: left promiscuous mode [ 546.956586][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.981522][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.870702][ T57] smc: removing ib device sz1 [ 547.930632][ T57] smbdirect: ib_dev[sz1] removed [ 548.246199][T14092] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2798'. [ 548.354302][ T5276] 8021q: adding VLAN 0 to HW filter on device eth19 [ 548.394370][ T821] lo speed is unknown, defaulting to 1000 [ 548.394413][ T821] sz1: Port: 1 Link DOWN [ 548.764138][ T61] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 548.934302][T13808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.934420][T13808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.934446][T13808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.011539][T13808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.011554][T13808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.011578][T13808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.313687][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.404184][T14112] bridge_slave_0 (unregistering): left allmulticast mode [ 549.404215][T14112] bridge_slave_0 (unregistering): left promiscuous mode [ 549.404348][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.466511][T14117] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2810'. [ 549.823038][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2811'. [ 549.823069][T14120] netlink: 'syz.7.2811': attribute type 8 has an invalid length. [ 550.075913][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2811'. [ 550.075951][T14120] netlink: 'syz.7.2811': attribute type 8 has an invalid length. [ 550.197860][T13808] hsr_slave_0: entered promiscuous mode [ 550.228956][T13808] hsr_slave_1: entered promiscuous mode [ 550.253665][T13808] debugfs: 'hsr0' already exists in 'hsr' [ 550.253688][T13808] Cannot create hsr debugfs directory [ 550.256457][ T2231] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.312940][ T3088] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.807539][ T3088] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.049910][ T3088] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.317829][T14160] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.375921][T14160] bridge_slave_0 (unregistering): left allmulticast mode [ 551.375952][T14160] bridge_slave_0 (unregistering): left promiscuous mode [ 551.376221][T14160] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.522819][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2827'. [ 551.721784][ T5276] 8021q: adding VLAN 0 to HW filter on device eth20 [ 551.975414][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2827'. [ 552.116857][ T995] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.490303][ T995] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.859896][ T1457] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.944487][T14207] netlink: 'syz.9.2841': attribute type 1 has an invalid length. [ 552.986772][ T3088] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.023492][T14211] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2841'. [ 554.043005][T14234] netlink: 'syz.8.2851': attribute type 1 has an invalid length. [ 554.336288][T14236] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 554.337348][T14236] bond1: (slave vcan1): Error -95 calling set_mac_address [ 554.616306][ T1536] IPVS: stop unused estimator thread 0... [ 554.927021][T14265] loop5: detected capacity change from 0 to 256 [ 554.941273][T14265] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 555.178809][T14265] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.350076][T14322] loop5: detected capacity change from 0 to 512 [ 556.499809][T14322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.696733][T10193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.797630][T14293] syzkaller0: entered promiscuous mode [ 556.797647][T14293] syzkaller0: entered allmulticast mode [ 556.896272][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2879'. [ 556.952067][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2879'. [ 557.074607][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2879'. [ 557.206750][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2879'. [ 562.936421][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.936517][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.123790][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 570.635333][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.671821][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 570.693460][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 570.694490][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 570.695151][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.342644][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 571.382570][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 571.386720][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 571.395587][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 571.396213][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 572.606494][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.675137][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.677538][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.720858][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.748928][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.918984][ T5623] Bluetooth: hci0: command tx timeout [ 573.127921][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 573.217271][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 573.232114][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 573.233113][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 573.233751][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 573.638792][ T5623] Bluetooth: hci7: command tx timeout [ 573.882554][T11985] team0: Port device syz_tun removed [ 574.943791][ T5623] Bluetooth: hci4: command tx timeout [ 574.999077][ T5623] Bluetooth: hci0: command tx timeout [ 575.259631][T14343] bond0: (slave syz_tun): Releasing backup interface [ 575.399093][ T5623] Bluetooth: hci8: command tx timeout [ 575.718862][ T5623] Bluetooth: hci7: command tx timeout [ 576.008048][ T1517] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.008082][ T1517] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.702568][ T1517] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.702588][ T1517] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.999896][ T5623] Bluetooth: hci4: command tx timeout [ 577.089152][ T5623] Bluetooth: hci0: command tx timeout [ 577.346978][ T1517] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.347011][ T1517] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.478935][ T5623] Bluetooth: hci8: command tx timeout [ 577.809860][ T5623] Bluetooth: hci7: command tx timeout [ 577.881099][ T1517] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.881131][ T1517] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.078926][ T5623] Bluetooth: hci4: command tx timeout [ 579.165999][ T5623] Bluetooth: hci0: command tx timeout [ 579.321493][T13808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 579.362169][T13808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.400588][T13808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.431898][T13808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.537603][T13808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.561555][ T5623] Bluetooth: hci8: command tx timeout [ 579.582308][T13808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.611814][T13808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 579.652660][T13808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.879496][ T61] Bluetooth: hci7: command tx timeout [ 580.040823][ T1517] bridge_slave_1: left allmulticast mode [ 580.040855][ T1517] bridge_slave_1: left promiscuous mode [ 580.041114][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.819664][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.899280][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.922041][ T1517] bond0 (unregistering): Released all slaves [ 580.927774][ T1517] bond1 (unregistering): Released all slaves [ 581.179989][ T1517] tipc: Disabling bearer [ 581.182045][ T1517] tipc: Left network mode [ 581.189189][ T61] Bluetooth: hci4: command tx timeout [ 581.639648][ T61] Bluetooth: hci8: command tx timeout [ 581.901859][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.902067][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.902221][T14351] bridge_slave_0: entered allmulticast mode [ 581.904001][T14351] bridge_slave_0: entered promiscuous mode [ 582.205816][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.206041][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.206198][T14351] bridge_slave_1: entered allmulticast mode [ 582.207915][T14351] bridge_slave_1: entered promiscuous mode [ 582.350806][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.350998][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.351154][T14346] bridge_slave_0: entered allmulticast mode [ 582.352894][T14346] bridge_slave_0: entered promiscuous mode [ 582.356669][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.356930][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.357165][T14356] bridge_slave_0: entered allmulticast mode [ 582.359141][T14356] bridge_slave_0: entered promiscuous mode [ 582.420860][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.421133][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.421291][T14346] bridge_slave_1: entered allmulticast mode [ 582.423018][T14346] bridge_slave_1: entered promiscuous mode [ 582.423955][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.424102][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.424267][T14356] bridge_slave_1: entered allmulticast mode [ 582.425956][T14356] bridge_slave_1: entered promiscuous mode [ 582.432802][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.598829][ T1517] hsr_slave_0: left promiscuous mode [ 582.618818][ T1517] hsr_slave_1: left promiscuous mode [ 582.619542][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.619558][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.659855][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.659877][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.720084][ T1517] veth1_macvtap: left promiscuous mode [ 582.720227][ T1517] veth0_macvtap: left promiscuous mode [ 582.722044][ T1517] veth1_vlan: left promiscuous mode [ 582.722238][ T1517] veth0_vlan: left promiscuous mode [ 583.440677][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 583.500689][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 583.688584][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.692307][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.694074][T14361] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.694375][T14361] bridge_slave_0: entered allmulticast mode [ 583.706254][T14361] bridge_slave_0: entered promiscuous mode [ 583.820987][T14361] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.821163][T14361] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.821319][T14361] bridge_slave_1: entered allmulticast mode [ 583.823076][T14361] bridge_slave_1: entered promiscuous mode [ 583.853757][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.874996][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.913144][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.916269][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.937141][T14351] team0: Port device team_slave_0 added [ 584.013189][T14351] team0: Port device team_slave_1 added [ 584.017521][T14361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.112970][T14361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.123849][T14346] team0: Port device team_slave_0 added [ 584.160684][T14356] team0: Port device team_slave_0 added [ 584.196843][T14346] team0: Port device team_slave_1 added [ 584.205157][T14356] team0: Port device team_slave_1 added [ 584.207094][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.207106][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.207129][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.274714][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.274731][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.274745][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.280909][T14361] team0: Port device team_slave_0 added [ 584.391230][T14361] team0: Port device team_slave_1 added [ 584.392455][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.392463][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.392476][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.395081][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.395094][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.395117][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.464189][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.464204][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.464227][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.546986][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.547000][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.547025][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.766360][T14361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.766375][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.766398][T14361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.263677][T14361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.263687][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.263702][T14361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.303663][T14351] hsr_slave_0: entered promiscuous mode [ 585.305450][T14351] hsr_slave_1: entered promiscuous mode [ 585.306877][T14351] debugfs: 'hsr0' already exists in 'hsr' [ 585.306904][T14351] Cannot create hsr debugfs directory [ 585.324921][ T5276] 8021q: adding VLAN 0 to HW filter on device eth17 [ 585.441501][T14346] hsr_slave_0: entered promiscuous mode [ 585.442660][T14346] hsr_slave_1: entered promiscuous mode [ 585.443579][T14346] debugfs: 'hsr0' already exists in 'hsr' [ 585.443600][T14346] Cannot create hsr debugfs directory [ 585.457975][T14356] hsr_slave_0: entered promiscuous mode [ 585.461687][T14356] hsr_slave_1: entered promiscuous mode [ 585.463262][T14356] debugfs: 'hsr0' already exists in 'hsr' [ 585.463282][T14356] Cannot create hsr debugfs directory [ 585.595158][T14361] hsr_slave_0: entered promiscuous mode [ 585.596323][T14361] hsr_slave_1: entered promiscuous mode [ 585.597256][T14361] debugfs: 'hsr0' already exists in 'hsr' [ 585.597277][T14361] Cannot create hsr debugfs directory [ 585.996906][ T1517] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.996929][ T1517] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.544510][ T1517] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.544531][ T1517] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.627567][T13808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.124671][ T1517] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.124704][ T1517] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.498250][T14351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.565566][ T5276] 8021q: adding VLAN 0 to HW filter on device eth18 [ 587.752499][ T1517] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.752521][ T1517] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.976384][T14351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.044649][T13808] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.057173][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.057333][T13064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.096014][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.096146][T13064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.306383][T14351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.897741][T14351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.145530][ T5276] 8021q: adding VLAN 0 to HW filter on device eth19 [ 589.936366][ T5276] 8021q: adding VLAN 0 to HW filter on device eth20 [ 591.046531][T13808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.223140][T13808] veth0_vlan: entered promiscuous mode [ 591.267265][T13808] veth1_vlan: entered promiscuous mode [ 591.441673][T13808] veth0_macvtap: entered promiscuous mode [ 591.476032][T13808] veth1_macvtap: entered promiscuous mode [ 592.138449][ T5276] 8021q: adding VLAN 0 to HW filter on device eth21 [ 592.223883][T13808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.245954][T13808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.437973][ T1517] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.437995][ T1517] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.732230][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.733331][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.883782][ T1517] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.883803][ T1517] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.919454][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.926060][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.346469][ T1517] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.346490][ T1517] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.913874][ T1517] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.913896][ T1517] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.521574][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.521592][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.162741][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.184756][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.186290][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.187340][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.207748][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.867411][ T5276] 8021q: adding VLAN 0 to HW filter on device eth22 [ 597.112451][ T5276] 8021q: adding VLAN 0 to HW filter on device eth23 [ 597.318865][ T5623] Bluetooth: hci2: command tx timeout [ 597.419023][ T1517] bridge_slave_1: left allmulticast mode [ 597.419048][ T1517] bridge_slave_1: left promiscuous mode [ 597.419230][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.559012][ T1517] bridge_slave_1: left allmulticast mode [ 597.559037][ T1517] bridge_slave_1: left promiscuous mode [ 597.559228][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.899626][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.981427][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.001154][ T1517] bond0 (unregistering): Released all slaves [ 599.006946][ T1517] bond1 (unregistering): Released all slaves [ 599.402628][ T5623] Bluetooth: hci2: command tx timeout [ 599.589328][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.650118][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.689544][ T1517] bond0 (unregistering): Released all slaves [ 599.709219][ T1517] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 599.769484][ T1517] bond1 (unregistering): (slave vcan3): Releasing backup interface [ 599.829304][ T1517] bond1 (unregistering): (slave vcan4): Releasing backup interface [ 599.890146][ T1517] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 599.949350][ T1517] bond1 (unregistering): (slave vcan5): Releasing backup interface [ 599.989397][ T1517] bond1 (unregistering): Released all slaves [ 600.001997][ T1517] bond2 (unregistering): Released all slaves [ 600.016890][ T1517] bond3 (unregistering): Released all slaves [ 600.459309][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.549438][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.570701][ T1517] bond0 (unregistering): Released all slaves [ 600.576510][ T1517] bond1 (unregistering): Released all slaves [ 601.527644][ T5623] Bluetooth: hci2: command tx timeout [ 602.269895][T14611] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.270169][T14611] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.270470][T14611] bridge_slave_0: entered allmulticast mode [ 602.274975][T14611] bridge_slave_0: entered promiscuous mode [ 602.295537][ T5276] 8021q: adding VLAN 0 to HW filter on device eth24 [ 602.336428][T14611] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.336708][T14611] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.336984][T14611] bridge_slave_1: entered allmulticast mode [ 602.363145][T14611] bridge_slave_1: entered promiscuous mode [ 602.725791][T14611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.806070][T14611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.124191][T14611] team0: Port device team_slave_0 added [ 603.139908][T14611] team0: Port device team_slave_1 added [ 603.316287][T14611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.316302][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.316320][T14611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.414350][T14611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.414365][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.414385][T14611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.549405][T14351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 603.558852][ T5623] Bluetooth: hci2: command tx timeout [ 603.573983][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.830467][T14351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.852375][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 603.890592][ T5614] gfs2: fsid=syz:syz.0: 1 glocks left after 245 seconds; still waiting [ 603.909717][T14351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.971956][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.017033][T14351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 604.042512][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.450356][T14611] hsr_slave_0: entered promiscuous mode [ 604.452700][T14611] hsr_slave_1: entered promiscuous mode [ 604.454259][T14611] debugfs: 'hsr0' already exists in 'hsr' [ 604.454280][T14611] Cannot create hsr debugfs directory [ 604.758802][ T1517] hsr_slave_0: left promiscuous mode [ 604.778761][ T1517] hsr_slave_1: left promiscuous mode [ 604.794175][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.794202][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.822810][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.822827][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.958799][ T1517] hsr_slave_0: left promiscuous mode [ 604.978879][ T1517] hsr_slave_1: left promiscuous mode [ 604.979940][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.019373][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.158825][ T1517] hsr_slave_0: left promiscuous mode [ 605.198918][ T1517] hsr_slave_1: left promiscuous mode [ 605.200599][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.200616][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.222571][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.222594][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.313644][ T1517] veth1_macvtap: left promiscuous mode [ 605.313702][ T1517] veth0_macvtap: left promiscuous mode [ 605.313854][ T1517] veth1_vlan: left promiscuous mode [ 605.318252][ T1517] veth0_vlan: left promiscuous mode [ 605.438940][ T1517] veth1_macvtap: left promiscuous mode [ 605.438998][ T1517] veth0_macvtap: left promiscuous mode [ 605.439159][ T1517] veth1_vlan: left promiscuous mode [ 605.439264][ T1517] veth0_vlan: left promiscuous mode [ 606.239363][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 606.300243][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 606.899434][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 606.939260][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 607.521359][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 607.559704][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 607.814907][T14346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 607.835139][T14346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.878118][T14346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 607.911802][T14346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.936423][T14346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 607.972538][T14346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.026157][T14346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 608.051925][T14346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.439289][T14356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 608.483635][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.510394][T14356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 608.581634][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.622245][T14356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.741842][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.748235][T14356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.822803][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 609.122253][T14361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 609.183717][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 609.239262][T14361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 609.318425][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 609.575380][T14611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.627324][T14361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 609.651890][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 609.655106][T14361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 609.695184][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.043848][T14611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.114704][T14351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.514458][T14611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.598652][T14351] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.669834][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.699125][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.700409][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.972724][T14611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.031229][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.031373][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.110772][T14346] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.157326][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.157551][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.182681][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.308797][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.308997][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.520768][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.548133][T14361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.791704][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.791899][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.964085][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.964246][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.146480][T14361] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.158035][T14611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.182761][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.186756][T14611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.226163][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.270450][T14611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.312734][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.321134][ T1536] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.321345][ T1536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.341490][T14611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.371957][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.430818][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.430979][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.899134][ T1517] bridge_slave_1: left allmulticast mode [ 612.899168][ T1517] bridge_slave_1: left promiscuous mode [ 612.899429][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.979608][ T1517] bridge_slave_0: left allmulticast mode [ 612.979631][ T1517] bridge_slave_0: left promiscuous mode [ 612.979786][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.719818][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.799672][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.820989][ T1517] bond0 (unregistering): Released all slaves [ 614.373107][T14351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.328758][ T1517] hsr_slave_0: left promiscuous mode [ 615.368781][ T1517] hsr_slave_1: left promiscuous mode [ 615.369492][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.369508][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.409871][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.409895][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.490552][ T1517] veth1_macvtap: left promiscuous mode [ 615.490653][ T1517] veth0_macvtap: left promiscuous mode [ 615.490950][ T1517] veth1_vlan: left promiscuous mode [ 615.491131][ T1517] veth0_vlan: left promiscuous mode [ 616.360247][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 616.419445][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 616.614705][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.827858][T14351] veth0_vlan: entered promiscuous mode [ 616.957245][T14611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.972330][T14351] veth1_vlan: entered promiscuous mode [ 617.142795][T14611] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.180744][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.180983][T13064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.233263][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.233487][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.403847][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.452882][T14351] veth0_macvtap: entered promiscuous mode [ 617.607852][T14351] veth1_macvtap: entered promiscuous mode [ 617.757051][T14361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.935149][T14351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.078308][T14351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.278215][ T3088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.281796][ T3088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.284525][ T3088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.288527][ T3088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.443303][T14356] veth0_vlan: entered promiscuous mode [ 618.528861][T14346] veth0_vlan: entered promiscuous mode [ 618.843247][T14346] veth1_vlan: entered promiscuous mode [ 618.910985][T14356] veth1_vlan: entered promiscuous mode [ 619.483827][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.483846][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.718762][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.718778][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.761466][T14361] veth0_vlan: entered promiscuous mode [ 619.764624][T14346] veth0_macvtap: entered promiscuous mode [ 619.841122][T14346] veth1_macvtap: entered promiscuous mode [ 619.877433][T14356] veth0_macvtap: entered promiscuous mode [ 619.931432][T14361] veth1_vlan: entered promiscuous mode [ 619.945855][T14356] veth1_macvtap: entered promiscuous mode [ 620.032156][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.126244][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.154700][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.231145][ T2231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.235917][ T2231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.242975][ T2231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.251880][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.252399][ T2231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.312669][T14611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.341986][ T1457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.410140][T14361] veth0_macvtap: entered promiscuous mode [ 620.421759][ T1457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.443876][ T1457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.482986][ T1457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.554655][T14361] veth1_macvtap: entered promiscuous mode [ 620.745093][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 622.035259][T14361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.262656][ T1517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.262676][ T1517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.323044][T14361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.379020][T14870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.469381][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.469399][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.518282][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.590131][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.623421][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.645185][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.668026][T14611] veth0_vlan: entered promiscuous mode [ 622.668048][ T3088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.668062][ T3088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.981304][T14611] veth1_vlan: entered promiscuous mode [ 622.981713][ T3088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.981727][ T3088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.380591][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.380673][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.432579][T14893] netlink: 'syz.1.2895': attribute type 29 has an invalid length. [ 624.558494][T14895] netlink: 'syz.1.2895': attribute type 29 has an invalid length. [ 624.926535][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.926553][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.057340][T14611] veth0_macvtap: entered promiscuous mode [ 625.128903][T14905] netlink: 'syz.3.2885': attribute type 1 has an invalid length. [ 625.185151][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2885'. [ 625.189164][T14905] gre0: entered promiscuous mode [ 625.189185][T14905] gre0: entered allmulticast mode [ 625.222062][T14611] veth1_macvtap: entered promiscuous mode [ 625.260559][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.260576][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.546374][T14611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.616888][T14611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.644407][ T1457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.652891][ T1457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.663636][ T1457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.665052][ T1457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.458440][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802558e000: rx timeout, send abort [ 626.574509][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802558e000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 627.354425][T14947] netlink: 'syz.3.2906': attribute type 1 has an invalid length. [ 627.463471][T14947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2906'. [ 627.528777][T14947] bridge0: entered promiscuous mode [ 627.528805][T14947] bridge0: entered allmulticast mode [ 627.556715][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.556731][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.130406][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.130425][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.358515][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'. [ 628.514406][T14975] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2913'. [ 629.941591][T15019] loop6: detected capacity change from 0 to 512 [ 630.144127][T15019] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 630.728355][T15019] EXT4-fs (loop6): 1 truncate cleaned up [ 630.914955][T15019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.235197][ T38] audit: type=1800 audit(1777728472.785:172): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2925" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 632.105480][T15066] loop3: detected capacity change from 0 to 1024 [ 632.144328][T15066] EXT4-fs: Ignoring removed bh option [ 632.588553][T14361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.787054][T15066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.267255][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.564245][T15134] loop2: detected capacity change from 0 to 1024 [ 636.565394][T15134] EXT4-fs: Ignoring removed bh option [ 636.911409][T15134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.195635][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.216453][T15156] loop6: detected capacity change from 0 to 512 [ 637.268766][T15160] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2964'. [ 637.290698][T15156] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 637.554170][T15169] loop3: detected capacity change from 0 to 1024 [ 637.646865][T15169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.901959][T15156] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2963: invalid indirect mapped block 4294967295 (level 0) [ 637.901994][T15156] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 637.908668][ C0] EXT4-fs (loop6): initial error at time 1777728479: ext4_free_branches:1023: inode 16 [ 637.908699][ C0] EXT4-fs (loop6): last error at time 1777728479: ext4_free_branches:1023: inode 16 [ 637.916649][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.215002][T15156] EXT4-fs (loop6): Remounting filesystem read-only [ 638.215738][T15156] EXT4-fs (loop6): 1 orphan inode deleted [ 638.215757][T15156] EXT4-fs (loop6): 1 truncate cleaned up [ 638.234668][T15156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.413376][T14361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.583543][T15199] loop3: detected capacity change from 0 to 512 [ 638.604746][T15199] EXT4-fs: Ignoring removed nobh option [ 638.647108][T15199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 638.841769][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 638.927216][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 638.932144][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 638.934746][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 638.935436][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 638.953899][T15199] EXT4-fs (loop3): 1 truncate cleaned up [ 638.956455][T15199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.877099][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.143323][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'. [ 641.143344][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2989'. [ 641.143750][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'. [ 641.143764][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2989'. [ 641.159193][ T5623] Bluetooth: hci3: command tx timeout [ 641.282221][T15269] loop3: detected capacity change from 0 to 1024 [ 641.543183][T15269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.591225][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2992'. [ 641.611586][T15279] veth0_vlan: entered allmulticast mode [ 641.617017][T15269] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2990: missing EA_INODE flag [ 641.887115][T15269] EXT4-fs (loop3): Remounting filesystem read-only [ 642.032844][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.521047][T15303] loop2: detected capacity change from 0 to 512 [ 642.623370][T15303] EXT4-fs (loop2): 1 truncate cleaned up [ 642.695585][T15303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.917266][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3000'. [ 642.917287][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3000'. [ 642.917685][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3000'. [ 642.917698][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3000'. [ 643.020099][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.238727][ T5623] Bluetooth: hci3: command tx timeout [ 643.265789][T15328] loop2: detected capacity change from 0 to 512 [ 643.348371][T15328] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 643.409080][T15328] EXT4-fs (loop2): 1 truncate cleaned up [ 643.417401][T15328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.923201][T15204] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.926001][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.926260][T15204] bridge_slave_0: entered allmulticast mode [ 643.950797][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.001459][T15204] bridge_slave_0: entered promiscuous mode [ 644.011864][T15204] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.012196][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.012461][T15204] bridge_slave_1: entered allmulticast mode [ 644.015398][T15204] bridge_slave_1: entered promiscuous mode [ 644.376850][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.403858][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.449159][T15359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3005'. [ 644.480254][T15359] veth0_vlan: entered allmulticast mode [ 644.484935][T15204] team0: Port device team_slave_0 added [ 644.501147][T15204] team0: Port device team_slave_1 added [ 644.585253][T15356] loop3: detected capacity change from 0 to 2048 [ 644.653973][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3011'. [ 644.653993][T15363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3011'. [ 644.654401][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3011'. [ 644.654416][T15363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3011'. [ 644.716459][T15356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.716606][T15356] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.084871][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.319537][ T5623] Bluetooth: hci3: command tx timeout [ 645.493640][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.493655][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.493679][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.583726][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.583741][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.583764][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.772265][T15204] hsr_slave_0: entered promiscuous mode [ 645.774707][T15204] hsr_slave_1: entered promiscuous mode [ 646.008265][T15408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3020'. [ 646.236149][T15404] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.350273][T15404] bridge_slave_0 (unregistering): left allmulticast mode [ 646.350304][T15404] bridge_slave_0 (unregistering): left promiscuous mode [ 646.350404][T15404] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.803492][T15408] team0 (unregistering): Port device team_slave_0 removed [ 646.876894][T15408] team0 (unregistering): Port device team_slave_1 removed [ 647.126619][ T124] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.178349][ T124] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.212896][ T124] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.291243][ T124] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.402903][ T5623] Bluetooth: hci3: command tx timeout [ 648.596350][T15488] __nla_validate_parse: 5 callbacks suppressed [ 648.596368][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 648.596393][T15488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3042'. [ 649.086294][T15506] loop3: detected capacity change from 0 to 128 [ 649.298990][T15512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'. [ 649.477959][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3047'. [ 649.823717][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 649.823749][T15488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3042'. [ 649.969174][T15520] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3049'. [ 650.230826][T15514] bridge1: port 1(veth3) entered blocking state [ 650.231287][T15514] bridge1: port 1(veth3) entered disabled state [ 650.231620][T15514] veth3: entered allmulticast mode [ 650.235576][T15514] veth3: entered promiscuous mode [ 650.277204][T15508] bridge1: port 2(veth0_to_bond) entered blocking state [ 650.277491][T15508] bridge1: port 2(veth0_to_bond) entered disabled state [ 650.277750][T15508] veth0_to_bond: entered allmulticast mode [ 650.286701][T15508] veth0_to_bond: entered promiscuous mode [ 650.347746][T15506] vlan2: entered allmulticast mode [ 650.347858][T15506] team0: entered allmulticast mode [ 650.347872][T15506] team_slave_0: entered allmulticast mode [ 650.347894][T15506] team_slave_1: entered allmulticast mode [ 650.351894][T15506] bridge1: port 3(vlan2) entered blocking state [ 650.352154][T15506] bridge1: port 3(vlan2) entered disabled state [ 650.356284][T15506] vlan2: entered promiscuous mode [ 650.356299][T15506] team0: entered promiscuous mode [ 650.356311][T15506] team_slave_0: entered promiscuous mode [ 650.356529][T15506] team_slave_1: entered promiscuous mode [ 650.400149][ T1457] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.443646][ T1457] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.021248][T15546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3059'. [ 651.350450][ T1457] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.365631][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3064'. [ 651.365659][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3064'. [ 651.374586][T15555] loop6: detected capacity change from 0 to 1764 [ 651.406509][ T1457] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.877601][T15574] loop2: detected capacity change from 0 to 1024 [ 652.074205][T15574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.633003][T15582] loop6: detected capacity change from 0 to 1024 [ 652.634288][T15582] EXT4-fs: Ignoring removed bh option [ 652.758000][T15582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.109772][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.388500][T14361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.677585][T15609] __nla_validate_parse: 3 callbacks suppressed [ 653.677601][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 653.677625][T15609] netlink: 'syz.6.3077': attribute type 8 has an invalid length. [ 653.856815][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 653.856846][T15609] netlink: 'syz.6.3077': attribute type 8 has an invalid length. [ 654.209967][T15621] loop2: detected capacity change from 0 to 1024 [ 654.211382][T15621] EXT4-fs: Ignoring removed bh option [ 654.295210][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3087'. [ 654.341430][T15621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.643054][T15635] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3091'. [ 654.643094][T15635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3091'. [ 654.680475][T15635] bond0: entered promiscuous mode [ 654.680488][T15635] bond_slave_0: entered promiscuous mode [ 654.692133][T15635] bond_slave_1: entered promiscuous mode [ 654.779413][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.816338][T15637] loop6: detected capacity change from 0 to 1764 [ 654.853553][T15635] batadv_slave_0: entered promiscuous mode [ 654.853736][T15635] batadv_slave_0: left promiscuous mode [ 654.855621][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 654.855663][T15639] netlink: 'syz.3.3094': attribute type 8 has an invalid length. [ 654.935157][T15635] bond0: left promiscuous mode [ 654.935177][T15635] bond_slave_0: left promiscuous mode [ 654.935412][T15635] bond_slave_1: left promiscuous mode [ 655.067024][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 655.067057][T15639] netlink: 'syz.3.3094': attribute type 8 has an invalid length. [ 655.665840][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.749768][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.763767][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.765988][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.154741][T15672] loop2: detected capacity change from 0 to 1024 [ 656.155680][T15672] EXT4-fs: Ignoring removed bh option [ 656.301065][T15672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.579599][T15204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 656.586164][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.711121][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.723617][T15204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 656.840783][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.846179][T15204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 656.927115][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.944202][T15204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 656.974367][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 657.407999][T15714] loop3: detected capacity change from 0 to 1024 [ 657.417793][T15714] EXT4-fs: Ignoring removed bh option [ 657.561899][T15204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.610827][T15714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.832263][T15204] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.890728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.890957][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.972873][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.973055][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.289168][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.711951][T15748] loop3: detected capacity change from 0 to 1024 [ 658.716994][T15748] EXT4-fs: Ignoring removed bh option [ 658.755800][T15745] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 658.820811][T15748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.315759][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.764139][T15781] loop2: detected capacity change from 0 to 1764 [ 660.213392][T15798] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3135'. [ 660.311812][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3136'. [ 660.487175][T15204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.149536][T15829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3145'. [ 662.304322][T15204] veth0_vlan: entered promiscuous mode [ 662.399964][T15204] veth1_vlan: entered promiscuous mode [ 662.653954][T15204] veth0_macvtap: entered promiscuous mode [ 662.686350][T15204] veth1_macvtap: entered promiscuous mode [ 663.386846][T15204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.413659][T15204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.470623][ T2231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.470853][ T2231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.472420][ T2231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.476003][ T2231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.317594][T15867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3151'. [ 664.971346][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.128337][T15877] bridge_slave_0 (unregistering): left allmulticast mode [ 665.128369][T15877] bridge_slave_0 (unregistering): left promiscuous mode [ 665.128492][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.326765][ T5614] gfs2: fsid=syz:syz.0: 1 glocks left after 306 seconds; still waiting [ 665.390347][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.390366][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.487406][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.487424][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.507453][T15887] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 665.604384][T15898] loop2: detected capacity change from 0 to 1024 [ 665.605359][T15898] EXT4-fs: Ignoring removed mblk_io_submit option [ 665.691571][T15898] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 665.783248][T15898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.948481][T15904] loop6: detected capacity change from 0 to 2048 [ 666.167140][T15904] loop6: p3 < > [ 666.464200][T15920] loop0: detected capacity change from 0 to 128 [ 666.465311][T15920] EXT4-fs: Ignoring removed oldalloc option [ 666.577855][T15920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 666.578027][T15920] System zones: 1-3, 19-19, 35-36 [ 666.592523][T14904] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.616604][T15920] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.618382][T15920] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 666.665244][T14904] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.665274][T14904] Buffer I/O error on dev loop6p3, logical block 0, async page read [ 666.669259][T14904] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.669285][T14904] Buffer I/O error on dev loop6p3, logical block 0, async page read [ 666.669835][T14904] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.669863][T14904] Buffer I/O error on dev loop6p3, logical block 0, async page read [ 666.670350][T14904] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.670372][T14904] Buffer I/O error on dev loop6p3, logical block 0, async page read [ 666.678402][T14904] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.678426][T14904] Buffer I/O error on dev loop6p3, logical block 0, async page read [ 666.826898][T14904] udevd[14904]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 666.883697][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.064005][ T38] audit: type=1800 audit(1777728508.615:173): pid=15920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2972" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 667.186809][T15204] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 667.217336][T15937] loop2: detected capacity change from 0 to 256 [ 667.560803][T15946] loop0: detected capacity change from 0 to 512 [ 667.596793][T15947] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3173'. [ 667.596819][T15947] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3173'. [ 667.835128][T15946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.835267][T15946] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.923918][T15937] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 668.164712][T15962] netlink: 'syz.1.3177': attribute type 29 has an invalid length. [ 668.165262][T15959] netlink: 'syz.1.3177': attribute type 29 has an invalid length. [ 668.168141][T15959] netlink: 'syz.1.3177': attribute type 29 has an invalid length. [ 668.472120][T15965] loop3: detected capacity change from 0 to 1024 [ 668.477540][T15965] EXT4-fs: Ignoring removed bh option [ 669.454216][T15946] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.3172: corrupted xattr block 33: invalid checksum [ 669.454683][T15946] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 669.944107][T15946] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -74) [ 670.183397][T15976] loop2: detected capacity change from 0 to 256 [ 671.328562][T15965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.791624][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.820941][T15204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.847681][T15986] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.271076][T15986] bridge_slave_0 (unregistering): left allmulticast mode [ 672.271108][T15986] bridge_slave_0 (unregistering): left promiscuous mode [ 672.271216][T15986] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.313879][T15998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3186'. [ 672.946174][T16024] netlink: 'syz.3.3191': attribute type 29 has an invalid length. [ 672.946828][T16020] netlink: 'syz.3.3191': attribute type 29 has an invalid length. [ 672.962580][T16020] netlink: 'syz.3.3191': attribute type 29 has an invalid length. [ 673.423932][T16043] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 673.425344][T16038] IPVS: stopping backup sync thread 16043 ... [ 674.728090][T16046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3199'. [ 676.368411][T16075] loop0: detected capacity change from 0 to 512 [ 676.712972][T16075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.757743][T16075] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.764880][T16090] loop3: detected capacity change from 0 to 512 [ 676.770562][T16090] EXT4-fs: Ignoring removed i_version option [ 676.775784][T16090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 676.830744][T16075] tmpfs: Unknown parameter './file1' [ 677.002627][T16090] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3208: invalid indirect mapped block 4294967295 (level 1) [ 677.002662][T16090] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 677.061340][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 677.061368][ C0] EXT4-fs (loop3): initial error at time 1777728518: ext4_free_branches:1023: inode 11 [ 677.061400][ C0] EXT4-fs (loop3): last error at time 1777728518: ext4_free_branches:1023: inode 11 [ 677.137528][T16100] loop2: detected capacity change from 0 to 512 [ 677.138515][T16100] EXT4-fs: Ignoring removed nobh option [ 677.158759][T16100] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 677.225698][T16100] EXT4-fs (loop2): 1 truncate cleaned up [ 677.234538][T16100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.287969][T16090] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3208: invalid indirect mapped block 4294967295 (level 1) [ 677.287991][T16090] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 677.373924][T16090] EXT4-fs (loop3): 2 truncates cleaned up [ 677.432495][ T38] audit: type=1800 audit(1777728518.985:174): pid=16075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3203" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 677.434424][T16090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.453664][ T38] audit: type=1800 audit(1777728519.005:175): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3211" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 677.530273][T16090] EXT4-fs error (device loop3): ext4_get_parent:1832: inode #11: comm syz.3.3208: bad parent inode number: 3 [ 677.661804][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.719465][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.737483][T16108] loop6: detected capacity change from 0 to 1024 [ 677.743361][T16108] EXT4-fs: Ignoring removed orlov option [ 677.888522][T16108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.270287][T15204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.816702][T14361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.402900][T16162] loop0: detected capacity change from 0 to 512 [ 681.421351][T16162] EXT4-fs: Ignoring removed i_version option [ 681.425524][T16162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 681.776543][T16164] loop2: detected capacity change from 0 to 4096 [ 681.850446][T16162] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3224: invalid indirect mapped block 4294967295 (level 1) [ 681.850482][T16162] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 681.865483][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 681.865503][ C1] EXT4-fs (loop0): initial error at time 1777728523: ext4_free_branches:1023: inode 11 [ 681.865526][ C1] EXT4-fs (loop0): last error at time 1777728523: ext4_free_branches:1023: inode 11 [ 682.061892][T16162] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3224: invalid indirect mapped block 4294967295 (level 1) [ 682.061927][T16162] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 682.115515][T16162] EXT4-fs (loop0): 2 truncates cleaned up [ 682.186836][T16164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.197504][T16162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.454156][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.641216][T15204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.880992][T16190] loop2: detected capacity change from 0 to 256 [ 683.026865][T16190] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 683.084060][ T38] audit: type=1800 audit(1777728524.635:176): pid=16190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3230" name="file1" dev="loop2" ino=1048678 res=0 errno=0 [ 684.251623][T16190] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 684.251649][T16190] FAT-fs (loop2): Filesystem has been set read-only [ 684.251733][T16190] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 684.251801][T16190] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 684.251862][T16190] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 685.559619][T16231] loop6: detected capacity change from 0 to 512 [ 685.564805][T16231] EXT4-fs: Ignoring removed i_version option [ 685.568054][T16231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 685.642233][T16231] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3242: invalid indirect mapped block 4294967295 (level 1) [ 685.642268][T16231] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 685.648654][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 685.648672][ C1] EXT4-fs (loop6): initial error at time 1777728527: ext4_free_branches:1023: inode 11 [ 685.648693][ C1] EXT4-fs (loop6): last error at time 1777728527: ext4_free_branches:1023: inode 11 [ 685.707111][T16231] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3242: invalid indirect mapped block 4294967295 (level 1) [ 685.707144][T16231] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 685.746015][T16231] EXT4-fs (loop6): 2 truncates cleaned up [ 685.789990][T16231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.805951][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.806043][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.107716][T14361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.838419][T16262] loop3: detected capacity change from 0 to 2048 [ 686.935129][T16262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.324448][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.882396][T16296] loop0: detected capacity change from 0 to 512 [ 688.887303][T16296] ext4: Unknown parameter 'fowner<00000000000000000000' [ 689.203830][T16300] loop0: detected capacity change from 0 to 2048 [ 689.433489][T16300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.433611][T16300] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.553484][ T38] audit: type=1800 audit(1777728531.075:177): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3262" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 689.631828][T16300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3262: bg 0: block 345: padding at end of block bitmap is not set [ 689.684181][T16300] EXT4-fs (loop0): Remounting filesystem read-only [ 689.971863][T15204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.503158][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 691.554092][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 691.568683][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 691.601692][ T3088] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.601725][ T3088] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.634460][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 691.650715][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.255841][T16378] loop0: detected capacity change from 0 to 1024 [ 692.272655][T16378] EXT4-fs: Ignoring removed bh option [ 692.358084][T16378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.635028][T15204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.685453][ T3088] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.685482][ T3088] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.959260][ T5623] Bluetooth: hci0: command tx timeout [ 694.106415][T16410] syz.1.3287 (16410) used greatest stack depth: 15712 bytes left [ 694.107792][ T3088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.107821][ T3088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.810675][ T3088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.810707][ T3088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.118511][T16450] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 66, id = 0 [ 695.134379][T16449] IPVS: stopping backup sync thread 16450 ... [ 696.060067][ T5620] Bluetooth: hci0: command tx timeout [ 696.740513][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 696.740662][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'. [ 696.741092][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 696.741107][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'. [ 696.923095][T16505] loop2: detected capacity change from 0 to 1024 [ 696.925894][T16505] EXT4-fs: Ignoring removed bh option [ 697.102288][T16505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.218854][T16486] Bluetooth: hci7: command 0x0406 tx timeout [ 698.218886][T16486] Bluetooth: hci4: command 0x0406 tx timeout [ 698.218905][T16486] Bluetooth: hci0: command tx timeout [ 698.255316][T14611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.765144][ T3088] bridge_slave_1: left allmulticast mode [ 699.765176][ T3088] bridge_slave_1: left promiscuous mode [ 699.765499][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.853719][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 700.016825][T16589] loop2: detected capacity change from 0 to 8192 [ 700.091492][T16596] Unsupported ieee802154 address type: 0 [ 700.278653][ T5620] Bluetooth: hci0: command tx timeout [ 700.996080][T16619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3345'. [ 701.959259][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.962258][T16667] syz.1.3357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 702.017225][T16670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3357'. [ 702.039783][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.083549][ T3088] bond0 (unregistering): Released all slaves [ 702.301505][T16651] tipc: Started in network mode [ 702.301532][T16651] tipc: Node identity 36abe458f19b, cluster identity 4711 [ 702.315274][T16651] tipc: Enabled bearer , priority 0 [ 702.336515][T16654] syzkaller0: entered promiscuous mode [ 702.336529][T16654] syzkaller0: entered allmulticast mode [ 702.405601][T16657] tipc: Resetting bearer [ 702.828990][T16645] tipc: Resetting bearer [ 702.934915][T16687] loop0: detected capacity change from 0 to 512 [ 702.984489][T16687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.984572][T16687] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.014102][T16645] tipc: Disabling bearer [ 703.106756][T15204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.185275][T16357] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.185537][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.185852][T16357] bridge_slave_0: entered allmulticast mode [ 703.227818][T16357] bridge_slave_0: entered promiscuous mode [ 703.648128][T16708] loop0: detected capacity change from 0 to 512 [ 703.663490][T16708] EXT4-fs: Ignoring removed i_version option [ 703.677220][T16708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 703.765218][T16708] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3371: invalid indirect mapped block 4294967295 (level 1) [ 703.765241][T16708] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 703.766614][T16708] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3371: invalid indirect mapped block 4294967295 (level 1) [ 703.766634][T16708] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 703.767200][T16708] EXT4-fs (loop0): 2 truncates cleaned up [ 703.824300][T16708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.907747][T15204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.995731][T16685] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3364'. [ 704.006847][T16357] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.007100][T16357] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.007395][T16357] bridge_slave_1: entered allmulticast mode [ 704.035217][T16357] bridge_slave_1: entered promiscuous mode [ 704.577964][T16727] loop2: detected capacity change from 0 to 1024 [ 704.772396][ T5621] kernel write not supported for file /vcs (pid: 5621 comm: kworker/0:4) [ 705.214435][T16744] loop3: detected capacity change from 0 to 512 [ 705.257185][T16357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.310283][T16357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.498247][T16744] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 705.819115][ T3088] hsr_slave_0: left promiscuous mode [ 705.874851][ T3088] hsr_slave_1: left promiscuous mode [ 705.875618][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.875640][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.907154][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.907177][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.166372][T16744] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3387: bg 0: block 104: invalid block bitmap [ 706.166404][T16744] loop3: lost filesystem error report for type 5 error -117 [ 706.177317][ C0] EXT4-fs (loop3): initial error at time 1777728547: ext4_validate_block_bitmap:432 [ 706.177343][ C0] EXT4-fs (loop3): last error at time 1777728547: ext4_validate_block_bitmap:432 [ 706.217026][T16744] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 706.217048][T16744] loop3: lost filesystem error report for type 5 error -117 [ 706.254301][ T3088] veth1_macvtap: left promiscuous mode [ 706.254361][ T3088] veth0_macvtap: left promiscuous mode [ 706.254516][ T3088] veth1_vlan: left promiscuous mode [ 706.264041][T16744] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3387: invalid indirect mapped block 1 (level 1) [ 706.264072][T16744] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 706.342671][T16744] EXT4-fs (loop3): 1 truncate cleaned up [ 706.454429][T16744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.145431][T14356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.827468][T16788] loop3: detected capacity change from 0 to 256 [ 707.835313][T16788] FAT-fs (loop3): Directory bread(block 1285) failed [ 707.835341][T16788] FAT-fs (loop3): Directory bread(block 1286) failed [ 707.835361][T16788] FAT-fs (loop3): Directory bread(block 1287) failed [ 707.835552][T16788] FAT-fs (loop3): Directory bread(block 1288) failed [ 707.853303][T16788] FAT-fs (loop3): Directory bread(block 1285) failed [ 707.853330][T16788] FAT-fs (loop3): Directory bread(block 1286) failed [ 707.853350][T16788] FAT-fs (loop3): Directory bread(block 1287) failed [ 707.853370][T16788] FAT-fs (loop3): Directory bread(block 1288) failed [ 707.853429][T16788] FAT-fs (loop3): Directory bread(block 1285) failed [ 707.853449][T16788] FAT-fs (loop3): Directory bread(block 1286) failed [ 707.876917][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 707.979524][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 708.505378][T16770] syzkaller0: entered promiscuous mode [ 708.505405][T16770] syzkaller0: entered allmulticast mode [ 708.527043][T16357] team0: Port device team_slave_0 added [ 709.886002][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803c75fc00: rx timeout, send abort [ 710.403815][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803c75fc00: abort rx timeout. Force session deactivation [ 710.508429][ T5620] Bluetooth: hci7: unexpected event for opcode 0x1009 [ 712.375880][ T5620] Bluetooth: hci7: unexpected event for opcode 0x1009 [ 718.678838][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 721.217359][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 721.286531][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 721.287927][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 721.293984][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 721.379369][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 721.807936][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 721.860424][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 721.865891][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 721.866884][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 721.894060][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.492715][ T5623] Bluetooth: hci5: command tx timeout [ 724.039586][ T5623] Bluetooth: hci6: command tx timeout [ 725.586439][ T5623] Bluetooth: hci5: command tx timeout [ 726.121203][ T5623] Bluetooth: hci6: command tx timeout [ 726.759240][ T5614] gfs2: fsid=syz:syz.0: 1 glocks left after 368 seconds; still waiting [ 727.139814][T16357] team0: Port device team_slave_1 added [ 727.241254][T16841] syzkaller0: entered promiscuous mode [ 727.241276][T16841] syzkaller0: entered allmulticast mode [ 727.651598][ T5623] Bluetooth: hci5: command tx timeout [ 727.962856][ T5620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 728.040585][ T5620] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 728.049702][ T5620] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 728.059579][ T5620] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 728.063580][ T5620] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 728.198686][ T5620] Bluetooth: hci6: command tx timeout [ 728.360292][ T5623] Bluetooth: hci7: unexpected event for opcode 0x1009 [ 729.718815][ T5623] Bluetooth: hci5: command tx timeout [ 729.925067][T16900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3443'. [ 730.280880][ T5623] Bluetooth: hci8: command tx timeout [ 730.280884][ T5620] Bluetooth: hci6: command tx timeout [ 732.389894][ T5623] Bluetooth: hci8: command tx timeout [ 734.439259][ T5623] Bluetooth: hci8: command tx timeout [ 736.518883][ T5623] Bluetooth: hci8: command tx timeout [ 745.597475][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 745.640557][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 745.642509][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 745.643418][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 745.645875][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 746.674040][T16357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.674057][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.674081][T16357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.162649][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 747.166546][T16357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.166560][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.166584][T16357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.252091][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.252182][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.500874][T16357] hsr_slave_0: entered promiscuous mode [ 747.503215][T16357] hsr_slave_1: entered promiscuous mode [ 747.504967][T16357] debugfs: 'hsr0' already exists in 'hsr' [ 747.504989][T16357] Cannot create hsr debugfs directory [ 747.880927][ T5623] Bluetooth: hci2: command tx timeout [ 748.557382][ T3088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.557404][ T3088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.036091][ T3088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.036112][ T3088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.428243][ T3088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.428263][ T3088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.912714][ T3088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.912747][ T3088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.959469][ T5620] Bluetooth: hci2: command tx timeout [ 750.346396][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 751.553287][T16873] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.553569][T16873] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.553860][T16873] bridge_slave_0: entered allmulticast mode [ 751.557104][T16873] bridge_slave_0: entered promiscuous mode [ 751.657385][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.715355][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.749033][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.768830][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.769540][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.042901][ T5620] Bluetooth: hci2: command tx timeout [ 752.154911][T16873] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.155066][T16873] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.155237][T16873] bridge_slave_1: entered allmulticast mode [ 752.157064][T16873] bridge_slave_1: entered promiscuous mode [ 752.425176][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.425417][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.425710][T16868] bridge_slave_0: entered allmulticast mode [ 752.447438][T16868] bridge_slave_0: entered promiscuous mode [ 752.489004][T16873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.591766][T16868] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.592002][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.592203][T16868] bridge_slave_1: entered allmulticast mode [ 752.594022][T16868] bridge_slave_1: entered promiscuous mode [ 752.607480][T16873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.966887][ T3088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.504558][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.507536][T16873] team0: Port device team_slave_0 added [ 753.523685][T16882] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.523885][T16882] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.524089][T16882] bridge_slave_0: entered allmulticast mode [ 753.533910][T16882] bridge_slave_0: entered promiscuous mode [ 753.754736][ T3088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.809441][T16873] team0: Port device team_slave_1 added [ 753.812662][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.813088][T16882] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.813252][T16882] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.813410][T16882] bridge_slave_1: entered allmulticast mode [ 753.815174][T16882] bridge_slave_1: entered promiscuous mode [ 753.958797][ T5620] Bluetooth: hci3: command tx timeout [ 754.041957][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.042163][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.042547][T16905] bridge_slave_0: entered allmulticast mode [ 754.044826][T16905] bridge_slave_0: entered promiscuous mode [ 754.119206][ T5620] Bluetooth: hci2: command tx timeout [ 754.286120][ T3088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.321146][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.321326][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.321721][T16905] bridge_slave_1: entered allmulticast mode [ 754.323513][T16905] bridge_slave_1: entered promiscuous mode [ 754.325959][T16873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.325967][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.325981][T16873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.379868][T16868] team0: Port device team_slave_0 added [ 754.397060][T16882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.441358][T16873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.441369][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.441383][T16873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.444436][T16868] team0: Port device team_slave_1 added [ 754.447721][T16882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.723632][ T3088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.764520][T16905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.811256][T16905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.816511][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.816524][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.816548][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.842428][T16882] team0: Port device team_slave_0 added [ 754.891819][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.891830][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.891844][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.092892][T16882] team0: Port device team_slave_1 added [ 755.163246][T16905] team0: Port device team_slave_0 added [ 755.172380][T16873] hsr_slave_0: entered promiscuous mode [ 755.174228][T16873] hsr_slave_1: entered promiscuous mode [ 755.175677][T16873] debugfs: 'hsr0' already exists in 'hsr' [ 755.175699][T16873] Cannot create hsr debugfs directory [ 755.211536][T16905] team0: Port device team_slave_1 added [ 755.241255][T16882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.241267][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.241285][T16882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.300240][T16882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.300249][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.300263][T16882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.457304][T16905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.457314][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.457328][T16905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.471599][T16868] hsr_slave_0: entered promiscuous mode [ 755.473607][T16868] hsr_slave_1: entered promiscuous mode [ 755.475517][T16868] debugfs: 'hsr0' already exists in 'hsr' [ 755.475537][T16868] Cannot create hsr debugfs directory [ 755.556444][T16905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.556455][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.556469][T16905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.885111][T16882] hsr_slave_0: entered promiscuous mode [ 755.887144][T16882] hsr_slave_1: entered promiscuous mode [ 755.889783][T16882] debugfs: 'hsr0' already exists in 'hsr' [ 755.889805][T16882] Cannot create hsr debugfs directory [ 756.040213][ T5620] Bluetooth: hci3: command tx timeout [ 756.374979][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 756.404913][T16905] hsr_slave_0: entered promiscuous mode [ 756.406101][T16905] hsr_slave_1: entered promiscuous mode [ 756.407029][T16905] debugfs: 'hsr0' already exists in 'hsr' [ 756.407048][T16905] Cannot create hsr debugfs directory [ 756.665834][ T3088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.237788][ T3088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.927494][ T3088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.124540][ T5620] Bluetooth: hci3: command tx timeout [ 758.509613][ T3088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.783256][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.783599][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.783853][T16993] bridge_slave_0: entered allmulticast mode [ 758.787369][T16993] bridge_slave_0: entered promiscuous mode [ 759.040584][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.040946][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.041288][T16993] bridge_slave_1: entered allmulticast mode [ 759.044555][T16993] bridge_slave_1: entered promiscuous mode [ 759.282540][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.306872][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.588339][T16993] team0: Port device team_slave_0 added [ 760.025396][T16993] team0: Port device team_slave_1 added [ 760.198900][ T5620] Bluetooth: hci3: command tx timeout [ 760.611841][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.611856][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.611882][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.168935][ T3088] bridge_slave_1: left allmulticast mode [ 761.168959][ T3088] bridge_slave_1: left promiscuous mode [ 761.169155][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.232042][ T3088] vlan2: left promiscuous mode [ 761.232057][ T3088] team0: left promiscuous mode [ 761.232064][ T3088] team_slave_0: left promiscuous mode [ 761.232203][ T3088] team_slave_1: left promiscuous mode [ 761.249462][ T3088] bridge1: port 3(vlan2) entered disabled state [ 761.309804][ T3088] veth0_to_bond: left allmulticast mode [ 761.309826][ T3088] veth0_to_bond: left promiscuous mode [ 761.309996][ T3088] bridge1: port 2(veth0_to_bond) entered disabled state [ 761.389736][ T3088] veth3: left allmulticast mode [ 761.389758][ T3088] veth3: left promiscuous mode [ 761.389920][ T3088] bridge1: port 1(veth3) entered disabled state [ 761.689287][ T3088] bridge_slave_1: left allmulticast mode [ 761.689311][ T3088] bridge_slave_1: left promiscuous mode [ 761.689479][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.749653][ T3088] bridge_slave_0: left allmulticast mode [ 761.749675][ T3088] bridge_slave_0: left promiscuous mode [ 761.749831][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.069224][ T3088] bridge_slave_1: left allmulticast mode [ 762.069258][ T3088] bridge_slave_1: left promiscuous mode [ 762.069520][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.132040][ T3088] bridge_slave_0: left allmulticast mode [ 762.132072][ T3088] bridge_slave_0: left promiscuous mode [ 762.153743][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.471499][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.549372][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.590753][ T3088] bond0 (unregistering): Released all slaves [ 764.059294][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.119199][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.142462][ T3088] bond0 (unregistering): Released all slaves [ 764.599461][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.680170][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.721237][ T3088] bond0 (unregistering): Released all slaves [ 764.740945][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.740954][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.740968][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.115284][ T3088] tipc: Left network mode [ 765.180040][T16993] hsr_slave_0: entered promiscuous mode [ 765.181792][T16993] hsr_slave_1: entered promiscuous mode [ 765.183209][T16993] debugfs: 'hsr0' already exists in 'hsr' [ 765.183229][T16993] Cannot create hsr debugfs directory [ 768.653372][T16905] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.107502][T16905] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.368763][ T3088] hsr_slave_0: left promiscuous mode [ 769.388711][ T3088] hsr_slave_1: left promiscuous mode [ 769.389349][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.389364][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.429356][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.429372][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.588669][ T3088] hsr_slave_0: left promiscuous mode [ 769.608686][ T3088] hsr_slave_1: left promiscuous mode [ 769.609414][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.609430][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.649465][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.649482][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.808675][ T3088] hsr_slave_0: left promiscuous mode [ 769.828678][ T3088] hsr_slave_1: left promiscuous mode [ 769.829386][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.829402][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.870899][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.870916][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.972502][ T3088] veth1_macvtap: left promiscuous mode [ 769.972562][ T3088] veth0_macvtap: left promiscuous mode [ 769.972719][ T3088] veth1_vlan: left promiscuous mode [ 769.972824][ T3088] veth0_vlan: left promiscuous mode [ 770.089021][ T3088] veth1_macvtap: left promiscuous mode [ 770.089121][ T3088] veth0_macvtap: left promiscuous mode [ 770.089342][ T3088] veth1_vlan: left promiscuous mode [ 770.089447][ T3088] veth0_vlan: left promiscuous mode [ 770.208956][ T3088] veth1_macvtap: left promiscuous mode [ 770.209014][ T3088] veth0_macvtap: left promiscuous mode [ 770.209177][ T3088] veth1_vlan: left promiscuous mode [ 770.278856][ T39] INFO: task syz.4.2883:14888 blocked for more than 143 seconds. [ 770.278878][ T39] Not tainted syzkaller #0 [ 770.278887][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.278902][ T39] task:syz.4.2883 state:D stack:25256 pid:14888 tgid:14884 ppid:14346 task_flags:0x400140 flags:0x00080002 [ 770.278955][ T39] Call Trace: [ 770.278962][ T39] [ 770.278975][ T39] __schedule+0x169e/0x54f0 [ 770.279030][ T39] ? irqentry_exit+0x218/0x730 [ 770.279053][ T39] ? trace_irq_disable+0x3b/0x140 [ 770.279077][ T39] ? __pfx___schedule+0x10/0x10 [ 770.279102][ T39] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 770.279136][ T39] rt_mutex_schedule+0x76/0xf0 [ 770.279154][ T39] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 770.279175][ T39] __rt_mutex_slowlock_locked+0x1f28/0x2550 [ 770.279207][ T39] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 770.279235][ T39] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 770.279267][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.279291][ T39] ? rcu_is_watching+0x15/0xb0 [ 770.279314][ T39] __rwbase_read_lock+0xc3/0x180 [ 770.279333][ T39] ? __pfx___rwbase_read_lock+0x10/0x10 [ 770.279351][ T39] ? lock_acquire+0x221/0x350 [ 770.279381][ T39] down_read+0x132/0x200 [ 770.279398][ T39] ? __pfx_down_read+0x10/0x10 [ 770.279419][ T39] ? super_lock+0xe0/0x3d0 [ 770.279442][ T39] super_lock+0x2d6/0x3d0 [ 770.279464][ T39] ? __pfx_super_lock+0x10/0x10 [ 770.279483][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 770.279507][ T39] ? rt_spin_unlock+0x14f/0x200 [ 770.279531][ T39] ? rt_spin_unlock+0x160/0x200 [ 770.279553][ T39] __iterate_supers+0x126/0x250 [ 770.279573][ T39] ? __pfx_quota_sync_one+0x10/0x10 [ 770.279600][ T39] __se_sys_quotactl+0x3a7/0x9e0 [ 770.279632][ T39] ? __pfx___se_sys_quotactl+0x10/0x10 [ 770.279662][ T39] ? __secure_computing+0xe1/0x2a0 [ 770.279688][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.279708][ T39] do_syscall_64+0x15f/0xf80 [ 770.279731][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.279749][ T39] ? clear_bhb_loop+0x40/0x90 [ 770.279771][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.279789][ T39] RIP: 0033:0x7f842511cdd9 [ 770.279805][ T39] RSP: 002b:00007f8422f09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 770.279824][ T39] RAX: ffffffffffffffda RBX: 00007f8425396270 RCX: 00007f842511cdd9 [ 770.279837][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 770.279849][ T39] RBP: 00007f84251b2d69 R08: 0000000000000000 R09: 0000000000000000 [ 770.279860][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.279872][ T39] R13: 00007f8425396308 R14: 00007f8425396270 R15: 00007ffca9a15a18 [ 770.279907][ T39] [ 770.279946][ T39] [ 770.279946][ T39] Showing all locks held in the system: [ 770.279955][ T39] 3 locks held by kworker/0:0/9: [ 770.279965][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 770.280010][ T39] #1: ffffc900000e7c40 (rx_mode_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 770.280052][ T39] #2: ffffffff8f36fbf8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x1c/0x460 [ 770.280094][ T39] 1 lock held by khungtaskd/39: [ 770.280130][ T39] #0: ffffffff8dfc8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 770.280188][ T39] 2 locks held by kworker/u8:9/1188: [ 770.280197][ T39] #0: ffff888032d74938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 770.280240][ T39] #1: ffffc900065d7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 770.280294][ T39] 4 locks held by kworker/u8:18/3088: [ 770.280303][ T39] #0: ffff88801b686138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 770.280344][ T39] #1: ffffc9000ea5fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 770.280385][ T39] #2: ffffffff8f360720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 770.280426][ T39] #3: ffffffff8f36fbf8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 770.280473][ T39] 2 locks held by dhcpcd/5275: [ 770.280483][ T39] #0: ffffffff8f350218 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x644/0x7f0 [ 770.280523][ T39] #1: ffffffff8f36fbf8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 770.280564][ T39] 2 locks held by getty/5364: [ 770.280574][ T39] #0: ffff888035e710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 770.280617][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 770.280665][ T39] 1 lock held by syz-executor/5614: [ 770.280675][ T39] #0: ffff88805e5960d0 (&type->s_umount_key#60){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 770.280723][ T39] 3 locks held by kworker/u8:7/13360: [ 770.280733][ T39] #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 770.280776][ T39] #1: ffffc9000537fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 770.280818][ T39] #2: ffffffff8f36fbf8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 770.280867][ T39] 1 lock held by syz.4.2883/14888: [ 770.280877][ T39] #0: ffff88805e5960d0 (&type->s_umount_key#60){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 770.280932][ T39] 4 locks held by syz-executor/16868: [ 770.280942][ T39] #0: ffff8880365f8480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 770.280989][ T39] #1: ffff888036864078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 770.281034][ T39] #2: ffff888029f5f878 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 770.281083][ T39] #3: ffffffff8ebe6e58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 770.281126][ T39] 4 locks held by syz-executor/16873: [ 770.281136][ T39] #0: ffff8880365f8480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 770.281182][ T39] #1: ffff88805e469c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 770.281226][ T39] #2: ffff888029f5f878 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 770.281275][ T39] #3: ffffffff8ebe6e58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 770.281317][ T39] 4 locks held by syz-executor/16882: [ 770.281327][ T39] #0: ffff8880365f8480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 770.281374][ T39] #1: ffff88805f743078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 770.281418][ T39] #2: ffff888029f5f878 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 770.281467][ T39] #3: ffffffff8ebe6e58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 770.281508][ T39] 7 locks held by syz-executor/16905: [ 770.281518][ T39] #0: ffff8880365f8480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 770.281564][ T39] #1: ffff88805d594c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 770.281608][ T39] #2: ffff888029f5f788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 770.281657][ T39] #3: ffffffff8ebe6e58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 770.281699][ T39] #4: ffff888062ead160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 770.281746][ T39] #5: ffff888035ff8310 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 770.281793][ T39] #6: ffffffff8f36fbf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 770.281837][ T39] 4 locks held by syz-executor/16993: [ 770.281847][ T39] #0: ffff8880365f8480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 770.281898][ T39] #1: ffff88805a877478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 770.281943][ T39] #2: ffff888029f5f788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 770.281992][ T39] #3: ffffffff8ebe6e58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 770.282036][ T39] [ 770.282041][ T39] ============================================= [ 770.282041][ T39] [ 770.282055][ T39] NMI backtrace for cpu 0 [ 770.282075][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 770.282126][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.282135][ T39] Call Trace: [ 770.282141][ T39] [ 770.282148][ T39] dump_stack_lvl+0xe8/0x150 [ 770.282170][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 770.282190][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 770.282212][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 770.282235][ T39] sys_info+0x135/0x170 [ 770.282251][ T39] watchdog+0xfd3/0x1030 [ 770.282279][ T39] ? watchdog+0x1c9/0x1030 [ 770.282305][ T39] kthread+0x388/0x470 [ 770.282330][ T39] ? __pfx_watchdog+0x10/0x10 [ 770.282348][ T39] ? __pfx_kthread+0x10/0x10 [ 770.282372][ T39] ret_from_fork+0x514/0xb70 [ 770.282396][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 770.282417][ T39] ? __switch_to+0xc79/0x1410 [ 770.282438][ T39] ? __pfx_kthread+0x10/0x10 [ 770.282463][ T39] ret_from_fork_asm+0x1a/0x30 [ 770.282500][ T39] [ 770.282506][ T39] Sending NMI from CPU 0 to CPUs 1: [ 770.282534][ C1] NMI backtrace for cpu 1 [ 770.282546][ C1] CPU: 1 UID: 0 PID: 1188 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 770.282563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.282576][ C1] Workqueue: bat_events batadv_dat_purge [ 770.282595][ C1] RIP: 0010:lockdep_hardirqs_off+0x68/0xd0 [ 770.282617][ C1] Code: 85 c0 74 56 65 4c 8b 35 3e 29 48 07 48 c7 c7 34 37 62 8d e8 9a 1a 00 00 65 c7 05 67 6b 48 07 00 00 00 00 49 89 9e a0 0b 00 00 <41> 8b 86 90 0b 00 00 ff c0 41 89 86 90 0b 00 00 41 89 86 ac 0b 00 [ 770.282629][ C1] RSP: 0018:ffffc900065d7980 EFLAGS: 00000046 [ 770.282642][ C1] RAX: 0000000000000001 RBX: ffffffff8b2abbca RCX: 0000000000000046 [ 770.282652][ C1] RDX: 0000000000000004 RSI: ffffffff8d623734 RDI: ffffffff8ba86060 [ 770.282662][ C1] RBP: ffffc900065d7ab8 R08: ffffffff8b2987a0 R09: ffffffff8dfc8180 [ 770.282673][ C1] R10: 0000000000000000 R11: fffffbfff1f1509f R12: dffffc0000000000 [ 770.282683][ C1] R13: 1ffff92000cbaf40 R14: ffff888029900000 R15: ffff888054bdc080 [ 770.282694][ C1] FS: 0000000000000000(0000) GS:ffff88812602a000(0000) knlGS:0000000000000000 [ 770.282707][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.282717][ C1] CR2: 00007f98022e6c1c CR3: 0000000036f9e000 CR4: 00000000003526f0 [ 770.282731][ C1] Call Trace: [ 770.282736][ C1] [ 770.282741][ C1] ? _raw_spin_lock_irqsave+0x1a/0x60 [ 770.282761][ C1] trace_hardirqs_off+0x12/0x40 [ 770.282779][ C1] _raw_spin_lock_irqsave+0x1a/0x60 [ 770.282797][ C1] rt_mutex_slowunlock+0xbf/0x8b0 [ 770.282814][ C1] ? reacquire_held_locks+0x104/0x190 [ 770.282828][ C1] ? rt_spin_lock+0x1e0/0x400 [ 770.282845][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 770.282862][ C1] ? rt_spin_unlock+0x14f/0x200 [ 770.282880][ C1] ? rt_spin_unlock+0x160/0x200 [ 770.282895][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 770.282913][ C1] ? process_one_work+0x8b7/0x1710 [ 770.282928][ C1] __batadv_dat_purge+0x335/0x400 [ 770.282945][ C1] ? __batadv_dat_purge+0xae/0x400 [ 770.282961][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 770.282979][ C1] ? process_one_work+0x8b7/0x1710 [ 770.282995][ C1] batadv_dat_purge+0x20/0x70 [ 770.283010][ C1] process_one_work+0x9a3/0x1710 [ 770.283035][ C1] ? __pfx_process_one_work+0x10/0x10 [ 770.283049][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 770.283074][ C1] worker_thread+0xba8/0x11e0 [ 770.283095][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 770.283115][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 770.283132][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 770.283158][ C1] kthread+0x388/0x470 [ 770.283177][ C1] ? __pfx_worker_thread+0x10/0x10 [ 770.283192][ C1] ? __pfx_kthread+0x10/0x10 [ 770.283212][ C1] ret_from_fork+0x514/0xb70 [ 770.283230][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 770.283247][ C1] ? __switch_to+0xc79/0x1410 [ 770.283262][ C1] ? __pfx_kthread+0x10/0x10 [ 770.283282][ C1] ret_from_fork_asm+0x1a/0x30 [ 770.283307][ C1] [ 770.283536][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 770.283553][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 770.283572][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.283582][ T39] Call Trace: [ 770.283589][ T39] [ 770.283596][ T39] vpanic+0x56c/0xa60 [ 770.283622][ T39] ? __pfx_vpanic+0x10/0x10 [ 770.283654][ T39] panic+0xc5/0xd0 [ 770.283675][ T39] ? __pfx_panic+0x10/0x10 [ 770.283706][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 770.283730][ T39] watchdog+0x102c/0x1030 [ 770.283758][ T39] ? watchdog+0x1c9/0x1030 [ 770.283782][ T39] kthread+0x388/0x470 [ 770.283805][ T39] ? __pfx_watchdog+0x10/0x10 [ 770.283823][ T39] ? __pfx_kthread+0x10/0x10 [ 770.283848][ T39] ret_from_fork+0x514/0xb70 [ 770.283871][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 770.283896][ T39] ? __switch_to+0xc79/0x1410 [ 770.283917][ T39] ? __pfx_kthread+0x10/0x10 [ 770.283941][ T39] ret_from_fork_asm+0x1a/0x30 [ 770.283975][ T39] [ 770.284221][ T39] Kernel Offset: disabled