last executing test programs: 20m13.702172297s ago: executing program 32 (id=2383): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x28000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002180), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) exit(0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/59, 0x3b}], 0x2}, 0x40000101) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) 11m38.875127643s ago: executing program 33 (id=4230): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r4, 0x0) 10m35.08146665s ago: executing program 34 (id=4404): r0 = socket(0x10, 0x80002, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) sendmsg$nl_route(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 10m17.244321682s ago: executing program 35 (id=4436): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0x1, 0x100004, 0xfff, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0xff}) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x200, 0x40000867, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r6, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x67, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001020002083c05a1a440000102030109025501010181d001090400800202060002000000000000000006000d240f0104000000010003007205241300e01524120700a317a88b045e4f01a607c0ffcb7e392a0905820200027f03ff090503020800030d0ce86e07e61e2358d7fd9089b238c1e8ba80da16f8925e0466723dccc45ed5dba243055a5cd117183ecf343115c85a21ab3cad2b28"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) socket$kcm(0x10, 0x3, 0x10) 6m47.514698269s ago: executing program 9 (id=4844): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m46.065424344s ago: executing program 9 (id=4848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m44.777060416s ago: executing program 9 (id=4853): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x3, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 6m43.623341701s ago: executing program 9 (id=4856): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m42.013562642s ago: executing program 9 (id=4861): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x28000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010401030000000000000000000000040a00020000000008020000000500010001000000080004400000bd6506000640000200000800034000000001491619a4a4c97d18"], 0x40}}, 0x0) exit(0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/59, 0x3b}], 0x2}, 0x40000101) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) 6m35.194858422s ago: executing program 9 (id=4872): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x48, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x3, 0x9]}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_AIE_ON(r3, 0x7001) 6m19.370075847s ago: executing program 36 (id=4872): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x48, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x3, 0x9]}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_AIE_ON(r3, 0x7001) 5m22.265946571s ago: executing program 6 (id=5026): socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5m20.548749992s ago: executing program 6 (id=5028): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m19.873456383s ago: executing program 6 (id=5029): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x30, 0x19, 0x15, 0x3, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x14, 0x9, 0x0, 0x1, [@nested={0x10, 0x10c, 0x0, 0x1, [@typed={0xc, 0x72, 0x0, 0x0, @u64=0x6}]}]}]}, 0x30}], 0x1}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) r4 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setstatus(r4, 0x4, 0x48000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 5m17.534516907s ago: executing program 6 (id=5031): syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16, @ANYRES64, @ANYRES16], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f0000000a40)={[{@init_itable}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000ac0)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000040)={0x5, 0x2, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8ac2d78a}}, 0x0, 0x0, 0x36, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f7", 0x4}], 0x2}}], 0x1, 0x4000800) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0xffff) 5m14.690652297s ago: executing program 6 (id=5034): socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000280), 0x2a000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x500, 0x80600}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 5m14.32691653s ago: executing program 6 (id=5036): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) geteuid() getresuid(&(0x7f0000008d00), &(0x7f0000008d40), 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 4m58.418626118s ago: executing program 37 (id=5036): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) geteuid() getresuid(&(0x7f0000008d00), &(0x7f0000008d40), 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3m12.481367124s ago: executing program 7 (id=5203): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r0, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$vcsn(0x0, 0x101, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_pedit={0x30, 0xe, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) 3m8.763484263s ago: executing program 7 (id=5206): openat$uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 3m7.464969906s ago: executing program 7 (id=5212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40080d0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'rose0\x00', {0x1}, 0x563f}) getpid() r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) 3m4.703714905s ago: executing program 7 (id=5215): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="580000001500add427323b472545b45602117fffffff81000e224e21e0000002925aa80020007b00090080007f000009e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 3m3.605983657s ago: executing program 7 (id=5217): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 3m3.261447591s ago: executing program 7 (id=5219): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) 2m51.444416213s ago: executing program 3 (id=5235): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m49.849308025s ago: executing program 3 (id=5238): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14}}, 0xf8}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m48.850224018s ago: executing program 3 (id=5241): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$unix(r2, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c71bd77e49389b2721d006c4e04511516643e5d14844e91ff015a5e84dc3ac508610261eeaa05a02a54942b886d779e22efeff1974e6749771aada982abe05221a6", 0xd7, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005f00), 0x8000, 0x0) preadv2(r4, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f00000062c0)=""/203, 0xcb}, {0x0}, {&(0x7f00000064c0)=""/11, 0xb}, {0x0, 0xffffff3c}, {0x0}, {0x0}, {0x0}], 0x9, 0x6, 0x6, 0x1) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000040)={0x20002008}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 2m47.319266085s ago: executing program 38 (id=5219): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) 2m46.764058901s ago: executing program 3 (id=5245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m45.179665854s ago: executing program 3 (id=5246): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 2m43.752027628s ago: executing program 3 (id=5250): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) 2m28.128099041s ago: executing program 39 (id=5250): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) 1m21.068923881s ago: executing program 5 (id=5437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 1m20.602007877s ago: executing program 5 (id=5441): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m20.312962608s ago: executing program 5 (id=5443): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m19.126241885s ago: executing program 5 (id=5448): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m15.870593567s ago: executing program 5 (id=5455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m13.443631789s ago: executing program 5 (id=5459): r0 = socket(0x2, 0x1, 0x6) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1m9.691890035s ago: executing program 0 (id=5465): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@jqfmt_vfsv0}, {@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000500)={0xa}) 57.891773754s ago: executing program 40 (id=5459): r0 = socket(0x2, 0x1, 0x6) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 57.096069196s ago: executing program 0 (id=5482): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 55.387013566s ago: executing program 0 (id=5486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 54.094317404s ago: executing program 0 (id=5489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 52.8566836s ago: executing program 0 (id=5492): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0) 49.981287459s ago: executing program 0 (id=5494): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x28000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010401030000000000000000000000040a00020000000008020000000500010001000000080004400000bd6506000640000200000800034000000001491619a4a4c97d18"], 0x40}}, 0x0) exit(0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, 0x0, 0x40000101) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) 34.74551082s ago: executing program 41 (id=5494): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x28000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010401030000000000000000000000040a00020000000008020000000500010001000000080004400000bd6506000640000200000800034000000001491619a4a4c97d18"], 0x40}}, 0x0) exit(0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, 0x0, 0x40000101) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) 16.683105764s ago: executing program 8 (id=5553): openat$uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000fe000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x48) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 14.019159661s ago: executing program 8 (id=5556): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) 12.191893857s ago: executing program 8 (id=5558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.116872223s ago: executing program 1 (id=5559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02", 0x0, 0x10000001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r5, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) r6 = msgget$private(0x0, 0x240) msgsnd(r6, &(0x7f0000001240)={0x2}, 0x8, 0x0) 9.668758443s ago: executing program 8 (id=5560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.885218963s ago: executing program 1 (id=5561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.181876629s ago: executing program 4 (id=5565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6.161754817s ago: executing program 8 (id=5566): socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) 6.151671723s ago: executing program 2 (id=5567): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005080), 0x0, 0x8000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) 6.151070697s ago: executing program 1 (id=5568): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x401, 0x9, 0x8, 0x1}}, 0x755c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x20008000) shutdown(r3, 0x1) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 5.307606065s ago: executing program 1 (id=5569): r0 = userfaultfd(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x41032, r0, 0x7b60a000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20040044) r4 = socket$inet6(0xa, 0x80003, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1, &(0x7f0000000040)=0x7, 0x4d) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51a}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 5.110503774s ago: executing program 2 (id=5570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x48850) timer_create(0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r4, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c636f6465706167653d3835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c125f8030000000000009dba05feee081e91fc61a0fef5511251"], 0x11, 0x238, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) 5.108486888s ago: executing program 4 (id=5571): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="36f83f020200000001000000000000", @ANYBLOB="040000000000000010000300"], 0x2c, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(r0, &(0x7f00000064c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="cd", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000000000000ac14"], 0x18}], 0x1, 0x0) 3.892951697s ago: executing program 4 (id=5572): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) geteuid() getresuid(&(0x7f0000008d00), &(0x7f0000008d40), 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.187918201s ago: executing program 2 (id=5573): socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000280), 0x2a000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x500, 0x80600}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 1.75364507s ago: executing program 2 (id=5574): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x3, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 1.243999781s ago: executing program 2 (id=5575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.15038344s ago: executing program 4 (id=5576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.06548881s ago: executing program 8 (id=5577): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.034206326s ago: executing program 1 (id=5578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 823.060986ms ago: executing program 2 (id=5579): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chdir(0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[], 0xf0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 733.243786ms ago: executing program 4 (id=5580): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x401, 0x9, 0x8, 0x1}}, 0x755c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x20008000) shutdown(r3, 0x1) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 703.142235ms ago: executing program 1 (id=5581): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005080), 0x0, 0x8000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, 0x0, 0x0) 0s ago: executing program 4 (id=5582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000009040)={&(0x7f0000004100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1ff, 0x41b100a0, 0x2, 0x5, 0x4, 0x34b, 0x0, 0x0, 0x2, 0x101}}, &(0x7f0000004180)={0x18, 0x0, 0x0, {0xe}}, &(0x7f00000041c0)={0x18, 0xffffffffffffffda, 0x9}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004340)={0x18, 0xfffffffffffffffe, 0x80, {0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008940)={0x10, 0x0, 0x8000}, &(0x7f0000008c00)={0xa0, 0x0, 0x7fffffff, {{0x4, 0x2, 0xaf9, 0x6, 0x4, 0xff, {0x3, 0x6, 0x0, 0x7, 0x5, 0x6, 0xbba, 0xb, 0x0, 0x6000, 0xfffffffc, 0x0, 0x0, 0x3}}, {0x0, 0x3}}}, 0x0, &(0x7f0000008f00)={0x130, 0x0, 0x4, {0x9d4a, 0x4, 0x0, '\x00', {0x8000, 0x6, 0xa, 0x400, 0x0, 0x0, 0x2000, '\x00', 0x81a, 0x8000000000000001, 0xc8e6, 0xae65, {0xc36, 0x7e8f}, {0x400, 0x5}, {0x9, 0x7}, {0x3, 0x6}, 0x2, 0x110, 0x7ef, 0x6}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) kernel console output (not intermixed with test programs): evice batadv0 [ 1058.152665][T20825] loop7: detected capacity change from 0 to 32768 [ 1058.214232][T20825] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1059.580103][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1059.709834][T15791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.721360][T15791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1059.733572][T15791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.751764][T15791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1059.762492][T15791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1059.971637][T20403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.024574][T14886] Bluetooth: hci3: command tx timeout [ 1064.482122][T14886] Bluetooth: hci3: command tx timeout [ 1065.615711][T19542] ocfs2: Unmounting device (7,7) on (node local) [ 1066.503948][T14886] Bluetooth: hci3: command tx timeout [ 1068.584861][T14886] Bluetooth: hci3: command tx timeout [ 1068.860592][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1068.968523][T20945] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4572'. [ 1070.478535][T20960] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1071.251305][T20403] veth0_vlan: entered promiscuous mode [ 1071.739138][T20403] veth1_vlan: entered promiscuous mode [ 1072.216818][T20403] veth0_macvtap: entered promiscuous mode [ 1076.154128][T20403] veth1_macvtap: entered promiscuous mode [ 1076.505245][T20849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.528869][T20849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.551216][T20849] bridge_slave_0: entered allmulticast mode [ 1076.583157][T20849] bridge_slave_0: entered promiscuous mode [ 1076.635315][T20849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.653085][T15791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.661221][T20849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.676265][T15791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.685773][T15791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.700741][T15791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.708518][T15791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.716039][T20849] bridge_slave_1: entered allmulticast mode [ 1076.759261][T20849] bridge_slave_1: entered promiscuous mode [ 1076.775663][T10997] bridge_slave_1: left allmulticast mode [ 1076.788509][T10997] bridge_slave_1: left promiscuous mode [ 1076.804970][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.839334][T10997] bridge_slave_0: left allmulticast mode [ 1076.853984][T10997] bridge_slave_0: left promiscuous mode [ 1076.888016][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.900822][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1077.949574][T21025] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1078.033127][T10997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.051355][T10997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.070135][T10997] bond0 (unregistering): Released all slaves [ 1078.427439][T20849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.527908][T20849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.011179][T14886] Bluetooth: hci0: command tx timeout [ 1079.756515][T10997] hsr_slave_0: left promiscuous mode [ 1079.783063][T10997] hsr_slave_1: left promiscuous mode [ 1080.058895][T10997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.085516][T10997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.066679][T14886] Bluetooth: hci0: command tx timeout [ 1081.115960][T10997] team0 (unregistering): Port device team_slave_1 removed [ 1081.146287][T10997] team0 (unregistering): Port device team_slave_0 removed [ 1081.348232][T20849] team0: Port device team_slave_0 added [ 1081.404032][T20849] team0: Port device team_slave_1 added [ 1081.602173][T20849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.620780][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.706472][T20849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.735669][T20849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.755114][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.845044][T20849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.050313][T21068] xt_hashlimit: size too large, truncated to 1048576 [ 1082.231862][T20849] hsr_slave_0: entered promiscuous mode [ 1082.243937][ T31] audit: type=1804 audit(1785239946.691:224): pid=21055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4600" name="/newroot/44/file0" dev="fuse" ino=1 res=1 errno=0 [ 1082.271435][T20849] hsr_slave_1: entered promiscuous mode [ 1082.303687][T20849] debugfs: 'hsr0' already exists in 'hsr' [ 1082.405424][T20849] Cannot create hsr debugfs directory [ 1083.344059][T14886] Bluetooth: hci0: command tx timeout [ 1085.404916][T14886] Bluetooth: hci0: command tx timeout [ 1086.335970][T21105] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4611'. [ 1087.347844][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1089.275626][T21151] xt_hashlimit: size too large, truncated to 1048576 [ 1089.397101][T21132] fuse: fd is not a fuse device [ 1089.423686][T21153] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1090.460935][T21010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.495960][T21010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.516445][T21010] bridge_slave_0: entered allmulticast mode [ 1090.525288][T21010] bridge_slave_0: entered promiscuous mode [ 1090.636142][T21010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.654471][T21010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.662045][T21010] bridge_slave_1: entered allmulticast mode [ 1090.676926][T21010] bridge_slave_1: entered promiscuous mode [ 1090.767638][T21010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.812285][T21010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.069501][T21010] team0: Port device team_slave_0 added [ 1091.089196][T21010] team0: Port device team_slave_1 added [ 1092.924503][T21010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.954716][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.046826][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1093.223928][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1093.234154][T21010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.274606][ T10] usb 8-1: config 2 has an invalid interface number: 205 but max is 0 [ 1093.284216][T21010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.296718][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.309169][ T10] usb 8-1: config 2 has no interface number 0 [ 1094.284930][ T10] usb 8-1: config 2 interface 205 has no altsetting 0 [ 1094.311433][ T10] usb 8-1: New USB device found, idVendor=046b, idProduct=3747, bcdDevice=61.8d [ 1094.321599][T21010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.285647][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.305790][ T10] usb 8-1: Product: syz [ 1095.314043][ T10] usb 8-1: Manufacturer: syz [ 1095.320491][ T10] usb 8-1: SerialNumber: syz [ 1095.325957][ T12] bridge_slave_1: left allmulticast mode [ 1095.331928][ T10] usb 8-1: can't set config #2, error -71 [ 1095.350787][ T12] bridge_slave_1: left promiscuous mode [ 1095.369573][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.431631][ T12] bridge_slave_0: left allmulticast mode [ 1095.452713][ T12] bridge_slave_0: left promiscuous mode [ 1095.476241][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.508230][ T10] usb 8-1: USB disconnect, device number 4 [ 1096.771540][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.800303][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.960116][ T12] bond0 (unregistering): Released all slaves [ 1098.022611][T20849] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1098.221319][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.320233][T20849] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1098.427167][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.499948][T21234] overlayfs: missing 'lowerdir' [ 1098.512538][ T12] hsr_slave_0: left promiscuous mode [ 1098.797791][ T12] hsr_slave_1: left promiscuous mode [ 1098.809265][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.034936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.338149][ T12] veth1_macvtap: left promiscuous mode [ 1100.353344][ T12] veth0_macvtap: left promiscuous mode [ 1100.371423][ T12] veth1_vlan: left promiscuous mode [ 1100.558125][T21243] xt_hashlimit: size too large, truncated to 1048576 [ 1101.209543][ T12] veth0_vlan: left promiscuous mode [ 1102.308048][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1102.335025][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1102.540792][T20849] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1102.554484][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1102.628038][T20849] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1102.674981][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1103.494292][T21010] hsr_slave_0: entered promiscuous mode [ 1103.507753][T21010] hsr_slave_1: entered promiscuous mode [ 1103.568529][T21275] overlayfs: missing 'lowerdir' [ 1106.268761][T20849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.289270][T20849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.401523][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.408747][T17408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.491072][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.498301][T17408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.541044][T20849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1106.554832][T20849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.739093][T21333] overlayfs: missing 'lowerdir' [ 1109.973046][T21328] fuse: Bad value for 'fd' [ 1111.481652][T21010] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1111.552702][T21338] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1111.558834][T21338] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1111.564962][T21338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1111.571473][T21338] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1111.578590][T21338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1111.584559][T21338] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1111.599059][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.612820][T21338] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1111.622659][T21338] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1111.628707][T21338] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1111.638872][T21338] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1111.695545][T21010] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1111.746697][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.772092][T21010] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1111.794634][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.816408][T20849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.837156][T21010] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1112.035925][T15791] Bluetooth: hci6: command 0x0406 tx timeout [ 1112.733003][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1113.626439][T14886] Bluetooth: hci2: command 0x0c1a tx timeout [ 1113.632525][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 1113.639977][T14886] Bluetooth: hci3: command 0x0c1a tx timeout [ 1113.646137][T15791] Bluetooth: hci4: command 0x040f tx timeout [ 1113.706475][T21010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.789965][T21391] Bluetooth: hci0: command 0x0c1a tx timeout [ 1113.947682][T21010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.714298][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.721562][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.762062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.769278][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.670587][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.686329][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.713878][T21391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1115.864581][T21391] Bluetooth: hci0: command 0x0c1a tx timeout [ 1117.177320][T20849] veth0_vlan: entered promiscuous mode [ 1117.785105][T21391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1117.945409][T21391] Bluetooth: hci0: command 0x0c1a tx timeout [ 1118.312818][T20849] veth1_vlan: entered promiscuous mode [ 1121.870859][T21438] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1121.890187][T21438] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1121.940865][T21438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1121.949915][T21438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1122.829133][T21438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1122.892275][T21438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1122.963570][T21391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1122.984983][T21391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1122.999081][T21391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1123.014434][T21391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1123.033425][T21391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1123.865192][ T5620] Bluetooth: hci6: command 0x0406 tx timeout [ 1123.943860][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 1123.950094][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 1124.023933][ T5620] Bluetooth: hci4: command 0x040f tx timeout [ 1124.208805][T21494] overlayfs: missing 'lowerdir' [ 1124.215861][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4689'. [ 1124.901123][T21010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.914086][T21391] Bluetooth: hci0: command 0x0c1a tx timeout [ 1125.160092][T21391] Bluetooth: hci1: command tx timeout [ 1127.413923][T21391] Bluetooth: hci1: command tx timeout [ 1128.931106][T21010] veth0_vlan: entered promiscuous mode [ 1128.946580][T21010] veth1_vlan: entered promiscuous mode [ 1129.223951][T21561] overlayfs: failed to clone lowerpath [ 1129.463855][T21391] Bluetooth: hci1: command tx timeout [ 1129.712042][T21571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4703'. [ 1130.950915][T21010] veth0_macvtap: entered promiscuous mode [ 1131.007465][T21010] veth1_macvtap: entered promiscuous mode [ 1131.194840][ T5816] bridge_slave_1: left allmulticast mode [ 1131.208768][ T5816] bridge_slave_1: left promiscuous mode [ 1131.229264][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.281205][ T5816] bridge_slave_0: left allmulticast mode [ 1131.299931][ T5816] bridge_slave_0: left promiscuous mode [ 1131.311029][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.554208][T21391] Bluetooth: hci1: command tx timeout [ 1131.619575][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.631442][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.644416][ T5816] bond0 (unregistering): Released all slaves [ 1132.995361][ T5816] hsr_slave_0: left promiscuous mode [ 1133.043924][ T5816] hsr_slave_1: left promiscuous mode [ 1133.087803][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.096284][T21601] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1133.102374][T21601] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1133.108700][T21601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.114890][T21601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1133.120941][T21601] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.127438][T21601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.133400][T21601] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1133.206435][T21601] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1133.319249][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.122168][ T5620] Bluetooth: hci6: command 0x0406 tx timeout [ 1134.672213][ T5816] veth1_vlan: left promiscuous mode [ 1134.683233][ T5816] veth0_vlan: left promiscuous mode [ 1135.143870][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 1135.150251][ T5620] Bluetooth: hci4: command 0x040f tx timeout [ 1135.159247][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 1135.167026][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 1135.224450][T21391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1136.561171][T21651] futex_wake_op: syz.6.4719 tries to shift op by 144; fix this program [ 1136.585896][T21651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4719'. [ 1137.303836][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 1137.482593][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 1137.509767][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 1137.804968][T21617] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1137.819380][T21617] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1137.850726][T21617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1138.058338][T21617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1138.068863][T21451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.125809][T21617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1139.147200][T21451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.154583][T21451] bridge_slave_0: entered allmulticast mode [ 1139.162510][T21451] bridge_slave_0: entered promiscuous mode [ 1139.305276][T21617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1139.460014][T21451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.493839][T21391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1139.508131][T21451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.516089][T21391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1139.524154][T21391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1139.534557][T21451] bridge_slave_1: entered allmulticast mode [ 1139.543157][T21451] bridge_slave_1: entered promiscuous mode [ 1139.570454][T21391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1139.586684][T21391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1139.649292][T21451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.677915][T21451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.901419][T21391] Bluetooth: hci2: command 0x0c1a tx timeout [ 1139.907953][T21391] Bluetooth: hci5: command 0x0406 tx timeout [ 1140.451926][ T5620] Bluetooth: hci6: command 0x0406 tx timeout [ 1140.459954][ T5620] Bluetooth: hci4: command 0x040f tx timeout [ 1141.143851][T14886] Bluetooth: hci0: command 0x0c1a tx timeout [ 1141.340742][T21451] team0: Port device team_slave_0 added [ 1141.366053][T21451] team0: Port device team_slave_1 added [ 1141.383825][T14886] Bluetooth: hci1: command 0x0c1a tx timeout [ 1141.492487][T21451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.650525][T21451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.705453][T14886] Bluetooth: hci3: command tx timeout [ 1141.717441][T21451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.729924][T21699] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4729'. [ 1141.791178][T21451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.799691][T21687] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1141.808429][T21451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.837823][T21687] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1141.847049][T21687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1141.856446][T21687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1141.863686][T21687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1141.902545][T21451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.923292][T21687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1141.944066][T21687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1142.049228][T21687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1143.729045][T21451] hsr_slave_0: entered promiscuous mode [ 1143.766160][T21451] hsr_slave_1: entered promiscuous mode [ 1143.858151][T21451] debugfs: 'hsr0' already exists in 'hsr' [ 1143.863863][T21391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1143.864239][ T5620] Bluetooth: hci6: command 0x0406 tx timeout [ 1143.870110][T21391] Bluetooth: hci2: command 0x0c1a tx timeout [ 1143.876207][T14886] Bluetooth: hci4: command 0x040f tx timeout [ 1143.882272][T15791] Bluetooth: hci5: command 0x0406 tx timeout [ 1143.917630][T21731] overlayfs: overlapping lowerdir path [ 1143.944492][T15791] Bluetooth: hci3: command 0x040f tx timeout [ 1144.024926][T21451] Cannot create hsr debugfs directory [ 1144.369368][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1144.485707][T21727] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1144.687449][T21727] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1144.709560][T21727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1144.826161][T21727] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1144.845210][T21727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1144.866377][T21727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1145.442447][T21743] overlayfs: failed to clone lowerpath [ 1146.418141][T15791] Bluetooth: hci6: command 0x0406 tx timeout [ 1146.861592][T15791] Bluetooth: hci2: command 0x0c1a tx timeout [ 1146.867757][T15791] Bluetooth: hci5: command 0x0406 tx timeout [ 1146.873934][T15791] Bluetooth: hci4: command 0x040f tx timeout [ 1146.905021][T15791] Bluetooth: hci3: command 0x040f tx timeout [ 1147.417019][T15791] Bluetooth: hci1: command 0x0c1a tx timeout [ 1149.475945][T21391] Bluetooth: hci3: command 0x040f tx timeout [ 1150.306010][T21774] overlayfs: overlapping lowerdir path [ 1150.339417][T21771] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1150.367775][T21771] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1150.380142][T21771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1150.399940][T21771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1150.413168][ T31] audit: type=1326 audit(1785240014.861:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21779 comm="syz.3.4744" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadce19de99 code=0x0 [ 1150.439257][T21771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1150.446019][T21771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1150.879288][T11947] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1151.518324][T21796] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1151.934598][T11947] usb 4-1: Using ep0 maxpacket: 8 [ 1151.953150][T11947] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1152.208945][T11947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.232193][T11947] usb 4-1: config 0 descriptor?? [ 1152.282852][ T12] bridge_slave_1: left allmulticast mode [ 1152.324747][ T12] bridge_slave_1: left promiscuous mode [ 1152.363677][T15791] Bluetooth: hci6: command 0x0406 tx timeout [ 1152.373161][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.533859][T21391] Bluetooth: hci2: command 0x0c1a tx timeout [ 1152.540987][T21391] Bluetooth: hci5: command 0x0406 tx timeout [ 1152.547208][T21391] Bluetooth: hci3: command 0x040f tx timeout [ 1152.553267][T21391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1152.559342][T15791] Bluetooth: hci4: command 0x040f tx timeout [ 1154.434757][ T12] bridge_slave_0: left allmulticast mode [ 1154.440903][ T12] bridge_slave_0: left promiscuous mode [ 1154.446965][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.584969][T14886] Bluetooth: hci3: command 0x040f tx timeout [ 1154.742801][T11947] usb 4-1: string descriptor 0 read error: -71 [ 1154.752942][T11947] uvcvideo 4-1:0.0: Found multiple Units with ID 1 [ 1154.763420][T11947] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 1154.771336][T11947] uvcvideo 4-1:0.0: No valid video chain found. [ 1154.810472][T11947] usb 4-1: USB disconnect, device number 24 [ 1154.981446][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.995907][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.012538][ T12] bond0 (unregistering): Released all slaves [ 1155.460969][ T5279] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1156.106999][ T12] hsr_slave_0: left promiscuous mode [ 1156.129486][ T12] hsr_slave_1: left promiscuous mode [ 1156.154784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.163975][T21828] loop3: detected capacity change from 0 to 2048 [ 1156.198013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.207952][T21828] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1156.335839][ T12] veth1_macvtap: left promiscuous mode [ 1156.386010][ T12] veth0_macvtap: left promiscuous mode [ 1156.414372][ T12] veth1_vlan: left promiscuous mode [ 1156.441160][ T12] veth0_vlan: left promiscuous mode [ 1156.449280][T21828] syz.3.4755: attempt to access beyond end of device [ 1156.449280][T21828] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1156.449459][T21840] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1157.712543][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1157.748757][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1157.832261][T21857] overlayfs: failed to clone lowerpath [ 1158.359919][ T31] audit: type=1326 audit(1785240022.811:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.7.4762" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70b319de99 code=0x0 [ 1159.504668][T18378] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1159.674276][T18378] usb 8-1: Using ep0 maxpacket: 8 [ 1159.682984][T18378] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1159.695889][T18378] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.713995][T18378] usb 8-1: config 0 descriptor?? [ 1162.179156][T21659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.212874][T21659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.459502][T21659] bridge_slave_0: entered allmulticast mode [ 1162.479746][T21659] bridge_slave_0: entered promiscuous mode [ 1162.500338][T21451] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1162.573470][T21903] futex_wake_op: syz.3.4772 tries to shift op by 144; fix this program [ 1163.500008][T21451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.875967][T21659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.883429][T21659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.917942][T21659] bridge_slave_1: entered allmulticast mode [ 1163.945631][T21659] bridge_slave_1: entered promiscuous mode [ 1164.089746][T21451] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1164.128125][T21451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1164.183694][T21659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.188335][T18378] usb 8-1: string descriptor 0 read error: -71 [ 1164.230718][T18378] uvcvideo 8-1:0.0: Found multiple Units with ID 1 [ 1164.254195][T18378] uvcvideo 8-1:0.0: Found UVC 0.00 device (2833:0201) [ 1164.267622][T21659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.281750][T18378] uvcvideo 8-1:0.0: No valid video chain found. [ 1164.329841][T18378] usb 8-1: USB disconnect, device number 5 [ 1164.437567][T21451] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1164.644644][T21926] xt_hashlimit: size too large, truncated to 1048576 [ 1164.987167][T21451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1165.190477][T21659] team0: Port device team_slave_0 added [ 1165.238523][T21451] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1165.312989][T21451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1165.399875][T21659] team0: Port device team_slave_1 added [ 1166.437315][T21659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.503107][T21659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.531667][T21659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.553320][T21659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.593111][T21659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.684776][T21659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.472383][ T5279] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1167.519386][T21659] hsr_slave_0: entered promiscuous mode [ 1167.541602][T21659] hsr_slave_1: entered promiscuous mode [ 1167.796428][ T31] audit: type=1326 audit(1785240032.251:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21971 comm="syz.2.4785" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43fcf9de99 code=0x0 [ 1168.021741][T21976] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1168.379460][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4785'. [ 1169.387669][T21451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.711025][T22003] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1172.477805][T16735] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1172.664378][T16735] usb 4-1: Using ep0 maxpacket: 8 [ 1172.705881][T21451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.761773][T16735] usb 4-1: config 2 has an invalid interface number: 205 but max is 0 [ 1172.774772][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.781991][T17408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.797259][T16735] usb 4-1: config 2 has no interface number 0 [ 1173.108838][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.116153][T17408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.409242][T16735] usb 4-1: config 2 interface 205 has no altsetting 0 [ 1173.442004][T16735] usb 4-1: New USB device found, idVendor=046b, idProduct=3747, bcdDevice=61.8d [ 1173.502876][T16735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.562746][T16735] usb 4-1: Product: syz [ 1173.601509][T16735] usb 4-1: Manufacturer: syz [ 1173.633465][T16735] usb 4-1: SerialNumber: syz [ 1174.830346][T21659] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1174.877781][T21659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1174.919099][T21659] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1174.953556][T21659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1174.996986][T21659] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1175.149801][T21659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.205046][T21659] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1175.255887][T21659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1175.988343][T16735] usb 4-1: USB disconnect, device number 25 [ 1177.106840][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.123652][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.528520][T21451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.626203][T21659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.740997][T21659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.794909][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.802108][ T9850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.856807][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.864034][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.465548][T21451] veth0_vlan: entered promiscuous mode [ 1178.513301][T21451] veth1_vlan: entered promiscuous mode [ 1178.632251][T21451] veth0_macvtap: entered promiscuous mode [ 1178.673020][T21451] veth1_macvtap: entered promiscuous mode [ 1178.775406][T21451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.817948][T21451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.866960][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.894817][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.925686][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.960721][ T1018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.228318][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.269101][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.653705][T21659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.822329][T15791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.833402][T15791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.855674][T15791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.871664][T15791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.880947][T15791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.829085][ T6352] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.089614][ T6352] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.171258][T21659] veth0_vlan: entered promiscuous mode [ 1181.265703][ T6352] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.328440][T21659] veth1_vlan: entered promiscuous mode [ 1181.446788][ T6352] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.700179][T21659] veth0_macvtap: entered promiscuous mode [ 1181.906678][T21659] veth1_macvtap: entered promiscuous mode [ 1181.944822][T14886] Bluetooth: hci0: command tx timeout [ 1182.164968][ T6352] bridge_slave_1: left allmulticast mode [ 1182.171919][ T6352] bridge_slave_1: left promiscuous mode [ 1182.178722][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.193591][ T6352] bridge_slave_0: left allmulticast mode [ 1182.201479][ T6352] bridge_slave_0: left promiscuous mode [ 1182.208836][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.724353][ T6352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.766923][ T6352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.783328][ T6352] bond0 (unregistering): Released all slaves [ 1182.895580][T21659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.944991][T21659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.033392][ T1018] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.066717][ T1018] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.083260][ T1018] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.119913][ T1018] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.348889][ T6352] hsr_slave_0: left promiscuous mode [ 1183.355670][ T6352] hsr_slave_1: left promiscuous mode [ 1183.363067][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.371097][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.381581][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.390816][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.407977][ T6352] veth1_macvtap: left promiscuous mode [ 1183.413500][ T6352] veth0_macvtap: left promiscuous mode [ 1183.419920][ T6352] veth1_vlan: left promiscuous mode [ 1183.425411][ T6352] veth0_vlan: left promiscuous mode [ 1183.789210][ T6352] team0 (unregistering): Port device team_slave_1 removed [ 1183.813576][ T6352] team0 (unregistering): Port device team_slave_0 removed [ 1184.033807][T14886] Bluetooth: hci0: command tx timeout [ 1184.059855][ T5279] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1184.148271][T22126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.155651][T22126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.164658][T22126] bridge_slave_0: entered allmulticast mode [ 1184.172153][T22126] bridge_slave_0: entered promiscuous mode [ 1184.182310][T22126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.187831][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.190057][T22126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.205694][T22126] bridge_slave_1: entered allmulticast mode [ 1184.213220][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.219459][T22126] bridge_slave_1: entered promiscuous mode [ 1184.277531][T22126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.316164][T22126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.380609][T22126] team0: Port device team_slave_0 added [ 1184.391024][T22126] team0: Port device team_slave_1 added [ 1184.397699][T17408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.414645][T17408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.484400][T22126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.493139][T22126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.520437][T22126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.539876][T22126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.561516][T22126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.625919][T22126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.204913][T22206] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4459'. [ 1186.248871][T14886] Bluetooth: hci0: command tx timeout [ 1186.525424][T22126] hsr_slave_0: entered promiscuous mode [ 1186.532199][T22126] hsr_slave_1: entered promiscuous mode [ 1186.548549][T22126] debugfs: 'hsr0' already exists in 'hsr' [ 1186.556040][T22126] Cannot create hsr debugfs directory [ 1187.035397][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1187.722104][T22126] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1187.733085][T22126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1187.741446][T22126] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1187.752911][T22126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1187.776295][T22126] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1187.790792][T22126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1187.799744][T22126] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1187.811472][T22126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1187.936649][T22126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.969722][T22126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.983330][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.990564][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.027723][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.034894][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.264683][T14886] Bluetooth: hci0: command tx timeout [ 1188.595990][T22126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.957481][T22126] veth0_vlan: entered promiscuous mode [ 1188.972605][T22126] veth1_vlan: entered promiscuous mode [ 1189.027897][T22126] veth0_macvtap: entered promiscuous mode [ 1189.042355][T22126] veth1_macvtap: entered promiscuous mode [ 1189.067708][T22126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.086282][T22126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.107391][ T5816] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.128853][ T5816] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.155077][ T5816] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.183115][ T5816] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.285690][ T5816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.303250][ T5816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.350836][ T5816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.361476][ T5816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.664722][T22314] loop7: detected capacity change from 0 to 16 [ 1209.500913][T22321] loop3: detected capacity change from 0 to 512 [ 1209.676517][T22314] erofs (device loop7): invalid ishare xattr prefix id 0 [ 1209.732563][T22325] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1214.105616][T22348] program syz.7.4816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1214.950968][T22349] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1214.957238][T22349] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1214.963426][T22349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1214.969586][T22349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1214.975722][T22349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1214.981908][T22349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1214.988705][T22349] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1215.024718][T22349] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1215.228953][T22374] futex_wake_op: syz.2.4821 tries to shift op by 144; fix this program [ 1215.246224][T22374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1216.004269][T22371] loop7: detected capacity change from 0 to 512 [ 1216.377334][T15791] Bluetooth: hci6: command 0x0406 tx timeout [ 1217.083967][T14886] Bluetooth: hci3: command 0x040f tx timeout [ 1217.090106][T14886] Bluetooth: hci4: command 0x040f tx timeout [ 1217.097759][T21391] Bluetooth: hci2: command 0x0c1a tx timeout [ 1217.097919][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 1217.103850][T15791] Bluetooth: hci0: command 0x0c1a tx timeout [ 1218.857106][ T31] audit: type=1326 audit(1785240083.261:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.8.4828" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a34d9de99 code=0x0 [ 1219.184058][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 1219.846768][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1220.622907][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1220.731010][ T24] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1221.026495][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.703977][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 1222.803106][ T24] usb 9-1: config 0 descriptor?? [ 1222.809120][ T24] usb 9-1: can't set config #0, error -71 [ 1222.817530][ T24] usb 9-1: USB disconnect, device number 2 [ 1223.847844][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1223.886907][T22427] overlayfs: missing 'lowerdir' [ 1223.948526][T22431] loop9: detected capacity change from 0 to 512 [ 1224.053818][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1224.195596][T22419] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1224.201737][T22419] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1224.208404][T22419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1224.214480][T22419] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1224.222425][T22419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1224.228522][T22419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1224.944341][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1224.952672][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1224.962438][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1224.973423][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1224.983352][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.126278][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1225.179088][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.553809][ T5625] Bluetooth: hci6: command 0x0406 tx timeout [ 1225.643584][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 1226.343855][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 1226.349942][ T5620] Bluetooth: hci3: command 0x040f tx timeout [ 1226.356004][T14886] Bluetooth: hci4: command 0x040f tx timeout [ 1226.362052][T21391] Bluetooth: hci2: command 0x0c1a tx timeout [ 1226.396860][ T10] usbtmc 8-1:16.0: can't read capabilities [ 1226.424376][T21391] Bluetooth: hci5: command 0x0406 tx timeout [ 1226.540844][ T10] usb 8-1: USB disconnect, device number 6 [ 1228.531420][ T31] audit: type=1326 audit(1785240092.971:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.6.4850" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f329959de99 code=0x0 [ 1230.690176][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4850'. [ 1231.313842][T22501] loop3: detected capacity change from 0 to 1024 [ 1231.330845][T22501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1232.061243][T22501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 1232.071329][T22501] System zones: 0-1, 3-12 [ 1232.219176][T22501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.551559][T22512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.524499][T22508] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.717914][T22521] loop8: detected capacity change from 0 to 1024 [ 1234.734341][T22521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1235.880504][T22521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 1235.897192][T22521] System zones: 0-1, 3-12 [ 1235.942269][T22521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.833937][T22526] futex_wake_op: syz.7.4866 tries to shift op by 144; fix this program [ 1237.184160][T22534] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4866'. [ 1237.254897][T22520] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.298955][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.306161][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.383634][T22552] loop9: detected capacity change from 0 to 512 [ 1241.584026][T22579] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1241.737738][T22575] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1246.106854][T22619] futex_wake_op: syz.3.4891 tries to shift op by 144; fix this program [ 1246.117333][T22619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4891'. [ 1247.239939][T22626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1247.390792][T22631] loop8: detected capacity change from 0 to 512 [ 1249.392343][T22647] trusted_key: encrypted_key: insufficient parameters specified [ 1255.449697][T22018] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1255.606245][T14886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1255.624270][T14886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1255.634357][T14886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1255.644680][T14886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1255.664033][T22018] usb 8-1: Using ep0 maxpacket: 8 [ 1255.671483][T14886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.735784][T22018] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1255.800116][T22018] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1255.906707][T22018] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1256.008706][T22018] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1256.090960][T22699] loop8: detected capacity change from 0 to 2048 [ 1256.130016][T22018] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.831415][T22018] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1256.845741][T22699] loop8: detected capacity change from 0 to 1024 [ 1256.881052][T22018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.235581][T22018] usb 8-1: can't set config #16, error -71 [ 1257.794129][T21391] Bluetooth: hci1: command tx timeout [ 1257.806336][T22018] usb 8-1: USB disconnect, device number 7 [ 1258.218665][T22731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1259.943998][T22749] trusted_key: encrypted_key: insufficient parameters specified [ 1259.983887][T21391] Bluetooth: hci1: command tx timeout [ 1260.267607][T22752] loop7: detected capacity change from 0 to 2048 [ 1260.299737][ T77] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.441587][T22761] loop3: detected capacity change from 0 to 2048 [ 1260.631784][T22752] loop7: detected capacity change from 0 to 1024 [ 1260.711168][T22761] loop3: detected capacity change from 0 to 1024 [ 1260.932736][ T77] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.024764][T21391] Bluetooth: hci1: command tx timeout [ 1262.258899][ T77] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.718107][ T77] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.689083][T21391] Bluetooth: hci1: command tx timeout [ 1267.374655][T22823] loop3: detected capacity change from 0 to 1024 [ 1267.388425][T22823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1268.282619][T22823] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 1268.292723][T22823] System zones: 0-1, 3-12 [ 1268.440532][T22823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.104737][T22822] loop7: detected capacity change from 0 to 2048 [ 1269.447895][T22823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.254399][ T77] bridge_slave_1: left allmulticast mode [ 1271.266889][ T77] bridge_slave_1: left promiscuous mode [ 1271.283065][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.297929][ T77] bridge_slave_0: left allmulticast mode [ 1271.311524][ T77] bridge_slave_0: left promiscuous mode [ 1271.439664][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.954374][T22859] loop3: detected capacity change from 0 to 16 [ 1274.516532][T22859] erofs (device loop3): invalid ishare xattr prefix id 0 [ 1276.882800][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.895717][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.941854][ T77] bond0 (unregistering): Released all slaves [ 1279.063225][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4963'. [ 1280.681331][T22910] loop8: detected capacity change from 0 to 2048 [ 1280.773242][T22688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.849373][T22688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.987393][T22688] bridge_slave_0: entered allmulticast mode [ 1281.020911][T22688] bridge_slave_0: entered promiscuous mode [ 1281.514898][T22688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.525302][T22688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.533187][T22688] bridge_slave_1: entered allmulticast mode [ 1281.679530][T22688] bridge_slave_1: entered promiscuous mode [ 1282.988258][ T77] hsr_slave_0: left promiscuous mode [ 1283.018263][T22910] loop8: detected capacity change from 0 to 1024 [ 1283.264059][ T77] hsr_slave_1: left promiscuous mode [ 1284.005231][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.026547][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.373820][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.410861][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.809682][ T77] veth1_macvtap: left promiscuous mode [ 1284.839446][ T77] veth0_macvtap: left promiscuous mode [ 1284.845920][T22947] program syz.8.4975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1284.860458][ T77] veth1_vlan: left promiscuous mode [ 1284.890292][ T77] veth0_vlan: left promiscuous mode [ 1286.058132][T22960] trusted_key: encrypted_key: insufficient parameters specified [ 1286.603520][ T77] team0 (unregistering): Port device team_slave_1 removed [ 1286.658108][ T77] team0 (unregistering): Port device team_slave_0 removed [ 1286.986604][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1287.058854][T22936] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1287.072697][T22688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.128829][T22688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.281665][T22936] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1287.319781][T22936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1288.661780][T22936] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1288.696091][T22936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1289.343604][T21391] Bluetooth: hci6: command 0x0406 tx timeout [ 1289.352037][T21391] Bluetooth: hci5: command 0x0406 tx timeout [ 1289.393850][T21391] Bluetooth: hci2: command 0x0c1a tx timeout [ 1289.664364][T22936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1289.733830][T22936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1289.749914][T22688] team0: Port device team_slave_0 added [ 1290.052525][T22688] team0: Port device team_slave_1 added [ 1290.109153][T22936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1290.209577][T22688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.440280][T22688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.610058][T22688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.799591][T14886] Bluetooth: hci0: command 0x0c1a tx timeout [ 1290.805893][T21391] Bluetooth: hci4: command 0x040f tx timeout [ 1292.245722][T21391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1292.261978][T22688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.284026][T22985] loop8: detected capacity change from 0 to 2048 [ 1292.292604][T22688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.644107][T22688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.655060][T22688] hsr_slave_0: entered promiscuous mode [ 1293.661824][T22688] hsr_slave_1: entered promiscuous mode [ 1294.051667][T23000] loop7: detected capacity change from 0 to 1024 [ 1294.070077][T23000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1294.268936][T21391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1294.434133][T23000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 1294.443297][T23000] System zones: 0-1, 3-12 [ 1294.512021][T23000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.412150][T21391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1296.531439][T23005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.538313][T23036] trusted_key: encrypted_key: insufficient parameters specified [ 1298.556571][T23049] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1299.645946][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.653907][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.503343][ T5279] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1303.518370][T23077] loop7: detected capacity change from 0 to 256 [ 1305.403941][T20843] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1305.418043][T22688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1305.483046][T22688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1305.502609][T22688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1305.542831][T22688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1305.583829][T20843] usb 8-1: Using ep0 maxpacket: 8 [ 1305.611891][T20843] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1305.677550][T20843] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1305.751690][T20843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1305.762057][T22688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1305.812966][T22688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1305.834341][T20843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1305.844841][T20843] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1305.862040][T20843] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1305.877152][T20843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.913322][T23109] trusted_key: encrypted_key: insufficient parameters specified [ 1306.567593][T22688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1307.195228][T20843] usb 8-1: GET_CAPABILITIES returned 0 [ 1307.201001][T20843] usbtmc 8-1:16.0: can't read capabilities [ 1307.249901][T22688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1307.478266][T11940] usb 8-1: USB disconnect, device number 8 [ 1309.688390][T23131] overlayfs: failed to clone lowerpath [ 1309.738969][ T5279] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1309.794624][T22688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.814901][T23137] binder: 23135:23137 ioctl c0306201 0 returned -14 [ 1309.888558][T23142] futex_wake_op: syz.2.5017 tries to shift op by 144; fix this program [ 1309.951462][T22688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.015500][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.022696][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.090406][T23142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5017'. [ 1310.115077][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.122290][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.129038][T23168] loop8: detected capacity change from 0 to 256 [ 1311.222704][T23168] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1312.305400][T23173] loop7: detected capacity change from 0 to 512 [ 1313.788751][T23186] overlayfs: failed to clone lowerpath [ 1318.130062][T23214] overlayfs: failed to clone lowerpath [ 1318.273400][T23216] loop8: detected capacity change from 0 to 512 [ 1318.329110][T14886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1318.340556][T14886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1318.349950][T14886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1318.364991][T14886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1318.399794][T14886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.544896][ T5279] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1320.565440][T14886] Bluetooth: hci3: command tx timeout [ 1322.368209][T23256] loop8: detected capacity change from 0 to 256 [ 1322.584083][T14886] Bluetooth: hci3: command tx timeout [ 1325.393774][T23288] loop7: detected capacity change from 0 to 256 [ 1325.493964][T14886] Bluetooth: hci3: command tx timeout [ 1325.584182][T23288] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1327.623809][T21391] Bluetooth: hci3: command tx timeout [ 1336.630301][T14886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1336.653086][T14886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1336.665912][T14886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1336.677977][T14886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1336.695117][T14886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1338.880381][T14886] Bluetooth: hci1: command tx timeout [ 1341.381744][T14886] Bluetooth: hci1: command tx timeout [ 1343.211838][T23390] loop3: detected capacity change from 0 to 256 [ 1343.652521][T14886] Bluetooth: hci1: command tx timeout [ 1345.140268][T23390] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1345.733867][T14886] Bluetooth: hci1: command tx timeout [ 1346.004831][T23399] loop7: detected capacity change from 0 to 2048 [ 1346.210324][T23399] loop7: detected capacity change from 0 to 1024 [ 1346.753281][T18364] bridge_slave_1: left allmulticast mode [ 1346.939282][T18364] bridge_slave_1: left promiscuous mode [ 1347.030483][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.360019][T18364] bridge_slave_0: left allmulticast mode [ 1347.773937][T18364] bridge_slave_0: left promiscuous mode [ 1347.797736][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.738611][T18364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.763995][T18364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.774934][T18364] bond0 (unregistering): Released all slaves [ 1350.592994][T18364] hsr_slave_0: left promiscuous mode [ 1350.638258][T18364] hsr_slave_1: left promiscuous mode [ 1350.669095][T18364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.713374][T18364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.003591][T23451] loop3: detected capacity change from 0 to 256 [ 1351.094695][T23452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1352.342998][T18364] team0 (unregistering): Port device team_slave_1 removed [ 1352.927608][T23467] loop7: detected capacity change from 0 to 1024 [ 1352.936781][T23467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1354.409253][T18364] team0 (unregistering): Port device team_slave_0 removed [ 1357.253459][T23467] EXT4-fs warning (device loop7): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop7. [ 1360.637757][T23217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.660617][T23217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.692499][T23217] bridge_slave_0: entered allmulticast mode [ 1360.725095][T23217] bridge_slave_0: entered promiscuous mode [ 1360.752087][T23217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.792433][T23217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.812324][T23217] bridge_slave_1: entered allmulticast mode [ 1360.838551][T23217] bridge_slave_1: entered promiscuous mode [ 1360.908454][T23484] loop3: detected capacity change from 0 to 32768 [ 1361.019234][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.027007][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.075829][T23484] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1364.826170][T23217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.007178][T23217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.178025][T17941] ocfs2: Unmounting device (7,3) on (node local) [ 1366.445613][T23217] team0: Port device team_slave_0 added [ 1366.551134][T23217] team0: Port device team_slave_1 added [ 1367.054176][T23217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.105296][T23217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.148627][T23217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.161434][T23217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.170238][T23217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.216876][T23217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.875856][T23541] loop8: detected capacity change from 0 to 32768 [ 1370.935013][T23541] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1372.182954][T18364] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.352587][T22126] ocfs2: Unmounting device (7,8) on (node local) [ 1372.797976][T23217] hsr_slave_0: entered promiscuous mode [ 1372.878965][T23217] hsr_slave_1: entered promiscuous mode [ 1375.009881][T18364] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.630403][T18364] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.691450][T21391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1377.705329][T21391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1377.716728][T21391] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1377.727138][T21391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1377.735068][T21391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1378.198685][T18364] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.887048][T23350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.894429][T23350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.901761][T23350] bridge_slave_0: entered allmulticast mode [ 1378.925335][T23350] bridge_slave_0: entered promiscuous mode [ 1379.357778][T23350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.373896][T23350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.391491][T23350] bridge_slave_1: entered allmulticast mode [ 1379.421127][T23350] bridge_slave_1: entered promiscuous mode [ 1380.160884][T14886] Bluetooth: hci6: command tx timeout [ 1381.470668][T23350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.483249][T23350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.523740][T23350] team0: Port device team_slave_0 added [ 1381.532535][T23350] team0: Port device team_slave_1 added [ 1382.153900][T23663] loop8: detected capacity change from 0 to 32768 [ 1382.194218][T14886] Bluetooth: hci6: command tx timeout [ 1382.317768][T23663] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1382.320126][T23350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.361542][T23350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.362669][T23675] loop7: detected capacity change from 0 to 256 [ 1383.397429][T23675] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1383.403239][T23350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.699360][T23678] loop3: detected capacity change from 0 to 256 [ 1383.953465][T22126] ocfs2: Unmounting device (7,8) on (node local) [ 1384.273871][T14886] Bluetooth: hci6: command tx timeout [ 1384.413456][T23350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.175428][T23350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.213243][T23687] overlayfs: failed to clone lowerpath [ 1385.219662][T18204] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1385.240100][T23350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.345517][T23691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.805509][T23704] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5128'. [ 1386.538680][T21391] Bluetooth: hci6: command tx timeout [ 1387.000774][T23350] hsr_slave_0: entered promiscuous mode [ 1387.059082][T23350] hsr_slave_1: entered promiscuous mode [ 1388.023350][T23350] debugfs: 'hsr0' already exists in 'hsr' [ 1388.068404][T23350] Cannot create hsr debugfs directory [ 1388.143296][T18364] bridge_slave_1: left allmulticast mode [ 1389.059895][T18364] bridge_slave_1: left promiscuous mode [ 1389.239447][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.263023][T18364] ¾x9ÿ: left allmulticast mode [ 1389.273716][T18364] ¾x9ÿ: left promiscuous mode [ 1390.114000][T18364] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1394.382084][T18364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.394369][T18364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.407206][T18364] bond0 (unregistering): Released all slaves [ 1395.374625][T18364] bond1 (unregistering): Released all slaves [ 1395.395163][T18364] bond2 (unregistering): Released all slaves [ 1398.201796][T23766] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1398.271843][T23766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1398.307188][T23766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1398.339670][T23766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1398.383179][T23766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1398.405707][T23766] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1398.529879][T23766] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1398.768627][T23766] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1399.763875][T23766] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1400.183817][T21391] Bluetooth: hci5: command 0x0406 tx timeout [ 1400.344475][T21391] Bluetooth: hci0: command 0x0c1a tx timeout [ 1400.351044][T21391] Bluetooth: hci4: command 0x040f tx timeout [ 1400.357285][T14886] Bluetooth: hci2: command 0x0c1a tx timeout [ 1400.423788][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 1400.620360][T23766] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1400.824731][ T5625] Bluetooth: hci6: command 0x0c1a tx timeout [ 1401.019864][T18364] hsr_slave_0: left promiscuous mode [ 1401.043272][T14886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1401.056659][T14886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1401.083452][T14886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1401.112499][T14886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1401.130151][T18364] hsr_slave_1: left promiscuous mode [ 1401.135645][T14886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1401.157166][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.240678][T18364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.267451][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.317385][T18364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.360332][T18364] veth1_macvtap: left promiscuous mode [ 1401.376541][T18364] veth0_macvtap: left promiscuous mode [ 1401.394510][T18364] veth1_vlan: left promiscuous mode [ 1402.953900][ T5625] Bluetooth: hci6: command 0x0c1a tx timeout [ 1403.229860][ T5625] Bluetooth: hci3: command tx timeout [ 1403.871316][T18364] team0 (unregistering): Port device team_slave_1 removed [ 1403.898170][T18364] team0 (unregistering): Port device team_slave_0 removed [ 1405.178128][ T5625] Bluetooth: hci6: command 0x0c1a tx timeout [ 1405.517618][T23861] loop8: detected capacity change from 0 to 256 [ 1405.678045][ T5625] Bluetooth: hci3: command tx timeout [ 1405.741139][T23861] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1408.399679][T14886] Bluetooth: hci3: command tx timeout [ 1408.685690][ T58] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1409.134685][T23873] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1409.177525][T18364] IPVS: stop unused estimator thread 0... [ 1409.190501][T23873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1409.206141][T23873] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1409.223162][T23873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1409.261829][T23873] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1409.308077][T23873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1409.326369][T23873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1409.418701][T23873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1409.629827][T18364] bridge_slave_1: left allmulticast mode [ 1409.637708][T18364] bridge_slave_1: left promiscuous mode [ 1409.643506][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.680131][T18364] bridge_slave_0: left allmulticast mode [ 1409.693559][T18364] bridge_slave_0: left promiscuous mode [ 1409.699914][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.193893][T14886] Bluetooth: hci5: command 0x0406 tx timeout [ 1411.223824][T14886] Bluetooth: hci0: command 0x0c1a tx timeout [ 1411.230067][ T5625] Bluetooth: hci4: command 0x040f tx timeout [ 1411.236283][T14886] Bluetooth: hci2: command 0x0c1a tx timeout [ 1411.303769][T21391] Bluetooth: hci6: command 0x0c1a tx timeout [ 1411.383746][T21391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1411.491804][T18364] bridge_slave_1: left allmulticast mode [ 1411.503107][T18364] bridge_slave_1: left promiscuous mode [ 1411.513444][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.537609][T18364] bridge_slave_0: left allmulticast mode [ 1411.555947][T18364] bridge_slave_0: left promiscuous mode [ 1411.571977][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.735730][T18364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.766205][T18364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.811182][T18364] bond0 (unregistering): Released all slaves [ 1411.922815][T18364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.956139][T18364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.967488][T18364] bond0 (unregistering): Released all slaves [ 1412.038155][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1412.064765][T23605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.075688][T23605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.082911][T23605] bridge_slave_0: entered allmulticast mode [ 1412.091008][T23605] bridge_slave_0: entered promiscuous mode [ 1412.099976][T23605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.810527][T23605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.818377][T23605] bridge_slave_1: entered allmulticast mode [ 1412.834387][T23605] bridge_slave_1: entered promiscuous mode [ 1413.817419][T14886] Bluetooth: hci3: command 0x0c1a tx timeout [ 1413.872937][T23605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.959724][T18364] hsr_slave_0: left promiscuous mode [ 1414.019078][T18364] hsr_slave_1: left promiscuous mode [ 1414.043423][T18364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.068108][T18364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.093918][T18364] hsr_slave_0: left promiscuous mode [ 1414.110303][T18364] hsr_slave_1: left promiscuous mode [ 1414.124067][T18364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.141824][T18364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.184117][T21391] Bluetooth: hci3: command 0x0c1a tx timeout [ 1416.227724][T23949] loop8: detected capacity change from 0 to 256 [ 1416.424348][T18364] team0 (unregistering): Port device team_slave_1 removed [ 1417.409060][T18364] team0 (unregistering): Port device team_slave_0 removed [ 1419.045833][T18364] team0 (unregistering): Port device team_slave_1 removed [ 1419.070825][T18364] team0 (unregistering): Port device team_slave_0 removed [ 1419.302237][T23949] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1419.376651][T23605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.647773][T23940] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1419.698775][T23940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1419.718610][T23940] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1419.766732][T23605] team0: Port device team_slave_0 added [ 1419.774986][T23940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1419.975262][T23940] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1420.018442][T23940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1420.037510][T23605] team0: Port device team_slave_1 added [ 1421.703808][T21391] Bluetooth: hci5: command 0x0406 tx timeout [ 1421.783865][T21391] Bluetooth: hci0: command 0x0c1a tx timeout [ 1421.790005][T14886] Bluetooth: hci4: command 0x040f tx timeout [ 1421.796062][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 1422.026248][T14886] Bluetooth: hci6: command 0x0c1a tx timeout [ 1422.105218][T14886] Bluetooth: hci3: command 0x0c1a tx timeout [ 1422.445823][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.455205][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.660125][T23605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.667746][T23605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.723869][T23605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.802147][T23605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.849926][T23605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.985232][T23605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.533352][T23605] hsr_slave_0: entered promiscuous mode [ 1426.752102][T23605] hsr_slave_1: entered promiscuous mode [ 1430.180450][T24015] loop3: detected capacity change from 0 to 256 [ 1430.447388][T24015] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1432.559807][T24026] futex_wake_op: syz.2.5189 tries to shift op by 144; fix this program [ 1432.581816][T24026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1433.103801][T22550] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1434.781794][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1436.981015][T23783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.663379][T23783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.689548][T23783] bridge_slave_0: entered allmulticast mode [ 1439.651278][T23783] bridge_slave_0: entered promiscuous mode [ 1439.662626][T23783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.671168][T23783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.684146][T23783] bridge_slave_1: entered allmulticast mode [ 1439.699305][T23783] bridge_slave_1: entered promiscuous mode [ 1443.127125][T24087] futex_wake_op: syz.7.5203 tries to shift op by 144; fix this program [ 1443.283692][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1443.567004][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1443.580067][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1443.590557][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1443.673824][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1443.846636][T23783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.942048][T23783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.096183][T23783] team0: Port device team_slave_0 added [ 1445.132489][T23783] team0: Port device team_slave_1 added [ 1446.444625][ T5625] Bluetooth: hci1: command tx timeout [ 1446.492555][T23783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.501146][T23783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.478023][T23783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.540546][T23783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.680311][T23783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.795992][T23783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.117724][T24135] futex_wake_op: syz.8.5213 tries to shift op by 144; fix this program [ 1448.579732][ T5625] Bluetooth: hci1: command tx timeout [ 1448.922388][T23783] hsr_slave_0: entered promiscuous mode [ 1448.946877][T23783] hsr_slave_1: entered promiscuous mode [ 1448.977059][T23783] debugfs: 'hsr0' already exists in 'hsr' [ 1449.002776][T23783] Cannot create hsr debugfs directory [ 1450.722031][ T5625] Bluetooth: hci1: command tx timeout [ 1450.833157][ T6352] bridge_slave_1: left allmulticast mode [ 1450.864681][ T6352] bridge_slave_1: left promiscuous mode [ 1450.889925][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.920586][ T6352] bridge_slave_0: left allmulticast mode [ 1450.946426][ T6352] bridge_slave_0: left promiscuous mode [ 1450.967193][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.290760][ T6352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.312238][ T6352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.343573][ T6352] bond0 (unregistering): Released all slaves [ 1451.535476][ T5279] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1451.654138][ T6352] hsr_slave_0: left promiscuous mode [ 1451.661906][ T6352] hsr_slave_1: left promiscuous mode [ 1451.687450][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.720207][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1452.042097][T24174] loop3: detected capacity change from 0 to 128 [ 1452.071401][T24174] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1452.249512][T24174] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1452.295534][T24174] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1452.406882][ T6352] team0 (unregistering): Port device team_slave_1 removed [ 1452.853778][ T5625] Bluetooth: hci1: command tx timeout [ 1452.899989][T24182] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1453.312034][T24187] loop8: detected capacity change from 0 to 128 [ 1453.340105][ T6352] team0 (unregistering): Port device team_slave_0 removed [ 1453.495456][T24187] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1454.487846][T17941] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1454.501444][T24187] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1454.645309][T24187] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1455.777639][T22126] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1458.509522][T14886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1458.524904][T14886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1458.533382][T14886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1458.541979][T14886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1458.554638][T14886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1458.674964][T24083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.716401][T24083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.750528][T24083] bridge_slave_0: entered allmulticast mode [ 1458.813522][T24083] bridge_slave_0: entered promiscuous mode [ 1458.857513][T24083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.864870][T24083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.872189][T24083] bridge_slave_1: entered allmulticast mode [ 1458.880877][T24083] bridge_slave_1: entered promiscuous mode [ 1460.136693][T24083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.421239][T24083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.587832][T14886] Bluetooth: hci6: command tx timeout [ 1461.313290][T24083] team0: Port device team_slave_0 added [ 1461.327650][T24083] team0: Port device team_slave_1 added [ 1461.530845][ T5279] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1462.512476][T24083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.541388][T24083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.684929][T14886] Bluetooth: hci6: command tx timeout [ 1463.002102][T24083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.019784][T24083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.027310][T24083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.062453][T24083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.135438][T24083] hsr_slave_0: entered promiscuous mode [ 1463.142646][T24083] hsr_slave_1: entered promiscuous mode [ 1464.948607][T14886] Bluetooth: hci6: command tx timeout [ 1466.984042][T14886] Bluetooth: hci6: command tx timeout [ 1467.674622][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1467.691806][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1467.702319][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1467.716050][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1467.730506][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1468.267169][ T6352] bridge_slave_1: left allmulticast mode [ 1468.373814][ T6352] bridge_slave_1: left promiscuous mode [ 1468.498150][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.814519][ T6352] bridge_slave_0: left allmulticast mode [ 1468.820332][ T6352] bridge_slave_0: left promiscuous mode [ 1468.826699][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.150723][ T6352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.177029][ T6352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.187400][ T6352] bond0 (unregistering): Released all slaves [ 1469.794162][ T5625] Bluetooth: hci3: command tx timeout [ 1469.902623][ T5279] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1469.942293][ T6352] hsr_slave_0: left promiscuous mode [ 1469.955531][ T6352] hsr_slave_1: left promiscuous mode [ 1469.987584][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.027321][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.182128][ T6352] team0 (unregistering): Port device team_slave_1 removed [ 1470.199953][ T6352] team0 (unregistering): Port device team_slave_0 removed [ 1470.354693][T24083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1470.366378][T24083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1470.374969][T24083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1470.390116][T24083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1470.447929][T24083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1470.500553][T24083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1470.532040][T24083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1470.589090][T24083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1471.526362][T24083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.864190][ T5625] Bluetooth: hci3: command tx timeout [ 1472.067116][T24224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.088578][T24224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.119462][T24224] bridge_slave_0: entered allmulticast mode [ 1472.156196][T24224] bridge_slave_0: entered promiscuous mode [ 1472.184807][T24224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.209142][T24224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.238613][T24224] bridge_slave_1: entered allmulticast mode [ 1472.264818][T24224] bridge_slave_1: entered promiscuous mode [ 1472.286201][T24083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.458977][T24224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.502503][T24224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.547687][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.554945][T18204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.645038][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.652261][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.738037][T24224] team0: Port device team_slave_0 added [ 1472.770554][T24224] team0: Port device team_slave_1 added [ 1472.889123][T24224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.905200][T24341] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1472.911485][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 1472.941407][T24224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1472.988414][T24224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.014375][ T5279] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1473.031023][T24224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.054938][T24224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.116949][T24224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.216538][T24341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1473.228832][T24341] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1473.249855][T24341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1473.278094][T24341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1473.297185][T24341] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1473.333555][T24341] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1473.362608][T24224] hsr_slave_0: entered promiscuous mode [ 1473.379858][T24224] hsr_slave_1: entered promiscuous mode [ 1473.395493][T24224] debugfs: 'hsr0' already exists in 'hsr' [ 1473.402784][T24224] Cannot create hsr debugfs directory [ 1473.455258][T24341] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1473.484110][T24341] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1473.504872][T24341] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1473.548549][T24341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1473.567835][T24341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1473.603934][T24341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1474.787397][T24224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1474.984267][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 1475.471927][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 1475.471969][T14886] Bluetooth: hci0: command 0x0c1a tx timeout [ 1475.478190][T21391] Bluetooth: hci4: command 0x040f tx timeout [ 1475.478234][T21391] Bluetooth: hci6: command 0x0c1a tx timeout [ 1475.491510][T24224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1475.522767][T24224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1475.603178][T24224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1475.654131][T14886] Bluetooth: hci3: command 0x0419 tx timeout [ 1475.737962][T24224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1475.791962][T24224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1477.126980][T24224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1477.833809][T14886] Bluetooth: hci1: command 0x0c1a tx timeout [ 1477.840002][ T5625] Bluetooth: hci6: command 0x0c1a tx timeout [ 1477.846067][ T5620] Bluetooth: hci3: command 0x0419 tx timeout [ 1477.867538][T24224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1477.962754][T24304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.975520][T24304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.982900][T24304] bridge_slave_0: entered allmulticast mode [ 1477.992071][T24304] bridge_slave_0: entered promiscuous mode [ 1478.003561][T24304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.012730][T24304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.021495][T24304] bridge_slave_1: entered allmulticast mode [ 1478.032467][T24304] bridge_slave_1: entered promiscuous mode [ 1478.128835][T24304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.149583][T24304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.230497][T24304] team0: Port device team_slave_0 added [ 1478.245107][T24304] team0: Port device team_slave_1 added [ 1478.318024][T24304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.346064][T24304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.392318][T24304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.418141][T24304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.426885][T24304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.455738][T24304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.563236][T24083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.590907][T24304] hsr_slave_0: entered promiscuous mode [ 1478.598615][T24304] hsr_slave_1: entered promiscuous mode [ 1478.607251][T24304] debugfs: 'hsr0' already exists in 'hsr' [ 1478.613072][T24304] Cannot create hsr debugfs directory [ 1479.022549][T24224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.594683][T24083] veth0_vlan: entered promiscuous mode [ 1479.864583][ T5625] Bluetooth: hci6: command 0x0c1a tx timeout [ 1479.871075][ T5620] Bluetooth: hci3: command 0x0419 tx timeout [ 1479.881635][T14886] Bluetooth: hci1: command 0x0c1a tx timeout [ 1480.578657][T24083] veth1_vlan: entered promiscuous mode [ 1480.730351][T24083] veth0_macvtap: entered promiscuous mode [ 1480.742164][T24083] veth1_macvtap: entered promiscuous mode [ 1480.808124][T24083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.837588][T24083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.251883][T19100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.840343][T19100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.943824][ T5620] Bluetooth: hci3: command 0x0419 tx timeout [ 1482.431367][ T9850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.451719][ T9850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.640909][T24468] overlayfs: failed to clone lowerpath [ 1482.668390][T24224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.874304][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.442431][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.514714][ T9850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.554458][ T9850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.895877][T19100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.967885][T19100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.850169][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.857394][ T9850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.903119][T14886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1485.973728][T14886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1485.984793][T14886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1485.993783][T14886] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1486.001843][T14886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1486.543349][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.550608][T18204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.638968][T24224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1486.695807][T24496] syzkaller0: entered promiscuous mode [ 1486.711077][T24496] syzkaller0: entered allmulticast mode [ 1488.104580][T14886] Bluetooth: hci7: command tx timeout [ 1490.197825][T14886] Bluetooth: hci7: command tx timeout [ 1492.162044][T24304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1492.443776][T14886] Bluetooth: hci7: command tx timeout [ 1492.661333][T24304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1493.135918][T24304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1493.224813][T24588] loop1: detected capacity change from 0 to 512 [ 1493.246068][T24304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1493.391170][T24224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.448775][T24304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1493.580329][T24304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.503727][T14886] Bluetooth: hci7: command tx timeout [ 1494.512958][T24304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1494.596220][T24304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.766360][T24605] loop1: detected capacity change from 0 to 512 [ 1496.050142][T24484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.081846][T24484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.112856][T24484] bridge_slave_0: entered allmulticast mode [ 1496.140585][T24484] bridge_slave_0: entered promiscuous mode [ 1496.158800][T24484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.173928][T24484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.196205][T24484] bridge_slave_1: entered allmulticast mode [ 1496.239966][T24484] bridge_slave_1: entered promiscuous mode [ 1496.386805][T24484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.420151][T24484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.619979][T24484] team0: Port device team_slave_0 added [ 1496.659305][T24484] team0: Port device team_slave_1 added [ 1496.804031][T24484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.835398][T24484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.913109][T24484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.962504][T24484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.981311][T24484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.059921][T24484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.321941][T24484] hsr_slave_0: entered promiscuous mode [ 1497.338444][T24484] hsr_slave_1: entered promiscuous mode [ 1497.355164][T24484] debugfs: 'hsr0' already exists in 'hsr' [ 1497.370064][T24484] Cannot create hsr debugfs directory [ 1497.486797][T24224] veth0_vlan: entered promiscuous mode [ 1497.652471][T24224] veth1_vlan: entered promiscuous mode [ 1499.816576][T24304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.425552][T24224] veth0_macvtap: entered promiscuous mode [ 1501.494669][T24224] veth1_macvtap: entered promiscuous mode [ 1501.551493][T24304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.739604][T21041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.746812][T21041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.038675][T21041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.045898][T21041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.103176][T24224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1502.167234][T24224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.378870][T24703] futex_wake_op: syz.1.5302 tries to shift op by 144; fix this program [ 1502.392056][T24703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5302'. [ 1503.195607][T21041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.205135][T21041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.262473][T21041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.296345][T21041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.246647][T21041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.506638][T21041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.730744][T19100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.769656][T24484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1505.793281][T19100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.835500][T24484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1505.875340][T24484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1505.961675][T24484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1505.989357][T24484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1506.032270][T24484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1506.116469][T24484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1506.830100][T24484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.973048][T24484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.089353][T24484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.135314][T22550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.142571][T22550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.188042][T24784] loop5: detected capacity change from 0 to 512 [ 1510.189148][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.201554][T17408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.356437][T24304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.361656][T24791] loop1: detected capacity change from 0 to 2048 [ 1511.432088][T24304] veth0_vlan: entered promiscuous mode [ 1511.464172][T24797] CIFS: Attempting to mount //127.0.0.1/share [ 1511.481702][T24304] veth1_vlan: entered promiscuous mode [ 1511.497509][T24797] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1511.515814][T24797] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1511.549920][T24304] veth0_macvtap: entered promiscuous mode [ 1511.596832][T24304] veth1_macvtap: entered promiscuous mode [ 1512.416363][T24791] loop1: detected capacity change from 0 to 1024 [ 1512.611076][T24304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.113952][T24304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.375954][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.422798][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.480535][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.532379][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.799736][T19100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.877552][T19100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.821092][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.870717][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.445511][T24852] futex_wake_op: syz.0.5244 tries to shift op by 144; fix this program [ 1518.310240][T24855] binder: 24853:24855 ioctl c0306201 0 returned -14 [ 1519.132024][T24484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.871828][T24897] futex_wake_op: syz.1.5348 tries to shift op by 144; fix this program [ 1520.894331][T24897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5348'. [ 1521.777779][T24900] CIFS: Attempting to mount //127.0.0.1/share [ 1522.848383][T24900] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1522.935465][T24906] CIFS: Attempting to mount //127.0.0.1/share [ 1522.978032][T24906] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1523.000435][T24906] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1524.837051][T24484] veth0_vlan: entered promiscuous mode [ 1524.860919][ T31] audit: type=1326 audit(1785240389.311:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24944 comm="syz.8.5360" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a34d9de99 code=0x0 [ 1524.909966][T24484] veth1_vlan: entered promiscuous mode [ 1524.991961][T24953] futex_wake_op: syz.1.5362 tries to shift op by 144; fix this program [ 1525.015791][T24953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5362'. [ 1525.317541][ T5757] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1525.673277][T24484] veth0_macvtap: entered promiscuous mode [ 1525.686337][T24484] veth1_macvtap: entered promiscuous mode [ 1525.823968][ T5757] usb 9-1: Using ep0 maxpacket: 8 [ 1525.854738][T24484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.862753][ T5757] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1525.912759][ T5757] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.924238][T24484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.957650][ T5757] usb 9-1: config 0 descriptor?? [ 1526.204697][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.245496][T24957] binder: 24955:24957 ioctl c0306201 0 returned -14 [ 1527.298214][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.363179][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.418762][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.957255][T18204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.996927][T18204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.554294][T24987] futex_wake_op: syz.1.5371 tries to shift op by 144; fix this program [ 1528.565741][T24987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5371'. [ 1529.635310][ T6352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.693732][ T6352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.096782][ T5757] usb 9-1: string descriptor 0 read error: -71 [ 1530.106859][ T5757] uvcvideo 9-1:0.0: Found UVC 0.00 device (2833:0201) [ 1530.123832][ T5757] uvcvideo 9-1:0.0: No valid video chain found. [ 1530.157358][ T5757] usb 9-1: USB disconnect, device number 3 [ 1534.058177][T25052] futex_wake_op: syz.8.5389 tries to shift op by 144; fix this program [ 1534.082623][T25052] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5389'. [ 1534.823577][ T31] audit: type=1326 audit(1785240399.271:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25051 comm="syz.1.5390" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273739de99 code=0x0 [ 1535.263723][T18378] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1535.634335][T18378] usb 2-1: Using ep0 maxpacket: 8 [ 1536.144107][T18378] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1536.570357][T18378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.620136][T18378] usb 2-1: config 0 descriptor?? [ 1537.298793][T25090] 9pnet_fd: Insufficient options for proto=fd [ 1537.308403][T25090] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1537.374641][T11940] IPVS: starting estimator thread 0... [ 1537.798662][T25091] IPVS: using max 26 ests per chain, 62400 per kthread [ 1538.417675][T25106] 9pnet_fd: Insufficient options for proto=fd [ 1538.426005][T25106] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1538.559832][T20843] IPVS: starting estimator thread 0... [ 1539.080595][T25107] IPVS: using max 26 ests per chain, 62400 per kthread [ 1540.525492][T18378] usb 2-1: string descriptor 0 read error: -71 [ 1540.544535][T18378] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 1540.555129][T18378] uvcvideo 2-1:0.0: Found UVC 0.00 device (2833:0201) [ 1540.570179][T18378] uvcvideo 2-1:0.0: No valid video chain found. [ 1540.619408][T18378] usb 2-1: USB disconnect, device number 13 [ 1541.010194][T25142] CIFS: Attempting to mount //127.0.0.1/share [ 1541.070206][T25142] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1541.116563][T25142] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1542.521060][T25155] 9pnet_fd: Insufficient options for proto=fd [ 1542.528783][T25155] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1542.894238][T24465] IPVS: starting estimator thread 0... [ 1542.994313][T25157] IPVS: using max 27 ests per chain, 64800 per kthread [ 1543.630576][T25171] loop1: detected capacity change from 0 to 256 [ 1543.785604][T25171] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1544.856470][ T31] audit: type=1326 audit(1785240409.311:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.0.5422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6deef9de99 code=0x0 [ 1545.270793][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.277216][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.908453][T25190] loop8: detected capacity change from 0 to 256 [ 1545.930352][T24465] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1546.071041][T25190] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1546.463809][T24465] usb 1-1: Using ep0 maxpacket: 8 [ 1546.511237][T24465] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1546.560082][T24465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.644858][T24465] usb 1-1: config 0 descriptor?? [ 1546.650389][ T1018] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1548.194569][ T970] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1551.797760][T24465] usb 1-1: string descriptor 0 read error: -32 [ 1551.828345][T24465] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 1551.853791][T24465] uvcvideo 1-1:0.0: Found UVC 0.00 device (2833:0201) [ 1551.885776][T24465] uvcvideo 1-1:0.0: No valid video chain found. [ 1551.947415][T18378] usb 1-1: USB disconnect, device number 13 [ 1552.602918][T25257] futex_wake_op: syz.1.5444 tries to shift op by 144; fix this program [ 1552.627343][T25257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5444'. [ 1554.101495][T25270] trusted_key: encrypted_key: insufficient parameters specified [ 1556.535760][ T31] audit: type=1326 audit(1785240420.981:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25288 comm="syz.2.5452" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43fcf9de99 code=0x0 [ 1560.902891][T25325] futex_wake_op: syz.8.5460 tries to shift op by 144; fix this program [ 1560.929616][T25325] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5460'. [ 1565.394224][ T5757] IPVS: starting estimator thread 0... [ 1565.563816][T25341] IPVS: using max 28 ests per chain, 67200 per kthread [ 1568.250315][T25359] trusted_key: encrypted_key: insufficient parameters specified [ 1570.204514][T25381] 9pnet_fd: Insufficient options for proto=fd [ 1570.213254][T25381] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1571.107896][ T31] audit: type=1326 audit(1785240435.561:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25384 comm="syz.1.5478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273739de99 code=0x0 [ 1571.463448][ T5757] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1571.866805][T25396] loop0: detected capacity change from 0 to 1024 [ 1571.883816][ T5757] usb 2-1: Using ep0 maxpacket: 8 [ 1571.899552][T25396] EXT4-fs: Ignoring removed mblk_io_submit option [ 1571.936569][ T5757] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1571.985554][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.006423][T25396] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 1572.050349][ T5757] usb 2-1: config 0 descriptor?? [ 1572.094759][T25396] System zones: 0-1, 3-8 [ 1572.281074][T25396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1572.362859][T25396] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.566558][T24304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1575.959335][ T5620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1575.978698][ T5620] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1575.991855][ T5620] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1576.001966][ T5620] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1576.012202][ T5620] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1576.168937][ T5757] usb 2-1: string descriptor 0 read error: -71 [ 1576.193798][ T5757] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 1576.233873][ T5757] uvcvideo 2-1:0.0: Found UVC 0.00 device (2833:0201) [ 1576.277304][ T5757] uvcvideo 2-1:0.0: No valid video chain found. [ 1576.338515][T25430] futex_wake_op: syz.4.5483 tries to shift op by 144; fix this program [ 1576.383508][T25430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5483'. [ 1577.214842][ T5757] usb 2-1: USB disconnect, device number 14 [ 1578.103904][ T5620] Bluetooth: hci8: command tx timeout [ 1580.244059][ T5620] Bluetooth: hci8: command tx timeout [ 1582.574311][ T5620] Bluetooth: hci8: command tx timeout [ 1584.993125][ T5620] Bluetooth: hci8: command tx timeout [ 1585.354569][ T31] audit: type=1326 audit(1785240449.811:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25477 comm="syz.4.5495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdaedf9de99 code=0x0 [ 1585.663945][T20843] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1585.833793][T20843] usb 5-1: Using ep0 maxpacket: 8 [ 1585.868092][T20843] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1586.077583][T20843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.077233][T20843] usb 5-1: config 0 descriptor?? [ 1588.168424][T25501] CIFS: Attempting to mount //127.0.0.1/share [ 1588.261231][T25501] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1588.309402][T25501] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1589.660583][T20843] usb 5-1: string descriptor 0 read error: -71 [ 1589.730367][T20843] uvcvideo 5-1:0.0: Found multiple Units with ID 1 [ 1590.065006][T20843] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 1590.293409][T20843] uvcvideo 5-1:0.0: No valid video chain found. [ 1590.389127][T20843] usb 5-1: USB disconnect, device number 14 [ 1591.677213][T25542] loop4: detected capacity change from 0 to 256 [ 1591.877838][T25542] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1594.207992][T19100] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1594.461281][T25553] netlink: 'syz.2.5509': attribute type 2 has an invalid length. [ 1596.714382][ T31] audit: type=1326 audit(1785240461.171:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25577 comm="syz.4.5516" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdaedf9de99 code=0x0 [ 1597.519166][T18364] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.954351][T18378] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1598.175295][T18378] usb 5-1: Using ep0 maxpacket: 8 [ 1598.235345][T18378] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1599.963362][T18378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.011575][T18378] usb 5-1: config 0 descriptor?? [ 1600.191446][T18378] usb 5-1: can't set config #0, error -71 [ 1600.292714][T18378] usb 5-1: USB disconnect, device number 15 [ 1600.382589][T18364] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.463376][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1600.479712][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1600.499776][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1600.520791][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1600.533254][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1601.739137][T18364] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.962141][T25419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.000676][T25419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.076895][T25419] bridge_slave_0: entered allmulticast mode [ 1602.100123][T25419] bridge_slave_0: entered promiscuous mode [ 1602.119157][T25419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.135371][T25419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.149278][T25419] bridge_slave_1: entered allmulticast mode [ 1602.211964][T25419] bridge_slave_1: entered promiscuous mode [ 1602.630870][ T5620] Bluetooth: hci6: command tx timeout [ 1603.357294][T18364] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.681765][T25419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.734637][T25419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.925852][T25419] team0: Port device team_slave_0 added [ 1603.953090][T25419] team0: Port device team_slave_1 added [ 1605.542839][ T5620] Bluetooth: hci6: command tx timeout [ 1605.799659][T25419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.840817][T25419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.949489][T25419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.809052][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.815653][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.344690][T14886] Bluetooth: hci6: command tx timeout [ 1608.904218][T14886] Bluetooth: hci7: command 0x0406 tx timeout [ 1609.831952][T25687] 9pnet_fd: Insufficient options for proto=fd [ 1609.843911][T16735] IPVS: starting estimator thread 0... [ 1609.879561][T25419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.903213][T25419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.973864][T25691] IPVS: using max 30 ests per chain, 72000 per kthread [ 1610.007597][T25419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.195454][T18364] bridge_slave_1: left allmulticast mode [ 1610.214705][T18364] bridge_slave_1: left promiscuous mode [ 1610.238944][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.293475][T18364] bridge_slave_0: left allmulticast mode [ 1610.307654][T18364] bridge_slave_0: left promiscuous mode [ 1610.319771][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.423755][ T5620] Bluetooth: hci6: command tx timeout [ 1612.727454][T18364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.766221][T18364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.793113][T18364] bond0 (unregistering): Released all slaves [ 1613.035423][T25419] hsr_slave_0: entered promiscuous mode [ 1613.066356][T25419] hsr_slave_1: entered promiscuous mode [ 1613.101540][T25419] debugfs: 'hsr0' already exists in 'hsr' [ 1613.121788][T25419] Cannot create hsr debugfs directory [ 1617.612063][T18364] hsr_slave_0: left promiscuous mode [ 1617.686261][T18364] hsr_slave_1: left promiscuous mode [ 1618.431926][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1618.439632][T18364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.583030][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1618.635705][T18364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.933970][T18364] veth1_macvtap: left promiscuous mode [ 1620.044107][T18364] veth0_macvtap: left promiscuous mode [ 1620.149430][T18364] veth1_vlan: left promiscuous mode [ 1620.206793][T18364] veth0_vlan: left promiscuous mode [ 1623.848457][T18364] team0 (unregistering): Port device team_slave_1 removed [ 1623.878838][T18364] team0 (unregistering): Port device team_slave_0 removed [ 1630.533145][T25836] overlayfs: failed to clone lowerpath [ 1631.725834][T25850] CIFS: Attempting to mount //127.0.0.1/share [ 1631.868339][T25597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.888005][T25597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.899339][T25597] bridge_slave_0: entered allmulticast mode [ 1631.937112][T25597] bridge_slave_0: entered promiscuous mode [ 1632.539824][ T32] INFO: task syz.3.5250:24325 blocked for more than 144 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1633.003649][ T32] Tainted: G L syzkaller #0 [ 1633.011532][T25850] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1633.019025][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1633.096143][ T32] task:syz.3.5250 state:D stack:27864 pid:24325 tgid:24323 ppid:17941 task_flags:0x400140 flags:0x00080002 [ 1633.123571][ T32] Call Trace: [ 1633.126978][ T32] [ 1633.129922][ T32] __schedule+0x17d9/0x56c0 [ 1633.143688][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1633.148740][ T32] ? __pfx___schedule+0x10/0x10 [ 1633.156426][ T32] ? schedule+0x90/0x2b0 [ 1633.164042][ T32] schedule+0x164/0x2b0 [ 1633.187536][ T32] schedule_preempt_disabled+0x13/0x30 [ 1633.231306][ T32] __mutex_lock+0x7bf/0x1550 [ 1633.261121][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 1633.290098][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1633.318226][ T32] ? write_threads+0x39d/0x5a0 [ 1633.337948][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1633.355318][ T32] ? simple_strntoull+0x111/0x190 [ 1633.373216][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.389794][ T32] ? qword_get+0x5ad/0x650 [ 1633.403656][ T32] write_threads+0x39d/0x5a0 [ 1633.423732][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.430418][ T32] ? __pfx_write_threads+0x10/0x10 [ 1633.444659][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.455012][ T32] ? _copy_from_user+0x94/0xb0 [ 1633.463847][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.479012][ T32] ? simple_transaction_get+0x12d/0x160 [ 1633.494303][ T32] nfsctl_transaction_write+0x10f/0x160 [ 1633.504382][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1633.531175][ T32] vfs_write+0x296/0xba0 [ 1633.563706][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1633.568582][ T32] ? __fget_files+0x2a/0x420 [ 1633.595142][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.603682][ T32] ? __fget_files+0x3a2/0x420 [ 1633.624029][ T32] ? __fget_files+0x2a/0x420 [ 1633.633793][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1633.647612][ T32] ksys_write+0x150/0x270 [ 1633.661608][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1633.675522][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.695085][ T32] do_syscall_64+0x174/0x580 [ 1633.710167][ T32] ? trace_irq_disable+0x3b/0x140 [ 1633.733686][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.746673][ T32] RIP: 0033:0x7fadce19de99 [ 1633.754941][ T32] RSP: 002b:00007fadcf0d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1633.783454][ T32] RAX: ffffffffffffffda RBX: 00007fadce425fa0 RCX: 00007fadce19de99 [ 1633.807345][ T32] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 1633.823106][ T32] RBP: 00007fadce233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1633.843674][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1633.856023][ T32] R13: 00007fadce426038 R14: 00007fadce425fa0 R15: 00007ffc7d2b58c8 [ 1633.873877][ T32] [ 1633.884652][ T32] [ 1633.884652][ T32] Showing all locks held in the system: [ 1633.968317][ T32] 3 locks held by kworker/u8:1/13: [ 1633.988114][ T32] #0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1634.046233][ T32] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1634.086712][ T32] #2: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1634.129123][ T32] 1 lock held by khungtaskd/32: [ 1634.145353][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1634.196348][ T32] 4 locks held by kworker/u8:4/58: [ 1634.220321][ T32] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1634.256555][ T32] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1634.276077][ T32] #2: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1634.305214][ T32] #3: ffffffff9aa2e900 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 1634.334884][ T32] 2 locks held by getty/5369: [ 1634.339643][ T32] #0: ffff88803228e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1634.363671][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1634.383690][ T32] 3 locks held by kworker/1:9/11932: [ 1634.390224][ T32] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1634.401632][ T32] #1: ffffc9000f79fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1634.423001][ T32] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1634.437545][ T32] 1 lock held by syz-executor/16294: [ 1634.442871][ T32] 6 locks held by kworker/u8:16/18364: [ 1634.452340][ T32] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1634.465764][ T32] #1: ffffc900034f7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1634.476730][ T32] #2: ffffffff9001eb48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1634.486541][ T32] #3: ffff88807d886128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1634.500000][ T32] #4: ffff88807a185258 (&devlink->lock_key#23){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1634.511789][ T32] #5: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1634.522480][ T32] 1 lock held by syz-executor/22126: [ 1634.529233][ T32] #0: ffff888042f44ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1634.542704][ T32] 2 locks held by syz-executor/24083: [ 1634.548503][ T32] #0: ffff888067464ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1634.559702][ T32] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1634.571527][ T32] 3 locks held by syz.7.5219/24153: [ 1634.578450][ T32] #0: ffff888049a05eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1634.588732][ T32] #1: ffff888032b1e450 (sb_writers#28){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1634.598070][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1634.610819][ T32] 3 locks held by syz.3.5250/24325: [ 1634.616359][ T32] #0: ffff888074be0ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1634.626870][ T32] #1: ffff88805111e450 (sb_writers#28){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1634.638648][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1634.648053][ T32] 7 locks held by syz-executor/25419: [ 1634.653488][ T32] #0: ffff888033dda450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1634.662653][ T32] #1: ffff8880548dd880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1634.672640][ T32] #2: ffff8880298a6f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1634.682766][ T32] #3: ffffffff8f8a96a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1634.693937][ T32] #4: ffff8880527a5128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1634.704953][ T32] #5: ffff88801bb79258 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1634.718536][ T32] #6: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1634.728173][ T32] 1 lock held by syz-executor/25597: [ 1634.733487][ T32] #0: ffffffff9002d700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1634.748724][ T32] 1 lock held by syz.4.5582/25868: [ 1634.754222][ T32] #0: ffff888053a68ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1634.764590][ T32] 1 lock held by sed/25884: [ 1634.769177][ T32] [ 1634.771527][ T32] ============================================= [ 1634.771527][ T32] [ 1634.781173][ T32] NMI backtrace for cpu 0 [ 1634.781195][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1634.781224][ T32] Tainted: [L]=SOFTLOCKUP [ 1634.781232][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1634.781245][ T32] Call Trace: [ 1634.781254][ T32] [ 1634.781264][ T32] dump_stack_lvl+0xe8/0x150 [ 1634.781303][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1634.781346][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.781375][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1634.781415][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1634.781454][ T32] sys_info+0x135/0x170 [ 1634.781484][ T32] watchdog+0xfd7/0x1030 [ 1634.781523][ T32] ? watchdog+0x1c7/0x1030 [ 1634.781556][ T32] kthread+0x388/0x470 [ 1634.781593][ T32] ? __pfx_watchdog+0x10/0x10 [ 1634.781622][ T32] ? __pfx_kthread+0x10/0x10 [ 1634.781661][ T32] ret_from_fork+0x514/0xb70 [ 1634.781698][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1634.781729][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.781754][ T32] ? __switch_to+0xc89/0x1420 [ 1634.781786][ T32] ? __pfx_kthread+0x10/0x10 [ 1634.781820][ T32] ret_from_fork_asm+0x1a/0x30 [ 1634.781858][ T32] [ 1634.781882][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1634.786539][T25597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.797112][ C1] NMI backtrace for cpu 1 [ 1634.797133][ C1] CPU: 1 UID: 0 PID: 25597 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1634.797165][ C1] Tainted: [L]=SOFTLOCKUP [ 1634.797174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1634.797188][ C1] RIP: 0010:desc_read+0x1fe/0x3f0 [ 1634.797214][ C1] Code: 00 0f 84 90 00 00 00 e8 80 f5 1f 00 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 b5 8c 8d 00 48 8b 1b <48> 8b 7c 24 10 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 0a e8 8a 8d [ 1634.797234][ C1] RSP: 0018:ffffc9000751e480 EFLAGS: 00000246 [ 1634.797255][ C1] RAX: 1ffffffff1d4fd39 RBX: 00000000000022af RCX: ffff8880259a9f00 [ 1634.797273][ C1] RDX: 0000000000000000 RSI: ffffffff8ea37da0 RDI: ffffc9000751e5d8 [ 1634.797290][ C1] RBP: ffffffff8ea37d88 R08: ffffc9000751e5d7 R09: 1ffff92000ea3cba [ 1634.797308][ C1] R10: dffffc0000000000 R11: fffff52000ea3cbb R12: dffffc0000000000 [ 1634.797326][ C1] R13: 0000000000000000 R14: 1ffffffff1d46fb1 R15: 3fffffffffffffff [ 1634.797346][ C1] FS: 0000555572a3b500(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 1634.797366][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1634.797383][ C1] CR2: 00007f5c7e32c000 CR3: 000000004545e000 CR4: 0000000000350ef0 [ 1634.797403][ C1] Call Trace: [ 1634.797412][ C1] [ 1634.797428][ C1] _prb_read_valid+0x286/0xa50 [ 1634.797468][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 1634.797494][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.797521][ C1] ? desc_read+0x194/0x3f0 [ 1634.797549][ C1] prb_read_valid+0x3c/0x60 [ 1634.797573][ C1] printk_get_next_message+0x18b/0x880 [ 1634.797609][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 1634.797642][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 1634.797676][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.797729][ C1] ? console_flush_all+0x493/0xaf0 [ 1634.797761][ C1] console_flush_all+0x4e3/0xaf0 [ 1634.797792][ C1] ? console_flush_all+0x123/0xaf0 [ 1634.797824][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1634.797854][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.797881][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1634.797915][ C1] console_unlock+0xd1/0x1c0 [ 1634.797938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.797967][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1634.797990][ C1] ? vprintk_emit+0x2b0/0x560 [ 1634.798014][ C1] ? vprintk_emit+0x455/0x560 [ 1634.798038][ C1] ? vprintk_emit+0x2cf/0x560 [ 1634.798060][ C1] ? vprintk_emit+0x2cf/0x560 [ 1634.798085][ C1] vprintk_emit+0x485/0x560 [ 1634.798108][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798138][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1634.798171][ C1] _printk+0xdd/0x130 [ 1634.798202][ C1] ? __pfx__printk+0x10/0x10 [ 1634.798228][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1634.798261][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798288][ C1] ? switchdev_deferred_enqueue+0x1fe/0x240 [ 1634.798322][ C1] br_set_state+0x4c9/0x6f0 [ 1634.798355][ C1] ? __pfx_br_set_state+0x10/0x10 [ 1634.798387][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.798413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798441][ C1] ? br_become_designated_port+0x20/0x250 [ 1634.798472][ C1] br_init_port+0x99/0x200 [ 1634.798508][ C1] new_nbp+0x4af/0x640 [ 1634.798540][ C1] br_add_if+0x279/0xeb0 [ 1634.798563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798622][ C1] ? mutex_is_locked+0x17/0x50 [ 1634.798649][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798680][ C1] do_set_master+0x563/0x720 [ 1634.798715][ C1] do_setlink+0xe7b/0x4670 [ 1634.798740][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1634.798775][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798801][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1634.798836][ C1] ? __pfx_do_setlink+0x10/0x10 [ 1634.798859][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798885][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1634.798920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.798945][ C1] ? stack_depot_save_flags+0x33/0x800 [ 1634.798983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799009][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1634.799037][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799064][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799092][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799124][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1634.799147][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799173][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1634.799199][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799225][ C1] ? __mutex_lock+0x1092/0x1550 [ 1634.799254][ C1] ? __mutex_lock+0x5d4/0x1550 [ 1634.799283][ C1] ? rtnl_newlink+0x8a3/0x1bd0 [ 1634.799307][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1634.799332][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799365][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799391][ C1] ? ns_capable+0x89/0xe0 [ 1634.799419][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799444][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799473][ C1] rtnl_newlink+0x15c2/0x1bd0 [ 1634.799505][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1634.799528][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799553][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1634.799589][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799615][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1634.799655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799687][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799720][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799751][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799780][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1634.799817][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799842][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1634.799876][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799901][ C1] ? kernel_text_address+0xa5/0xe0 [ 1634.799924][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799950][ C1] ? __kernel_text_address+0xd/0x30 [ 1634.799970][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.799995][ C1] ? unwind_get_return_address+0x4d/0x90 [ 1634.800020][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1634.800050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.800075][ C1] ? arch_stack_walk+0xfb/0x150 [ 1634.800107][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.800135][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1634.800159][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.800192][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1634.800213][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 1634.800235][ C1] ? netlink_sendmsg+0x5d4/0xb40 [ 1634.800265][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1634.800287][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1634.800310][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.800336][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1634.800377][ C1] netlink_rcv_skb+0x226/0x4a0 [ 1634.800404][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1634.800428][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1634.800464][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1634.800490][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1634.800521][ C1] netlink_unicast+0x7bb/0x940 [ 1634.800553][ C1] netlink_sendmsg+0x813/0xb40 [ 1634.800587][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.800617][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.800649][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1634.800675][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.800703][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.800730][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 1634.800764][ C1] __sys_sendto+0x408/0x5a0 [ 1634.800792][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1634.800813][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1634.800847][ C1] ? fput_close_sync+0x11f/0x240 [ 1634.800877][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.800903][ C1] ? kmem_cache_free+0x462/0x650 [ 1634.800941][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 1634.800973][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.801004][ C1] __x64_sys_sendto+0xde/0x100 [ 1634.801028][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.801052][ C1] do_syscall_64+0x174/0x580 [ 1634.801077][ C1] ? trace_irq_disable+0x3b/0x140 [ 1634.801111][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.801133][ C1] RIP: 0033:0x7f5bb7f5e6ce [ 1634.801154][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1634.801172][ C1] RSP: 002b:00007fff59f18588 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1634.801194][ C1] RAX: ffffffffffffffda RBX: 0000555572a3b500 RCX: 00007f5bb7f5e6ce [ 1634.801210][ C1] RDX: 0000000000000028 RSI: 00007f5bb8d54670 RDI: 0000000000000003 [ 1634.801224][ C1] RBP: 0000000000000001 R08: 00007fff59f18604 R09: 000000000000000c [ 1634.801239][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1634.801253][ C1] R13: 0000000000000000 R14: 00007f5bb8d54670 R15: 0000000000000000 [ 1634.801281][ C1] [ 1634.868766][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1634.868793][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1634.868826][ T32] Tainted: [L]=SOFTLOCKUP [ 1634.868837][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1634.868853][ T32] Call Trace: [ 1634.868865][ T32] [ 1634.868877][ T32] vpanic+0x56c/0xa60 [ 1634.868920][ T32] ? __pfx___schedule+0x10/0x10 [ 1634.868958][ T32] ? __pfx_vpanic+0x10/0x10 [ 1634.868994][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.869037][ T32] panic+0xc5/0xd0 [ 1634.869075][ T32] ? __pfx_panic+0x10/0x10 [ 1634.869110][ T32] ? preempt_schedule_common+0x82/0xd0 [ 1634.869145][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1634.869178][ T32] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1634.869222][ T32] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1634.869263][ T32] watchdog+0x1030/0x1030 [ 1634.869305][ T32] ? watchdog+0x1c7/0x1030 [ 1635.887457][ T32] kthread+0x388/0x470 [ 1635.891538][ T32] ? __pfx_watchdog+0x10/0x10 [ 1635.896215][ T32] ? __pfx_kthread+0x10/0x10 [ 1635.900813][ T32] ret_from_fork+0x514/0xb70 [ 1635.905414][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1635.910528][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1635.916156][ T32] ? __switch_to+0xc89/0x1420 [ 1635.920834][ T32] ? __pfx_kthread+0x10/0x10 [ 1635.925429][ T32] ret_from_fork_asm+0x1a/0x30 [ 1635.930200][ T32] [ 1635.933439][ T32] Kernel Offset: disabled [ 1635.937769][ T32] Rebooting in 86400 seconds..