last executing test programs: 11m45.272716579s ago: executing program 32 (id=707): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 11m37.655196806s ago: executing program 1 (id=786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251b00000008000300", @ANYRES32, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) 11m36.144371548s ago: executing program 1 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x4f) 11m35.738021057s ago: executing program 1 (id=796): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x1d) 11m20.490768999s ago: executing program 33 (id=796): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x1d) 6m44.638833377s ago: executing program 0 (id=2138): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6m43.471756543s ago: executing program 0 (id=2154): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_open_dev$sg(0x0, 0x0, 0x10845) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 6m34.727586892s ago: executing program 0 (id=2182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x40000) 6m31.745724459s ago: executing program 0 (id=2188): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000540)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@clear_cache}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x543442, 0xd1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x192, &(0x7f0000009480)="$eJzsmL9OKkEUxr/Z5U+4uQm3vbe5JpKAhcvuoEYKC2oLTTQaO4msBF3EwBZA51NY+wTWxIb30EKtLMTOymLN7A7ugH+wQMV4fsWZb2YOw5mzybfJgiCIH8v11f3laTqVEPo3UojL9Rs9zNGU/E7yYea8snJ2bN5ddLrL+eHzGADPe///RwB0CzpcOfe8wV+n5LgOra+j6v4mGAypt6FhQ2obDFtS7ym6JvINY7fi2MZOzSkJYYpgicBFyA3X1ztiKCn1MWW/0WrvFx3Hrn+gGNW/XkHDklKf+rz6vTHD/sGCBkvqHBjWpF5EvN+boCXK/f9FwvP1T77/9xZ/kyNyopiUUkmMQTAIcZsAJqOerxKhP3knDGnFnyKKf2Td6mG20WrPVqrFsl22DzjPLZhzpjnPs74RBfEN/0v4/vRLOT/6Sm6MxdAsum7dCuLTnDfjcOv8JceN+f6nITMdVM3kmor/PvjDpsSQ0eWcIAiCIAiCIAiCIAiCIAhi7PwH87+CDpB/tsRX/ezHAAAA//8Wh3En") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000000)={0x1, 0xffffffffff7ffe01, 0x6, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x7fffffff]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090026bd70000000a10004000000050011802e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000040)={0x20080522, r7}, &(0x7f00000001c0)={0x7f, 0x3, 0x2eb5, 0x7, 0x5, 0x6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 6m28.816974184s ago: executing program 0 (id=2192): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000001a00)=""/234, 0xea}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000003c40)=""/105, 0x69}], 0x4}, 0x3}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="20000000100001070000000000000000"], 0x20}}, 0x4000084) 6m28.173594978s ago: executing program 0 (id=2194): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_open_dev$sg(0x0, 0x0, 0x10845) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 6m11.915608109s ago: executing program 34 (id=2194): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_open_dev$sg(0x0, 0x0, 0x10845) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1m54.993312772s ago: executing program 4 (id=3279): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x4, 0x7, 0x20000000) 1m53.536504708s ago: executing program 4 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x80, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4044004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m52.247942749s ago: executing program 7 (id=3282): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa4}}, 0xc0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x304) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000001000)=@ethtool_stats={0x11, 0x2, [0x200, 0x200000000]}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000080)) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000070603000000000000000000020000050800064037b1d0770500010007000000fb2acc93c4e7496210e284986b0bcc904c89f8c86e6eea9ff7c6fe26e0e1c61302508e9d4eb311d4760f5ac4ce3757da14961a329b3b1eb632eaf7a33da8c1eb964e9275b854e632caa88990015b"], 0x24}, 0x1, 0x0, 0x0, 0x20048816}, 0x26008084) 1m51.515415886s ago: executing program 4 (id=3288): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m51.484462465s ago: executing program 7 (id=3289): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x80}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m49.41961327s ago: executing program 7 (id=3294): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) 1m48.93033853s ago: executing program 4 (id=3297): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet(0x2, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1m48.229515495s ago: executing program 7 (id=3299): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1}, 0x2000000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) 1m47.739837652s ago: executing program 4 (id=3302): socket(0x15, 0x5, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r8, &(0x7f00000000c0)=""/4096, 0x1000) 1m47.668803547s ago: executing program 7 (id=3303): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m43.691544111s ago: executing program 4 (id=3306): timer_create(0xfffffffc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 1m42.979344002s ago: executing program 7 (id=3309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="dc91005f00"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioctl$TIOCSBRK(r4, 0x5427) ioctl$SG_IO(r3, 0x2285, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000100004000400"], 0x1c}}, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) 1m28.322479005s ago: executing program 35 (id=3306): timer_create(0xfffffffc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 1m27.768601813s ago: executing program 36 (id=3309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="dc91005f00"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) ioctl$TIOCSBRK(r4, 0x5427) ioctl$SG_IO(r3, 0x2285, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000100004000400"], 0x1c}}, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) 1m21.913382419s ago: executing program 2 (id=3366): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m20.973688571s ago: executing program 2 (id=3374): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 1m19.169461519s ago: executing program 2 (id=3377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6", 0xbd}, {0x0}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e", 0xc}], 0x2}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m17.6987838s ago: executing program 2 (id=3378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6", 0xbd}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)="6e20cbe6a4a1", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m17.185256849s ago: executing program 2 (id=3383): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2000, 0x0) 1m16.885760555s ago: executing program 2 (id=3386): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = getgid() mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=virtio,fscache,dfltgid=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6c6f6f73652c63836368653d6c6f6f7365"]) r5 = dup2(r3, r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @mcast2, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) 1m1.384056574s ago: executing program 37 (id=3386): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = getgid() mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=virtio,fscache,dfltgid=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6c6f6f73652c63836368653d6c6f6f7365"]) r5 = dup2(r3, r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @mcast2, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) 19.101865165s ago: executing program 6 (id=3529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c"], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c4}, 0x20048080) 18.695038655s ago: executing program 6 (id=3532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 17.648656425s ago: executing program 6 (id=3536): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) 16.871105255s ago: executing program 6 (id=3538): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f", 0x97) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 12.659668687s ago: executing program 6 (id=3549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 10.942719651s ago: executing program 6 (id=3552): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000580)=""/63, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r4, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(0x0, 0x188) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) 8.696435995s ago: executing program 8 (id=3559): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) sendfile(0xffffffffffffffff, r2, 0x0, 0x578410eb) 7.264544301s ago: executing program 8 (id=3563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7.091505658s ago: executing program 5 (id=3564): socket(0x15, 0x5, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 7.012355925s ago: executing program 8 (id=3565): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) poll(&(0x7f00000001c0)=[{r2, 0x210}], 0x1, 0x2) prlimit64(r0, 0x7, &(0x7f0000000040)={0x1f, 0x2}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x8c}}, 0x20050800) syz_pidfd_open(r0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000580)=0x8) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000000080)) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000280)={0x100, r7}, 0x0) close(r7) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 6.813457204s ago: executing program 3 (id=3566): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {0x0}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x7}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2000, 0x0) 5.520332811s ago: executing program 3 (id=3567): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000200)="af", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x37, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 5.504274116s ago: executing program 8 (id=3568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec070", 0x8e}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c530", 0x22}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.048759354s ago: executing program 3 (id=3569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5020}, 0x2400c0cc) 4.886522165s ago: executing program 8 (id=3570): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000580)=""/63, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r4, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(0x0, 0x188) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) 4.67181965s ago: executing program 3 (id=3571): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x6, 0x4, 0x12, 0x0, r0}, 0x50) socket$inet(0x2, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 4.248179357s ago: executing program 5 (id=3572): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x4c}}, 0x0) 3.170322116s ago: executing program 1 (id=3408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081}, 0x0) 2.894098145s ago: executing program 5 (id=3573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.861679955s ago: executing program 3 (id=3574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) 2.699236368s ago: executing program 1 (id=3575): timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x2}) 1.623864718s ago: executing program 5 (id=3576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.279699898s ago: executing program 3 (id=3577): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 380.719151ms ago: executing program 5 (id=3578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {0x0}, {&(0x7f00000009c0)=""/73, 0x49}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x8}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2000, 0x0) 237.382335ms ago: executing program 1 (id=3579): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000540)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@clear_cache}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x543442, 0xd1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x192, &(0x7f0000009480)="$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") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000000)={0x1, 0xffffffffff7ffe01, 0x6, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x7fffffff]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090026bd70000000a10004000000050011802e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r7 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000040)={0x20080522, r7}, &(0x7f00000001c0)={0x7f, 0x3, 0x2eb5, 0x7, 0x5, 0x6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 44.667269ms ago: executing program 8 (id=3580): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000200)="af", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x37, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 0s ago: executing program 5 (id=3581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5020}, 0x2400c0cc) kernel console output (not intermixed with test programs): 10854 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca699c819 code=0x7ffc0000 [ 552.692014][ T31] audit: type=1326 audit(1776337627.072:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fdca699c819 code=0x7ffc0000 [ 552.714435][ T31] audit: type=1326 audit(1776337627.072:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca699c819 code=0x7ffc0000 [ 552.737073][ T31] audit: type=1326 audit(1776337627.072:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca699c819 code=0x7ffc0000 [ 552.759646][ T31] audit: type=1326 audit(1776337627.072:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdca695d04e code=0x7ffc0000 [ 552.782556][ T31] audit: type=1326 audit(1776337627.082:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca699c819 code=0x7ffc0000 [ 552.805486][ T31] audit: type=1326 audit(1776337627.082:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca699c819 code=0x7ffc0000 [ 552.828123][ T31] audit: type=1326 audit(1776337627.762:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9459c819 code=0x7ffc0000 [ 554.605440][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1494'. [ 556.410557][T10901] loop7: detected capacity change from 0 to 32768 [ 556.421979][T10901] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1496 (10901) [ 556.505693][T10901] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 556.516062][T10901] BTRFS info (device loop7): using sha256 checksum algorithm [ 556.547077][T10910] GUP no longer grows the stack in syz.6.1500 (10910): 200000005000-200000008000 (200000004000) [ 556.559024][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.6.1500 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.559082][T10910] Tainted: [L]=SOFTLOCKUP [ 556.559095][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 556.559126][T10910] Call Trace: [ 556.559138][T10910] [ 556.559152][T10910] dump_stack_lvl+0x100/0x190 [ 556.559226][T10910] gup_vma_lookup.cold+0x83/0x96 [ 556.559286][T10910] fixup_user_fault+0x253/0x510 [ 556.559337][T10910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.559392][T10910] fault_in_user_writeable+0x70/0xe0 [ 556.559438][T10910] futex_lock_pi+0x67d/0x7a0 [ 556.559498][T10910] ? __pfx_futex_lock_pi+0x10/0x10 [ 556.559602][T10910] ? __pfx_futex_wake_mark+0x10/0x10 [ 556.559684][T10910] do_futex+0x18a/0x350 [ 556.559730][T10910] ? __pfx_do_futex+0x10/0x10 [ 556.559772][T10910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.559819][T10910] ? __vm_munmap+0x1d2/0x390 [ 556.559866][T10910] __x64_sys_futex+0x34f/0x4d0 [ 556.559918][T10910] ? __pfx___x64_sys_futex+0x10/0x10 [ 556.559971][T10910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.560019][T10910] ? rcu_is_watching+0x12/0xc0 [ 556.560075][T10910] do_syscall_64+0x10b/0xf80 [ 556.560130][T10910] ? irqentry_exit+0x117/0x790 [ 556.560183][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.560224][T10910] RIP: 0033:0x7f824859c819 [ 556.560253][T10910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.560292][T10910] RSP: 002b:00007f8249540028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 556.560329][T10910] RAX: ffffffffffffffda RBX: 00007f8248815fa0 RCX: 00007f824859c819 [ 556.560355][T10910] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 556.560381][T10910] RBP: 00007f8248632c91 R08: 0000000000000000 R09: 0000000000000000 [ 556.560405][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.560429][T10910] R13: 00007f8248816038 R14: 00007f8248815fa0 R15: 00007fffb3986df8 [ 556.560480][T10910] [ 556.990721][T10901] BTRFS info (device loop7): rebuilding free space tree [ 557.012496][T10901] BTRFS info (device loop7): disabling free space tree [ 557.019545][T10901] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 557.029261][T10901] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 557.050076][T10901] BTRFS info (device loop7): checking UUID tree [ 557.058343][T10901] BTRFS info (device loop7): setting nodatasum [ 557.064874][T10901] BTRFS info (device loop7): setting nodatacow [ 557.071188][T10901] BTRFS info (device loop7): turning off barriers [ 557.077625][T10901] BTRFS info (device loop7): force clearing of disk cache [ 557.377985][T10055] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 557.535416][T10055] usb 7-1: device descriptor read/64, error -71 [ 558.138279][T10943] loop4: detected capacity change from 0 to 1024 [ 558.337710][ T8737] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 558.349564][T10055] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 558.387607][T10951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1508'. [ 558.511438][T10055] usb 7-1: device descriptor read/64, error -71 [ 558.641892][T10055] usb usb7-port1: attempt power cycle [ 558.653262][T10957] netlink: 'syz.2.1509': attribute type 4 has an invalid length. [ 558.847028][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1510'. [ 558.999815][T10055] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 559.030468][T10055] usb 7-1: device descriptor read/8, error -71 [ 559.279617][T10055] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 559.784742][T10965] loop7: detected capacity change from 0 to 131072 [ 559.855896][T10965] F2FS-fs (loop7): invalid crc value [ 559.948089][T10965] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 559.962380][T10965] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 560.028872][T10965] F2FS-fs (loop7): f2fs_lookup: inode (ino=4) has zero i_nlink [ 560.077412][T10055] usb 7-1: device descriptor read/8, error -71 [ 560.220710][T10055] usb usb7-port1: unable to enumerate USB device [ 560.418454][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 561.472813][T10994] loop7: detected capacity change from 0 to 1024 [ 561.484181][T10994] hfsplus: failed to load catalog file [ 562.922638][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.933564][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.046806][T11002] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1521'. [ 563.411380][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1530'. [ 563.499898][T11019] ipvlan2: entered allmulticast mode [ 563.541422][T11019] syz_tun: entered allmulticast mode [ 564.154648][T10055] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 564.479549][ T6137] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.671967][ T6137] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.976230][ T6137] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.016097][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1542'. [ 565.035399][T11047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1543'. [ 565.061739][ T93] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.080774][T10055] usb 7-1: Using ep0 maxpacket: 8 [ 565.105668][T10055] usb 7-1: unable to get BOS descriptor or descriptor too short [ 565.146177][T10055] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.188736][T10055] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.226876][T10055] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 565.269701][T10055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.285055][T10055] usb 7-1: Product: syz [ 565.309712][T10055] usb 7-1: Manufacturer: syz [ 565.314403][T10055] usb 7-1: SerialNumber: syz [ 565.561845][T10055] usb 7-1: USB disconnect, device number 16 [ 566.056698][T11073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.091638][T11073] netlink: 'syz.5.1554': attribute type 10 has an invalid length. [ 566.116207][T11073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 566.248221][T11073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.807407][T11097] overlayfs: failed to resolve './file1': -2 [ 566.909603][T11098] overlayfs: failed to resolve './file1/file0': -2 [ 567.844981][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1563'. [ 568.588806][ T93] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.763647][ T93] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.299523][ T7031] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.320849][ T7031] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.369572][T10055] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 569.520911][T10055] usb 8-1: Using ep0 maxpacket: 8 [ 569.552882][T10055] usb 8-1: unable to get BOS descriptor or descriptor too short [ 569.575615][T10055] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.603206][T10055] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.643053][T10055] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 569.682940][T10055] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.728483][T10055] usb 8-1: Product: syz [ 569.766943][T10055] usb 8-1: Manufacturer: syz [ 569.777954][T10055] usb 8-1: SerialNumber: syz [ 570.054413][T10034] usb 8-1: USB disconnect, device number 8 [ 570.691470][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 571.505126][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 571.616186][T11182] macsec1: entered promiscuous mode [ 571.635850][T11187] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1599'. [ 571.655438][T11182] batadv_slave_0: entered promiscuous mode [ 571.679058][T11182] macsec1: entered allmulticast mode [ 571.694650][T11182] batadv_slave_0: entered allmulticast mode [ 571.939261][T11195] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1603'. [ 572.491651][T11215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1613'. [ 572.530417][T11211] loop4: detected capacity change from 0 to 32768 [ 572.538566][T11215] netlink: 'syz.5.1613': attribute type 7 has an invalid length. [ 572.546827][T11211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1611 (11211) [ 572.560581][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1613'. [ 572.595482][T11211] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 572.605712][T11211] BTRFS info (device loop4): using sha256 checksum algorithm [ 572.668780][T11215] ip6gretap0: entered promiscuous mode [ 572.682449][T11215] syz_tun: entered promiscuous mode [ 572.689048][T11215] debugfs: 'hsr1' already exists in 'hsr' [ 572.694949][T11215] Cannot create hsr debugfs directory [ 572.700658][T11215] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 572.711301][T11215] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 572.737428][T11211] BTRFS info (device loop4): rebuilding free space tree [ 572.770734][T11211] BTRFS info (device loop4): disabling free space tree [ 572.777716][T11211] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 572.780185][T11236] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1616'. [ 572.787521][T11211] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 572.814243][T11211] BTRFS info (device loop4): checking UUID tree [ 572.828605][T11211] BTRFS info (device loop4): setting nodatasum [ 572.835223][T11211] BTRFS info (device loop4): setting nodatacow [ 572.841462][T11211] BTRFS info (device loop4): turning off barriers [ 572.847873][T11211] BTRFS info (device loop4): force clearing of disk cache [ 574.007744][ T5826] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 574.283675][T11251] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1622'. [ 574.511445][T11255] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 574.518573][T11255] overlayfs: failed to set xattr on upper [ 574.524946][T11255] overlayfs: ...falling back to redirect_dir=nofollow. [ 574.532071][T11255] overlayfs: ...falling back to index=off. [ 574.537947][T11255] overlayfs: ...falling back to uuid=null. [ 574.544193][T11255] overlayfs: conflicting lowerdir path [ 576.385656][T11260] loop4: detected capacity change from 0 to 131072 [ 576.397085][T11274] overlayfs: failed to resolve './file1': -2 [ 576.565795][T11260] F2FS-fs (loop4): invalid crc value [ 576.949882][T11260] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 576.986134][T11260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 577.245275][T11260] F2FS-fs (loop4): f2fs_lookup: inode (ino=4) has zero i_nlink [ 577.275289][T11280] loop6: detected capacity change from 0 to 32768 [ 577.283629][T11280] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1630 (11280) [ 577.317140][T11288] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1633'. [ 577.344752][T11280] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 577.355113][T11280] BTRFS info (device loop6): using sha256 checksum algorithm [ 577.523988][T11280] BTRFS info (device loop6): rebuilding free space tree [ 577.543810][T11280] BTRFS info (device loop6): disabling free space tree [ 577.552105][T11280] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 577.561903][T11280] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 577.581909][T11280] BTRFS info (device loop6): checking UUID tree [ 577.590786][T11280] BTRFS info (device loop6): setting nodatasum [ 577.597090][T11280] BTRFS info (device loop6): setting nodatacow [ 577.605379][T11280] BTRFS info (device loop6): turning off barriers [ 577.612076][T11280] BTRFS info (device loop6): force clearing of disk cache [ 577.843647][T11310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1637'. [ 577.952665][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1638'. [ 578.427443][T11316] netlink: 'syz.0.1639': attribute type 10 has an invalid length. [ 578.435659][T11316] veth0_vlan: left promiscuous mode [ 578.441963][T11316] veth0_vlan: entered promiscuous mode [ 578.449857][T11316] team0: Device veth0_vlan failed to register rx_handler [ 579.545342][T11327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 580.852868][ T8472] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 582.555346][T11360] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1649'. [ 583.531533][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 584.357600][T11374] netlink: 'syz.6.1659': attribute type 10 has an invalid length. [ 584.624382][T11374] veth0_vlan: left promiscuous mode [ 584.661906][T11374] veth0_vlan: entered promiscuous mode [ 585.475195][T11374] team0: Device veth0_vlan failed to register rx_handler [ 586.302148][T11400] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1668'. [ 587.045334][T11417] netlink: 'syz.7.1674': attribute type 1 has an invalid length. [ 587.145416][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1674'. [ 587.156283][T11417] bond1: entered promiscuous mode [ 587.161901][T11417] bond1: entered allmulticast mode [ 587.170327][T11417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.211194][T11417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.241088][T11417] bond1: (slave geneve2): Opening slave failed [ 587.926572][T11432] loop7: detected capacity change from 0 to 32768 [ 587.978833][T11432] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 588.070457][T11432] XFS (loop7): Ending clean mount [ 588.125638][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 588.125665][ T31] audit: type=1800 audit(1776337664.122:101): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1679" name="file1" dev="loop7" ino=9286 res=0 errno=0 [ 588.187413][T11432] XFS (loop7): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 588.199339][T11432] XFS (loop7): Unmount and run xfs_repair [ 588.205197][T11432] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 588.212773][T11432] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 588.221944][T11432] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 588.230919][T11432] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 588.241513][T11432] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 588.251121][T11432] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 588.260052][T11432] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 588.268917][T11432] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 588.277876][T11432] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 588.287033][T11432] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x14 len 4 error 74 [ 588.308394][T11432] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 588.323254][T11432] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 588.454305][T11450] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1683'. [ 588.514010][ T8737] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 588.918730][T11459] overlayfs: failed to clone upperpath [ 589.023299][T11460] overlayfs: failed to clone upperpath [ 590.774096][T11475] loop6: detected capacity change from 0 to 512 [ 590.802381][T11475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 590.832112][T11475] EXT4-fs: test_dummy_encryption requires encrypt feature [ 591.587771][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1697'. [ 594.155067][T11512] tipc: Enabling of bearer rejected, failed to enable media [ 594.799529][T11528] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1710'. [ 594.839201][T11528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1710'. [ 594.871738][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1711'. [ 594.919500][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 595.408171][T11513] loop6: detected capacity change from 0 to 40427 [ 595.461652][T11513] F2FS-fs (loop6): Image doesn't support compression [ 595.480172][T11513] F2FS-fs (loop6): build fault injection rate: 690 [ 595.523252][T11513] F2FS-fs (loop6): invalid crc value [ 595.796691][T11513] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 595.823280][T11513] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 598.309906][T11568] batadv_slave_0: left allmulticast mode [ 598.326477][T11568] batadv_slave_0: left promiscuous mode [ 599.158588][T11576] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1725'. [ 599.169084][T11576] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1725'. [ 599.178778][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'. [ 599.300750][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1727'. [ 601.059901][T11608] overlayfs: failed to clone upperpath [ 601.085822][T11608] overlayfs: failed to clone upperpath [ 601.925942][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1737'. [ 602.145611][T11617] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1742'. [ 602.182409][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 602.219561][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1742'. [ 602.239221][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 602.324714][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1743'. [ 604.845125][T11659] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1760'. [ 604.855839][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1760'. [ 604.868465][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1760'. [ 604.878072][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1760'. [ 604.934989][T11662] loop7: detected capacity change from 0 to 512 [ 604.954187][T11662] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 605.045835][T11665] cgroup: Unknown subsys name 'cpuset' [ 605.749597][ T5799] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 606.061116][ T5799] usb 7-1: Using ep0 maxpacket: 32 [ 606.642678][ T5799] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.714874][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 606.782420][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 606.842939][ T5799] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 606.897325][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.003805][ T5799] usb 7-1: config 0 descriptor?? [ 607.029116][T11674] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 607.031458][T11699] __nla_validate_parse: 1 callbacks suppressed [ 607.031481][T11699] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1773'. [ 607.066651][ T5799] hub 7-1:0.0: USB hub found [ 607.094057][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 607.136877][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 607.189956][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 607.290694][ T5799] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 607.328454][ T5799] usbhid 7-1:0.0: can't add hid device: -71 [ 607.341893][ T5799] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 607.406665][ T5799] usb 7-1: USB disconnect, device number 17 [ 609.343756][ T5949] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.805698][ T5949] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.814578][ T5949] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.823775][ T5949] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.217331][ T31] audit: type=1326 audit(1776337687.132:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.4.1801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e59c819 code=0x0 [ 611.266670][T11782] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1804'. [ 611.319069][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1804'. [ 611.382179][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1804'. [ 612.319162][ T6325] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.689178][ T6325] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.743798][ T6325] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.985965][ T6325] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.181516][ T93] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.226469][ T93] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.264217][ T93] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.283128][ T93] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.297291][T11836] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1824'. [ 614.309329][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 615.132645][T11854] loop6: detected capacity change from 0 to 32768 [ 615.144398][T11854] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1832 (11854) [ 615.163530][T11854] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 615.173721][T11854] BTRFS info (device loop6): using sha256 checksum algorithm [ 616.066141][T11854] BTRFS info (device loop6): rebuilding free space tree [ 616.237369][T11854] BTRFS info (device loop6): disabling free space tree [ 616.244456][T11854] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 616.254437][T11854] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 616.291694][T11854] BTRFS info (device loop6): checking UUID tree [ 616.298489][T11854] BTRFS info (device loop6): setting nodatasum [ 616.304869][T11854] BTRFS info (device loop6): setting nodatacow [ 616.311157][T11854] BTRFS info (device loop6): turning off barriers [ 616.317586][T11854] BTRFS info (device loop6): force clearing of disk cache [ 616.718843][T11889] cgroup: Unknown subsys name 'cpuset' [ 617.631233][ T8472] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 619.147143][ T6405] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.347119][ T6405] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.429180][ T6405] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.508204][ T6405] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.873483][T11948] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1861'. [ 619.889793][T11949] cgroup: Unknown subsys name 'cpuset' [ 620.704687][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 620.939504][ T31] audit: type=1326 audit(1776337696.932:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.2.1875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f9459c819 code=0xffff0000 [ 621.205087][ T6405] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.511204][ T6405] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.691234][ T6405] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.755517][ T6405] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.562369][T12010] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1888'. [ 623.796274][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.803210][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.524335][T12054] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1902'. [ 628.773329][T12089] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1916'. [ 630.125625][T12103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1920'. [ 630.432981][T12113] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 630.504705][T12113] bond2: entered promiscuous mode [ 630.519873][T12113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 630.608021][T12113] ipvlan2: entered allmulticast mode [ 630.630072][T12113] bond2: entered allmulticast mode [ 632.397824][T12122] bond2: (slave bridge2): making interface the new active one [ 632.428842][T12122] bridge2: entered promiscuous mode [ 632.438736][T12122] bridge2: entered allmulticast mode [ 632.462994][T12122] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 632.555348][T12142] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1931'. [ 635.065556][ T5799] IPVS: starting estimator thread 0... [ 635.309959][T12161] IPVS: using max 22 ests per chain, 52800 per kthread [ 636.017181][T12171] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 636.024239][T12171] overlayfs: failed to set xattr on upper [ 636.030043][T12171] overlayfs: ...falling back to redirect_dir=nofollow. [ 636.036972][T12171] overlayfs: ...falling back to index=off. [ 636.042952][T12171] overlayfs: ...falling back to uuid=null. [ 636.068358][T12173] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 637.307407][T12181] tipc: Enabling of bearer rejected, failed to enable media [ 637.532312][T12178] syzkaller0: entered promiscuous mode [ 637.571293][T12178] syzkaller0: entered allmulticast mode [ 638.069343][T12194] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1947'. [ 638.902391][T12213] netlink: 'syz.5.1954': attribute type 10 has an invalid length. [ 638.910417][T12213] veth0_vlan: left promiscuous mode [ 638.916595][T12213] veth0_vlan: entered promiscuous mode [ 638.924155][T12213] team0: Device veth0_vlan failed to register rx_handler [ 639.094894][T12219] netlink: 'syz.5.1957': attribute type 10 has an invalid length. [ 639.140494][T12218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.542859][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1958'. [ 640.358157][T12233] tipc: Started in network mode [ 640.376358][T12233] tipc: Node identity 962716d4171d, cluster identity 4711 [ 640.430071][T12233] tipc: Enabled bearer , priority 0 [ 640.565467][T12239] syzkaller0: entered promiscuous mode [ 640.610195][T12239] syzkaller0: entered allmulticast mode [ 640.634333][T12231] tipc: Resetting bearer [ 641.428518][T12249] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1967'. [ 641.438376][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 641.534646][T12231] tipc: Disabling bearer [ 641.576117][ T24] tipc: Node number set to 2168067796 [ 643.175521][T12282] fuse: Bad value for 'fd' [ 643.645458][T12294] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1982'. [ 644.777631][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'. [ 645.025377][T12320] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 646.088772][T12320] bond1: entered promiscuous mode [ 646.120034][T12320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.221287][T12327] bond1: (slave bridge1): making interface the new active one [ 646.229012][T12327] bridge1: entered promiscuous mode [ 646.236774][T12327] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 646.463463][T12339] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1997'. [ 648.402544][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 650.535910][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2007'. [ 651.964732][T12400] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2016'. [ 652.150980][T12404] netlink: 'syz.6.2019': attribute type 10 has an invalid length. [ 652.159066][T12404] veth0_vlan: left promiscuous mode [ 652.165321][T12404] veth0_vlan: entered promiscuous mode [ 652.172751][T12404] team0: Device veth0_vlan failed to register rx_handler [ 652.212519][T12406] netlink: 'syz.7.2018': attribute type 1 has an invalid length. [ 652.375471][T12406] bond2: entered promiscuous mode [ 652.405352][T12415] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 652.424019][T12406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 652.530775][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 652.606111][T12411] bond2: (slave bridge1): making interface the new active one [ 652.625402][T12411] bridge1: entered promiscuous mode [ 652.650341][T12411] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 653.101555][T12432] loop6: detected capacity change from 0 to 512 [ 653.768535][T12415] bond2: entered promiscuous mode [ 653.800174][T12415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.888238][T12425] bond2: (slave bridge1): making interface the new active one [ 653.914941][T12425] bridge1: entered promiscuous mode [ 653.922565][T12425] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 653.943061][T12430] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 653.952536][T12430] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 653.962220][T12430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 654.522737][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2030'. [ 654.834244][T12452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2032'. [ 654.921194][T12457] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2034'. [ 655.841884][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2040'. [ 656.474885][T12484] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 656.481969][T12484] overlayfs: failed to set xattr on upper [ 656.487689][T12484] overlayfs: ...falling back to redirect_dir=nofollow. [ 656.494612][T12484] overlayfs: ...falling back to index=off. [ 656.500544][T12484] overlayfs: ...falling back to uuid=null. [ 656.512829][T12484] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 657.189771][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 657.500265][T12504] loop6: detected capacity change from 0 to 32768 [ 657.510172][T12504] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2052 (12504) [ 657.525789][T12504] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 657.535907][T12504] BTRFS info (device loop6): using sha256 checksum algorithm [ 657.577649][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 657.654024][T12504] BTRFS info (device loop6): rebuilding free space tree [ 657.667858][T12504] BTRFS info (device loop6): disabling free space tree [ 657.674861][T12504] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 657.684558][T12504] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 657.699656][T12504] BTRFS info (device loop6): checking UUID tree [ 657.706447][T12504] BTRFS info (device loop6): setting nodatasum [ 657.712729][T12504] BTRFS info (device loop6): setting nodatacow [ 657.718894][T12504] BTRFS info (device loop6): turning off barriers [ 657.725608][T12504] BTRFS info (device loop6): force clearing of disk cache [ 658.907623][ T8472] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 659.254685][T12545] bond0: entered promiscuous mode [ 659.288990][T12545] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 659.348770][T12545] batadv0: entered promiscuous mode [ 659.397635][T12545] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 659.463936][T12545] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 659.491994][T12545] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 659.869926][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 659.910248][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2073'. [ 660.066891][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2074'. [ 660.814577][T12592] netlink: 'syz.6.2079': attribute type 1 has an invalid length. [ 662.244047][T12592] bond2: entered promiscuous mode [ 662.263280][T12592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.315032][T12601] bond2: (slave bridge2): making interface the new active one [ 662.323238][T12601] bridge2: entered promiscuous mode [ 662.331047][T12601] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 662.940850][T12625] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 662.948882][T12625] overlayfs: failed to set xattr on upper [ 662.954791][T12625] overlayfs: ...falling back to redirect_dir=nofollow. [ 662.961745][T12625] overlayfs: ...falling back to index=off. [ 662.967567][T12625] overlayfs: ...falling back to uuid=null. [ 662.978810][T12625] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 663.262160][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 664.590824][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 664.938578][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 666.807190][T12673] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 666.814301][T12673] overlayfs: failed to set xattr on upper [ 666.820112][T12673] overlayfs: ...falling back to redirect_dir=nofollow. [ 666.826974][T12673] overlayfs: ...falling back to index=off. [ 666.832857][T12673] overlayfs: ...falling back to uuid=null. [ 666.861011][T12673] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 668.458970][T12699] netlink: 'syz.4.2110': attribute type 10 has an invalid length. [ 668.467157][T12699] veth0_vlan: left promiscuous mode [ 668.473358][T12699] veth0_vlan: entered promiscuous mode [ 668.480735][T12699] team0: Device veth0_vlan failed to register rx_handler [ 668.744664][T12711] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2114'. [ 668.762770][T12711] loop7: detected capacity change from 0 to 256 [ 668.869982][T12714] fuse: Bad value for 'fd' [ 669.646063][T12711] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 669.727519][T12711] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 669.812793][T12711] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 669.849145][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2117'. [ 669.890918][ T31] audit: type=1800 audit(1776337745.872:104): pid=12711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2114" name="file1" dev="loop7" ino=1048645 res=0 errno=0 [ 669.932304][T12722] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 670.055576][T12722] bond2: entered promiscuous mode [ 670.061342][T12722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 670.374294][T12722] bond2: (slave bridge2): making interface the new active one [ 670.406526][T12722] bridge2: entered promiscuous mode [ 670.433268][T12722] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 671.785089][T12747] netlink: 'syz.2.2126': attribute type 10 has an invalid length. [ 671.793454][T12747] veth0_vlan: left promiscuous mode [ 671.799602][T12747] veth0_vlan: entered promiscuous mode [ 671.806868][T12747] team0: Device veth0_vlan failed to register rx_handler [ 672.149281][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 674.131115][T12792] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 674.171880][T12794] netlink: 'syz.6.2144': attribute type 10 has an invalid length. [ 674.341569][T12792] bond3: entered promiscuous mode [ 674.374979][T12792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.413208][T12794] veth0_vlan: left promiscuous mode [ 674.419592][T12794] veth0_vlan: entered promiscuous mode [ 674.426935][T12794] team0: Device veth0_vlan failed to register rx_handler [ 674.485111][T12800] openvswitch: netlink: Message has 8 unknown bytes. [ 674.516166][T12800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.618198][T12798] bond3: (slave bridge2): making interface the new active one [ 674.638911][T12798] bridge2: entered promiscuous mode [ 674.665640][T12798] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 675.207256][T12818] netlink: 'syz.6.2155': attribute type 1 has an invalid length. [ 675.549778][T12818] bond3: entered promiscuous mode [ 675.561649][T12818] 8021q: adding VLAN 0 to HW filter on device bond3 [ 676.662948][T12825] bond3: (slave bridge3): making interface the new active one [ 676.706607][T12825] bridge3: entered promiscuous mode [ 676.738071][T12825] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 678.548710][T12835] netlink: 'syz.5.2160': attribute type 10 has an invalid length. [ 678.571442][T12835] veth0_vlan: left promiscuous mode [ 678.598921][T12835] veth0_vlan: entered promiscuous mode [ 678.637510][T12835] team0: Device veth0_vlan failed to register rx_handler [ 680.162774][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'. [ 680.628549][T12872] loop7: detected capacity change from 0 to 32768 [ 680.636524][T12872] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2173 (12872) [ 680.664535][T12872] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 680.674768][T12872] BTRFS info (device loop7): using sha256 checksum algorithm [ 680.711147][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2170'. [ 680.797822][T12872] BTRFS info (device loop7): rebuilding free space tree [ 680.824836][T12872] BTRFS info (device loop7): disabling free space tree [ 680.833161][T12872] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 680.842954][T12872] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 680.860496][T12872] BTRFS info (device loop7): checking UUID tree [ 680.867155][T12872] BTRFS info (device loop7): setting nodatasum [ 680.874578][T12872] BTRFS info (device loop7): setting nodatacow [ 680.880790][T12872] BTRFS info (device loop7): turning off barriers [ 680.887230][T12872] BTRFS info (device loop7): force clearing of disk cache [ 681.650960][ T8737] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 681.912538][T12904] netlink: 'syz.6.2177': attribute type 10 has an invalid length. [ 681.920695][T12904] veth0_vlan: left promiscuous mode [ 681.926855][T12904] veth0_vlan: entered promiscuous mode [ 681.934356][T12904] team0: Device veth0_vlan failed to register rx_handler [ 685.545153][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.551798][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.836755][T12933] loop7: detected capacity change from 0 to 256 [ 686.048261][T12933] FAT-fs (loop7): Directory bread(block 64) failed [ 686.096310][T12933] FAT-fs (loop7): Directory bread(block 65) failed [ 686.123449][T12933] FAT-fs (loop7): Directory bread(block 66) failed [ 686.150589][T12933] FAT-fs (loop7): Directory bread(block 67) failed [ 686.210195][T12933] FAT-fs (loop7): Directory bread(block 68) failed [ 686.237484][T12933] FAT-fs (loop7): Directory bread(block 69) failed [ 686.247818][T12933] FAT-fs (loop7): Directory bread(block 70) failed [ 686.262724][T12933] FAT-fs (loop7): Directory bread(block 71) failed [ 686.277178][T12933] FAT-fs (loop7): Directory bread(block 72) failed [ 686.305474][T12933] FAT-fs (loop7): Directory bread(block 73) failed [ 688.351369][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 690.005027][T12969] netlink: 'syz.5.2195': attribute type 10 has an invalid length. [ 690.013201][T12969] veth0_vlan: left promiscuous mode [ 690.019410][T12969] veth0_vlan: entered promiscuous mode [ 690.026656][T12969] team0: Device veth0_vlan failed to register rx_handler [ 693.304617][T12992] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 694.878027][T12995] fuse: Bad value for 'fd' [ 695.606742][T12996] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 695.613929][T12996] overlayfs: failed to set xattr on upper [ 695.619798][T12996] overlayfs: ...falling back to redirect_dir=nofollow. [ 695.626662][T12996] overlayfs: ...falling back to index=off. [ 695.632525][T12996] overlayfs: ...falling back to uuid=null. [ 695.643526][T12996] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 697.069204][T13012] loop6: detected capacity change from 0 to 512 [ 698.694782][T13028] fuse: Bad value for 'fd' [ 701.822376][T13051] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2218'. [ 702.727293][T13051] loop6: detected capacity change from 0 to 256 [ 702.848330][T13051] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 702.883404][T13051] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 702.917047][T13051] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 702.954828][T13058] overlayfs: failed to resolve './file1/file0': -20 [ 702.970196][T13059] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 702.977217][T13059] overlayfs: failed to set xattr on upper [ 702.983056][T13059] overlayfs: ...falling back to redirect_dir=nofollow. [ 702.990127][T13059] overlayfs: ...falling back to index=off. [ 702.996702][T13059] overlayfs: ...falling back to uuid=null. [ 703.021620][T13062] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 703.035267][ T31] audit: type=1800 audit(1776337779.032:105): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2218" name="file1" dev="loop6" ino=1048649 res=0 errno=0 [ 704.126346][T13075] fuse: Bad value for 'fd' [ 708.323743][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 708.335774][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 708.348939][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 708.357831][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 708.366187][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 709.033325][T13102] chnl_net:caif_netlink_parms(): no params data found [ 710.470534][ T5841] Bluetooth: hci5: command tx timeout [ 710.644334][T13102] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.662659][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.677868][T13102] bridge_slave_0: entered allmulticast mode [ 710.710272][T13102] bridge_slave_0: entered promiscuous mode [ 710.754187][T13102] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.778251][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.802480][T13102] bridge_slave_1: entered allmulticast mode [ 710.831750][T13102] bridge_slave_1: entered promiscuous mode [ 710.998016][T13102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.137623][T13102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.569556][ T5841] Bluetooth: hci5: command tx timeout [ 713.044254][T13102] team0: Port device team_slave_0 added [ 713.063421][T13102] team0: Port device team_slave_1 added [ 713.399825][T13102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.406817][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.433447][T13102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.446900][T13102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.454144][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.480513][T13102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.312995][T13102] hsr_slave_0: entered promiscuous mode [ 714.323859][T13102] hsr_slave_1: entered promiscuous mode [ 714.330320][T13102] debugfs: 'hsr0' already exists in 'hsr' [ 714.336064][T13102] Cannot create hsr debugfs directory [ 714.629963][ T5841] Bluetooth: hci5: command tx timeout [ 715.019124][T13178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2250'. [ 715.112709][T13178] overlayfs: failed to resolve './file1/file0': -2 [ 716.699683][ T5841] Bluetooth: hci5: command tx timeout [ 720.753601][T13102] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 721.012326][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.732093][T13230] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2263'. [ 722.820428][T13230] loop6: detected capacity change from 0 to 256 [ 722.846806][T13102] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 722.852282][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 722.898019][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.919629][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 722.961387][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 722.975985][T13102] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 723.040695][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 723.045473][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.052450][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 723.052641][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 723.052779][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 723.092358][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 723.131420][ T31] audit: type=1800 audit(1776337799.022:106): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2263" name="file1" dev="loop6" ino=1048651 res=0 errno=0 [ 723.175788][T13229] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 723.238010][T13102] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 723.250784][T13230] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 723.278753][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.625730][T13250] fuse: Bad value for 'fd' [ 724.774574][T13102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.082210][T13102] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.097402][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.104667][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.880597][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.887852][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.620735][T13304] fuse: Bad value for 'fd' [ 731.581972][T13102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.704360][T13315] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2287'. [ 732.572480][T13315] loop6: detected capacity change from 0 to 256 [ 733.511241][T13315] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 733.567170][T13315] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 733.604597][T13315] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 733.654911][ T31] audit: type=1800 audit(1776337809.652:107): pid=13315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2287" name="file1" dev="loop6" ino=1048652 res=0 errno=0 [ 733.698666][T13315] overlayfs: failed to resolve './file1/file0': -20 [ 736.233305][T13342] loop6: detected capacity change from 0 to 131072 [ 736.567354][T13342] F2FS-fs (loop6): Test dummy encryption mode enabled [ 736.605198][T13342] F2FS-fs (loop6): invalid crc value [ 737.624189][T13342] F2FS-fs (loop6): access invalid blkaddr:0 [ 737.630533][T13342] CPU: 0 UID: 0 PID: 13342 Comm: syz.6.2294 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.630590][T13342] Tainted: [L]=SOFTLOCKUP [ 737.630603][T13342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 737.630626][T13342] Call Trace: [ 737.630638][T13342] [ 737.630651][T13342] dump_stack_lvl+0x100/0x190 [ 737.630723][T13342] __f2fs_is_valid_blkaddr+0xa5b/0x1340 [ 737.630776][T13342] ? sanity_check_extent_cache+0x23a/0x6e0 [ 737.630827][T13342] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 737.630877][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.630930][T13342] sanity_check_extent_cache+0x23a/0x6e0 [ 737.630995][T13342] f2fs_iget+0x2545/0x6930 [ 737.631033][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631078][T13342] ? do_raw_spin_lock+0x128/0x260 [ 737.631146][T13342] f2fs_fill_super+0x55a8/0xad90 [ 737.631218][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631260][T13342] ? do_raw_spin_lock+0x128/0x260 [ 737.631299][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631344][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631386][T13342] ? set_blocksize+0x1cf/0x460 [ 737.631424][T13342] ? setup_bdev_super+0x337/0x730 [ 737.631482][T13342] ? __pfx_f2fs_fill_super+0x10/0x10 [ 737.631517][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631560][T13342] ? sb_set_blocksize+0x1fe/0x290 [ 737.631600][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631643][T13342] ? setup_bdev_super+0x425/0x730 [ 737.631703][T13342] get_tree_bdev_flags+0x38c/0x620 [ 737.631739][T13342] ? __pfx_f2fs_fill_super+0x10/0x10 [ 737.631776][T13342] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 737.631814][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631863][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631905][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.631947][T13342] ? security_capable+0x80/0x260 [ 737.632018][T13342] vfs_get_tree+0x92/0x320 [ 737.632069][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.632114][T13342] path_mount+0x7d0/0x23d0 [ 737.632172][T13342] ? __pfx_path_mount+0x10/0x10 [ 737.632220][T13342] ? lockdep_hardirqs_on+0x78/0x100 [ 737.632264][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.632313][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.632356][T13342] ? kmem_cache_free+0x127/0x6c0 [ 737.632425][T13342] ? __x64_sys_mount+0x293/0x310 [ 737.632473][T13342] __x64_sys_mount+0x293/0x310 [ 737.632526][T13342] ? __pfx___x64_sys_mount+0x10/0x10 [ 737.632581][T13342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 737.632623][T13342] ? rcu_is_watching+0x12/0xc0 [ 737.632673][T13342] do_syscall_64+0x10b/0xf80 [ 737.632715][T13342] ? irqentry_exit+0x117/0x790 [ 737.632763][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.632799][T13342] RIP: 0033:0x7f824859da8a [ 737.632827][T13342] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.632862][T13342] RSP: 002b:00007f824951ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 737.632896][T13342] RAX: ffffffffffffffda RBX: 00007f824951eee0 RCX: 00007f824859da8a [ 737.632919][T13342] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007f824951eea0 [ 737.632942][T13342] RBP: 0000200000000100 R08: 00007f824951eee0 R09: 0000000000000080 [ 737.632970][T13342] R10: 0000000000000080 R11: 0000000000000246 R12: 0000200000010600 [ 737.632992][T13342] R13: 00007f824951eea0 R14: 00000000000105f2 R15: 0000200000000640 [ 737.633037][T13342] [ 737.633875][T13342] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 737.986574][T13342] F2FS-fs (loop6): Failed to read root inode [ 740.242398][T13102] veth0_vlan: entered promiscuous mode [ 740.342200][T13102] veth1_vlan: entered promiscuous mode [ 740.502689][T13102] veth0_macvtap: entered promiscuous mode [ 740.538074][T13102] veth1_macvtap: entered promiscuous mode [ 740.607795][T13102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.670767][T13102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.741606][ T7031] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.790473][ T7031] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.816670][ T7031] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.839098][ T7031] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.143758][T13415] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2317'. [ 743.265815][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.296362][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.299101][T13415] loop6: detected capacity change from 0 to 256 [ 743.359805][T13415] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 743.423398][T13415] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 743.458945][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.484574][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.499320][T13415] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 743.565778][ T31] audit: type=1800 audit(1776337819.562:108): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2317" name="file1" dev="loop6" ino=1048654 res=0 errno=0 [ 747.180175][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.188707][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.616071][T13458] fuse: Bad value for 'fd' [ 751.413590][T13498] fuse: Bad value for 'fd' [ 754.310954][T13535] fuse: Bad value for 'fd' [ 756.474836][T13540] fuse: Bad value for 'fd' [ 756.840968][T13542] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2360'. [ 757.828189][T13551] loop6: detected capacity change from 0 to 512 [ 758.480696][T13542] overlayfs: failed to resolve './file1/file0': -2 [ 758.528097][T13549] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 758.537611][T13549] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 758.547340][T13549] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 759.896360][T13581] loop6: detected capacity change from 0 to 512 [ 760.803747][T13584] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 762.370133][T13602] fuse: Bad value for 'fd' [ 762.657125][T13605] loop8: detected capacity change from 0 to 512 [ 762.967351][T13598] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 763.069457][T13584] overlayfs: failed to set xattr on upper [ 763.110763][T13584] overlayfs: ...falling back to redirect_dir=nofollow. [ 763.178107][T13584] overlayfs: ...falling back to index=off. [ 763.208988][T13584] overlayfs: ...falling back to uuid=null. [ 765.032676][T13620] loop8: detected capacity change from 0 to 512 [ 765.708613][T13625] loop6: detected capacity change from 0 to 128 [ 765.830422][T13625] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 765.937084][T13625] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.273729][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2388'. [ 766.310202][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.422406][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 766.455179][T13641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.097506][ T8472] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 771.161533][T13674] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2398'. [ 771.243073][T13674] overlayfs: failed to resolve './file1/file0': -2 [ 771.702540][T13695] fuse: Bad value for 'fd' [ 772.493415][T13692] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2407'. [ 772.574415][T13692] loop6: detected capacity change from 0 to 256 [ 772.742363][T13703] fuse: Bad value for 'fd' [ 773.601748][T13692] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 773.623361][T13692] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 773.681433][T13692] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 773.766121][ T31] audit: type=1800 audit(1776337849.762:109): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2407" name="file1" dev="loop6" ino=1048661 res=0 errno=0 [ 778.251899][T13751] loop6: detected capacity change from 0 to 512 [ 779.469962][T13770] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 779.479555][T13770] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 779.489123][T13770] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 780.665895][T13786] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 780.679693][T13786] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 780.689856][T13786] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 781.217570][T13795] loop8: detected capacity change from 0 to 512 [ 781.726452][T13801] openvswitch: netlink: Duplicate or invalid key (type 0). [ 781.749159][T13801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.113973][T13815] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2447'. [ 782.136956][T13813] overlayfs: failed to resolve './file1/file0': -2 [ 782.171814][T13815] overlayfs: failed to resolve './file1/file0': -2 [ 783.778808][T13832] overlayfs: failed to resolve './file1/file0': -2 [ 783.983441][T13839] fuse: Bad value for 'fd' [ 785.387777][T13855] loop8: detected capacity change from 0 to 512 [ 786.640718][T13878] fuse: Bad value for 'fd' [ 787.377110][T13880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2468'. [ 787.480027][T13880] overlayfs: failed to resolve './file1/file0': -2 [ 788.570424][T13918] overlayfs: failed to resolve './file1/file0': -2 [ 788.580682][T13922] netlink: 'syz.6.2486': attribute type 10 has an invalid length. [ 788.615018][T13922] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 788.644280][T13920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.157267][T13938] netlink: 'syz.6.2489': attribute type 1 has an invalid length. [ 790.337214][T13938] bond4: entered promiscuous mode [ 790.385526][T13938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 790.578512][T13954] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 790.585597][T13954] overlayfs: failed to set xattr on upper [ 790.591551][T13954] overlayfs: ...falling back to redirect_dir=nofollow. [ 790.598404][T13954] overlayfs: ...falling back to index=off. [ 790.604256][T13954] overlayfs: ...falling back to uuid=null. [ 790.639046][T13955] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 791.223170][T13950] bond4: (slave bridge4): making interface the new active one [ 791.243455][T13950] bridge4: entered promiscuous mode [ 791.260953][T13950] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 791.608673][T13969] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2499'. [ 791.637911][T13972] netlink: 'syz.4.2500': attribute type 10 has an invalid length. [ 791.705074][T13969] overlayfs: failed to resolve './file1/file0': -2 [ 791.740481][T13976] netlink: 'syz.6.2502': attribute type 1 has an invalid length. [ 791.816532][T13972] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 791.865573][T13971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.934802][T13984] netlink: 'syz.7.2504': attribute type 10 has an invalid length. [ 791.951651][T13976] bond5: entered promiscuous mode [ 791.957352][T13976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 792.121476][T13982] bond5: (slave bridge5): making interface the new active one [ 792.138275][T13982] bridge5: entered promiscuous mode [ 792.159241][T13982] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 792.243048][T13984] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 793.064395][T13983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.891018][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 794.924015][T14036] openvswitch: netlink: Message has 24 unknown bytes. [ 795.061853][T14038] loop6: detected capacity change from 0 to 128 [ 795.955858][T14038] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 795.975386][T14038] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 796.239831][T14050] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2529'. [ 796.359899][T14050] overlayfs: failed to resolve './file1/file0': -2 [ 796.403415][ T8472] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 796.532708][T14060] netlink: 'syz.7.2533': attribute type 10 has an invalid length. [ 796.542094][T14061] loop6: detected capacity change from 0 to 256 [ 796.654172][T14061] FAT-fs (loop6): Directory bread(block 64) failed [ 796.655350][T14058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.679171][T14065] netlink: 'syz.8.2535': attribute type 1 has an invalid length. [ 796.682864][T14061] FAT-fs (loop6): Directory bread(block 65) failed [ 796.731432][T14061] FAT-fs (loop6): Directory bread(block 66) failed [ 796.752741][T14061] FAT-fs (loop6): Directory bread(block 67) failed [ 796.771768][T14061] FAT-fs (loop6): Directory bread(block 68) failed [ 796.785326][T14061] FAT-fs (loop6): Directory bread(block 69) failed [ 796.792236][T14061] FAT-fs (loop6): Directory bread(block 70) failed [ 796.799148][T14061] FAT-fs (loop6): Directory bread(block 71) failed [ 796.805715][T14065] bond1: entered promiscuous mode [ 796.808266][T14065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.812388][T14061] FAT-fs (loop6): Directory bread(block 72) failed [ 796.824755][T14061] FAT-fs (loop6): Directory bread(block 73) failed [ 796.956770][T14076] bond1: (slave bridge1): making interface the new active one [ 796.968214][T14076] bridge1: entered promiscuous mode [ 796.983387][T14076] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 798.408311][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2545'. [ 800.085237][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2544'. [ 800.634729][T14110] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 800.707363][T14110] bond3: entered promiscuous mode [ 800.719086][T14110] 8021q: adding VLAN 0 to HW filter on device bond3 [ 800.931022][T14110] bond3: (slave bridge3): making interface the new active one [ 800.953490][T14110] bridge3: entered promiscuous mode [ 800.960849][T14110] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 802.305939][T14131] netlink: 'syz.2.2556': attribute type 1 has an invalid length. [ 803.151525][T14131] bond4: entered promiscuous mode [ 803.169994][T14131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 808.294278][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.310011][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.601492][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2574'. [ 809.741084][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2573'. [ 810.059518][T14202] loop8: detected capacity change from 0 to 128 [ 810.169033][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2577'. [ 810.373153][T14207] netlink: 'syz.7.2580': attribute type 10 has an invalid length. [ 810.382774][T14206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.608203][T14212] loop8: detected capacity change from 0 to 256 [ 811.614141][T14212] FAT-fs (loop8): Directory bread(block 64) failed [ 811.667655][T14212] FAT-fs (loop8): Directory bread(block 65) failed [ 811.700661][T14212] FAT-fs (loop8): Directory bread(block 66) failed [ 811.707340][T14212] FAT-fs (loop8): Directory bread(block 67) failed [ 811.718273][T14212] FAT-fs (loop8): Directory bread(block 68) failed [ 811.724876][T14212] FAT-fs (loop8): Directory bread(block 69) failed [ 811.731558][T14212] FAT-fs (loop8): Directory bread(block 70) failed [ 811.738833][T14212] FAT-fs (loop8): Directory bread(block 71) failed [ 811.746012][T14212] FAT-fs (loop8): Directory bread(block 72) failed [ 811.752603][T14212] FAT-fs (loop8): Directory bread(block 73) failed [ 813.600434][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2585'. [ 813.955893][T14230] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2587'. [ 813.969296][T14228] netlink: 'syz.8.2586': attribute type 12 has an invalid length. [ 814.010054][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2586'. [ 814.118378][T14233] netlink: 'syz.2.2588': attribute type 10 has an invalid length. [ 814.157915][T14231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.248036][T14236] loop8: detected capacity change from 0 to 256 [ 814.306896][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2592'. [ 814.348834][T14240] netlink: 'syz.5.2591': attribute type 1 has an invalid length. [ 814.401552][T14236] FAT-fs (loop8): Directory bread(block 64) failed [ 814.435292][T14236] FAT-fs (loop8): Directory bread(block 65) failed [ 814.449467][T14236] FAT-fs (loop8): Directory bread(block 66) failed [ 814.471213][T14236] FAT-fs (loop8): Directory bread(block 67) failed [ 814.478637][T14236] FAT-fs (loop8): Directory bread(block 68) failed [ 814.491336][T14236] FAT-fs (loop8): Directory bread(block 69) failed [ 814.498379][T14236] FAT-fs (loop8): Directory bread(block 70) failed [ 814.506896][T14236] FAT-fs (loop8): Directory bread(block 71) failed [ 814.513660][T14236] FAT-fs (loop8): Directory bread(block 72) failed [ 814.520728][T14236] FAT-fs (loop8): Directory bread(block 73) failed [ 814.545214][T14240] bond1: entered promiscuous mode [ 814.559964][T14240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.260875][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2598'. [ 816.414818][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2597'. [ 816.578411][T14271] netlink: 'syz.2.2602': attribute type 10 has an invalid length. [ 816.668213][T14264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.835148][T14279] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2605'. [ 816.846030][T14280] loop8: detected capacity change from 0 to 256 [ 816.848045][ T5841] Bluetooth: hci3: unexpected cc 0x1009 length: 9 > 7 [ 816.860990][ T5841] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 816.962029][T14280] FAT-fs (loop8): Directory bread(block 64) failed [ 817.002894][T14280] FAT-fs (loop8): Directory bread(block 65) failed [ 817.039764][T14280] FAT-fs (loop8): Directory bread(block 66) failed [ 817.058032][T14280] FAT-fs (loop8): Directory bread(block 67) failed [ 817.086548][T14280] FAT-fs (loop8): Directory bread(block 68) failed [ 817.115419][T14280] FAT-fs (loop8): Directory bread(block 69) failed [ 817.133404][T14280] FAT-fs (loop8): Directory bread(block 70) failed [ 817.147623][T14280] FAT-fs (loop8): Directory bread(block 71) failed [ 817.156382][T14280] FAT-fs (loop8): Directory bread(block 72) failed [ 817.540828][T14280] FAT-fs (loop8): Directory bread(block 73) failed [ 817.580640][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2610'. [ 819.627369][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2621'. [ 820.365777][T14349] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2631'. [ 820.386082][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'. [ 820.489125][T14354] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2633'. [ 820.944114][ T5841] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 820.954071][ T5841] Bluetooth: hci3: Injecting HCI hardware error event [ 820.963312][ T5841] Bluetooth: hci3: hardware error 0x00 [ 821.928918][T14375] netlink: 'syz.8.2639': attribute type 1 has an invalid length. [ 822.062400][T14375] bond2: entered promiscuous mode [ 822.069181][T14375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 822.106322][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2636'. [ 822.141076][T14379] ipvlan2: entered allmulticast mode [ 822.166672][T14379] bond2: entered allmulticast mode [ 822.275878][T14384] bond2: (slave bridge2): making interface the new active one [ 822.314688][T14384] bridge2: entered promiscuous mode [ 822.336145][T14384] bridge2: entered allmulticast mode [ 822.364198][T14384] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 822.724025][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 822.754799][T14400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.341829][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 824.729691][T14413] netlink: 'syz.4.2649': attribute type 1 has an invalid length. [ 824.832715][T14420] netlink: 'syz.7.2652': attribute type 1 has an invalid length. [ 824.834472][T14413] bond4: entered promiscuous mode [ 824.846743][T14413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 825.129206][T14420] bond3: entered promiscuous mode [ 825.149922][T14420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 825.210267][T14426] ipvlan2: entered allmulticast mode [ 825.240499][T14426] bond3: entered allmulticast mode [ 825.343554][T14428] bond3: (slave bridge2): making interface the new active one [ 825.364666][T14428] bridge2: entered promiscuous mode [ 825.379780][T14428] bridge2: entered allmulticast mode [ 825.448591][T14428] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 825.749832][T14435] netlink: 'syz.6.2655': attribute type 1 has an invalid length. [ 827.887161][T14435] bond6: entered promiscuous mode [ 828.002655][T14435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 828.024011][T14449] fuse: Bad value for 'fd' [ 828.107876][T14447] ipvlan2: entered allmulticast mode [ 828.134646][T14447] bond6: entered allmulticast mode [ 828.317766][T14448] bond6: (slave bridge6): making interface the new active one [ 828.326883][T14448] bridge6: entered promiscuous mode [ 828.346157][T14448] bridge6: entered allmulticast mode [ 828.384051][T14448] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 828.413047][T14449] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 828.422536][T14449] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 828.432530][T14449] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 829.715929][T14483] netlink: 'syz.6.2670': attribute type 1 has an invalid length. [ 829.779711][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 829.845289][T14483] bond7: entered promiscuous mode [ 829.852504][T14483] 8021q: adding VLAN 0 to HW filter on device bond7 [ 830.063837][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2673'. [ 830.600325][T14519] netlink: 'syz.6.2679': attribute type 1 has an invalid length. [ 830.646645][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 831.521761][T14519] bond8: entered promiscuous mode [ 831.532316][T14519] 8021q: adding VLAN 0 to HW filter on device bond8 [ 831.594489][T14532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2682'. [ 833.023241][T14529] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.031218][T14529] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.069595][T14548] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2686'. [ 833.202819][T14529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.219819][T14529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.288585][ T6137] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.300924][ T6137] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.310105][ T6137] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.596151][ T6137] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.989824][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2702'. [ 835.012500][T14591] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 835.245648][ T6137] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.276114][ T6137] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.290919][T14605] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2708'. [ 835.307230][ T6137] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.329740][ T6137] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.573612][T14613] fuse: Bad value for 'fd' [ 836.683862][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2719'. [ 836.719724][T14633] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 836.799813][T14640] netlink: 'syz.4.2721': attribute type 1 has an invalid length. [ 837.100281][T14644] fuse: Bad value for 'fd' [ 838.064064][T14650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2725'. [ 838.170825][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2726'. [ 840.240552][T14668] fuse: Bad value for 'fd' [ 841.157196][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2731'. [ 842.015291][T14698] netlink: 'syz.8.2741': attribute type 1 has an invalid length. [ 842.236229][T14704] lo: Caught tx_queue_len zero misconfig [ 843.409049][T14722] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2750'. [ 844.153146][T14742] fuse: Bad value for 'fd' [ 849.245522][T14806] fuse: Bad value for 'fd' [ 859.883744][T14890] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 859.893229][T14890] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 859.903570][T14890] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 861.388981][T14917] fuse: Bad value for 'fd' [ 861.889003][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'. [ 861.922213][T14933] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 862.905797][T14939] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2826'. [ 864.700511][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2841'. [ 864.751911][T14973] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 865.721055][T14988] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2845'. [ 866.153530][T15003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2855'. [ 867.249969][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2860'. [ 867.269580][T15017] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 867.874728][ T5838] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 868.097030][T15049] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2873'. [ 868.327807][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2877'. [ 868.348726][T15058] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 868.661780][T15070] syz_tun: entered allmulticast mode [ 868.677627][T15069] syz_tun: left allmulticast mode [ 868.754096][ T5838] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 868.963499][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2887'. [ 869.077304][T15084] fuse: Bad value for 'fd' [ 869.531018][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.554946][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.513742][T15110] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 871.537921][T15110] overlayfs: failed to set xattr on upper [ 871.588339][T15115] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 871.630958][T15110] overlayfs: ...falling back to redirect_dir=nofollow. [ 871.659877][T15110] overlayfs: ...falling back to index=off. [ 871.734543][T15110] overlayfs: ...falling back to uuid=null. [ 871.902532][ T5838] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 871.913528][ T5838] Bluetooth: hci6: Injecting HCI hardware error event [ 871.979575][ T5841] Bluetooth: hci6: hardware error 0x00 [ 872.779413][ T5838] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 872.790169][ T5838] Bluetooth: hci5: Injecting HCI hardware error event [ 872.798990][ T5838] Bluetooth: hci5: hardware error 0x00 [ 872.932724][T15134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2905'. [ 874.779492][ T5841] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 874.941878][ T5838] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 875.408352][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2921'. [ 876.905310][T15194] fuse: Bad value for 'fd' [ 879.048241][T15219] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 879.088241][T15219] overlayfs: failed to set xattr on upper [ 879.118060][T15219] overlayfs: ...falling back to redirect_dir=nofollow. [ 879.125735][T15219] overlayfs: ...falling back to index=off. [ 879.132450][T15219] overlayfs: ...falling back to uuid=null. [ 879.197167][T15219] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 884.452757][T15292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2963'. [ 891.038385][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2987'. [ 891.070655][T15369] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 892.809717][T15381] fuse: Bad value for 'fd' [ 894.132276][T10055] IPVS: starting estimator thread 0... [ 894.139807][T15391] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 895.380006][T15392] IPVS: using max 22 ests per chain, 52800 per kthread [ 895.550029][T15382] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 895.559481][T15382] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 895.569045][T15382] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 895.670546][T15396] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 895.679973][T15396] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 895.689955][T15396] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 896.011460][T15403] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 896.018451][T15403] overlayfs: failed to set xattr on upper [ 896.024207][T15403] overlayfs: ...falling back to redirect_dir=nofollow. [ 896.031084][T15403] overlayfs: ...falling back to index=off. [ 896.036874][T15403] overlayfs: ...falling back to uuid=null. [ 896.053597][T15403] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 897.798138][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3002'. [ 897.884322][T15423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.748563][T15435] netlink: 'syz.8.3007': attribute type 1 has an invalid length. [ 899.093748][T15435] bond3: entered promiscuous mode [ 899.133750][T15435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 899.279654][T15447] ipvlan3: entered allmulticast mode [ 899.345968][T15447] bond3: entered allmulticast mode [ 899.461028][T15440] bridge3: entered promiscuous mode [ 899.521260][T15440] bridge3: entered allmulticast mode [ 899.540133][T15440] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 901.428563][T15475] fuse: Bad value for 'fd' [ 902.970310][T15487] netlink: 'syz.7.3023': attribute type 1 has an invalid length. [ 903.930641][T15487] bond4: entered promiscuous mode [ 903.936410][T15487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 903.945903][T15494] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 903.956055][T15494] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 903.965747][T15494] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 904.006740][T15495] ipvlan3: entered allmulticast mode [ 904.032448][T15495] bond4: entered allmulticast mode [ 904.289379][T15507] fuse: Bad value for 'fd' [ 904.864624][T15498] bridge3: entered promiscuous mode [ 904.961949][T15498] bridge3: entered allmulticast mode [ 904.968494][T15498] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 905.001658][T15507] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 905.011110][T15507] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 905.020821][T15507] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 905.534942][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3036'. [ 908.793095][T15591] fuse: Bad value for 'fd' [ 909.976041][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3057'. [ 910.787614][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 910.895460][T15630] fuse: Bad value for 'fd' [ 912.273542][T15650] fuse: Bad value for 'fd' [ 913.215645][T15656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.417785][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 913.445476][T15664] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 914.906467][T15670] fuse: Bad value for 'fd' [ 915.631858][T15677] fuse: Bad value for 'fd' [ 916.304824][T15677] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 916.314308][T15677] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 916.323977][T15677] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 916.957133][T15702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.635229][ T31] audit: type=1800 audit(1776337994.632:110): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3098" name="file1" dev="tmpfs" ino=1722 res=0 errno=0 [ 919.025511][T15737] fuse: Bad value for 'fd' [ 922.477940][T15781] fuse: Bad value for 'fd' [ 924.724072][ T31] audit: type=1800 audit(1776338000.722:111): pid=15790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3125" name="file1" dev="tmpfs" ino=1749 res=0 errno=0 [ 926.178692][T15823] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3136'. [ 930.711799][T15853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.915931][T15861] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3150'. [ 930.945854][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.952462][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.236843][T15870] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3154'. [ 932.607540][T15897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.825198][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3165'. [ 935.971600][T15934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.156299][T15938] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3179'. [ 939.128472][T15974] openvswitch: netlink: Missing valid actions attribute. [ 939.154244][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.872552][T15993] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3200'. [ 941.538037][T16009] openvswitch: netlink: Missing valid actions attribute. [ 941.649528][T16009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.423270][T16055] openvswitch: netlink: Missing valid actions attribute. [ 947.451215][T16055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.463860][ T13] bridge_slave_1: left allmulticast mode [ 950.481882][ T13] bridge_slave_1: left promiscuous mode [ 950.495368][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.665179][T16088] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3235'. [ 950.774236][ T13] bridge_slave_0: left allmulticast mode [ 950.779997][ T13] bridge_slave_0: left promiscuous mode [ 950.785882][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.247846][ T13] erspan0 (unregistering): left promiscuous mode [ 953.311495][ T13] gretap0 (unregistering): left promiscuous mode [ 953.631553][ T13] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 953.656840][ T13] bridge1 (unregistering): left promiscuous mode [ 953.670552][ T13] bridge1 (unregistering): left allmulticast mode [ 953.758522][ T13] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 953.778707][ T13] bridge2 (unregistering): left promiscuous mode [ 953.864650][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.913007][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.943962][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 953.979329][ T13] bond0 (unregistering): Released all slaves [ 954.015684][ T13] bond1 (unregistering): Released all slaves [ 954.057867][ T13] bond2 (unregistering): Released all slaves [ 954.582171][T16136] fuse: Bad value for 'fd' [ 955.633045][T16142] netlink: 'syz.8.3250': attribute type 1 has an invalid length. [ 955.947123][T16142] bond4: entered promiscuous mode [ 955.958117][T16142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 956.124407][T16154] bond4: (slave bridge4): making interface the new active one [ 956.176375][T16154] bridge4: entered promiscuous mode [ 956.215065][T16154] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 959.517093][T16197] fuse: Bad value for 'fd' [ 960.023701][T16197] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 960.033221][T16197] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 960.042870][T16197] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 960.512826][T16208] overlayfs: failed to clone upperpath [ 960.532131][T16208] overlayfs: failed to clone upperpath [ 960.944961][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 961.230433][T16220] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3272'. [ 961.609411][ T13] hsr_slave_0: left promiscuous mode [ 961.660651][ T13] hsr_slave_1: left promiscuous mode [ 961.680424][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.550551][ T13] team0 (unregistering): Port device team_slave_1 removed [ 964.699006][ T13] team0 (unregistering): Port device team_slave_0 removed [ 965.737748][T16280] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3289'. [ 967.270013][ T5479] 8021q: adding VLAN 0 to HW filter on device eth10 [ 968.059743][T16297] fuse: Bad value for 'fd' [ 968.296363][ T13] IPVS: stop unused estimator thread 0... [ 970.729148][T16320] netlink: 'syz.7.3303': attribute type 1 has an invalid length. [ 971.446658][T16320] bond5: entered promiscuous mode [ 971.452166][T16320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 972.809522][T16320] bond5: (slave bridge4): making interface the new active one [ 972.899682][T16320] bridge4: entered promiscuous mode [ 973.311400][T16320] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 973.835376][T16347] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3307'. [ 974.154808][ T5479] 8021q: adding VLAN 0 to HW filter on device eth11 [ 974.683337][T16360] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 974.690398][T16360] overlayfs: failed to set xattr on upper [ 974.696122][T16360] overlayfs: ...falling back to redirect_dir=nofollow. [ 974.703041][T16360] overlayfs: ...falling back to index=off. [ 974.708845][T16360] overlayfs: ...falling back to uuid=null. [ 974.714732][T16360] overlayfs: conflicting lowerdir path [ 976.003388][T16382] netlink: 'syz.5.3317': attribute type 1 has an invalid length. [ 977.093176][T16382] bond2: entered promiscuous mode [ 977.136314][T16382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 978.194416][T16390] bond2: (slave bridge3): making interface the new active one [ 978.498360][T16390] bridge3: entered promiscuous mode [ 978.551401][T16390] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 978.774500][T16405] netlink: 'syz.8.3320': attribute type 1 has an invalid length. [ 979.016380][T16405] bond5: entered promiscuous mode [ 979.038392][T16405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 979.153403][T16413] bond5: (slave bridge5): making interface the new active one [ 979.190843][T16413] bridge5: entered promiscuous mode [ 979.216028][T16413] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 979.399530][ T5479] 8021q: adding VLAN 0 to HW filter on device eth12 [ 981.480694][T16425] lo: Caught tx_queue_len zero misconfig [ 983.966652][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3329'. [ 989.154032][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 989.169793][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 989.179151][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 989.196276][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 989.215336][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 990.800452][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 990.819400][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 991.784132][T14373] Bluetooth: hci1: command tx timeout [ 991.795539][T14373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 991.807522][T14373] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 991.816842][T14373] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 992.402459][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.412435][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.399516][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3361'. [ 993.513980][T16503] chnl_net:caif_netlink_parms(): no params data found [ 993.835834][T16553] fuse: Bad value for 'fd' [ 993.890512][ T5838] Bluetooth: hci1: command tx timeout [ 994.380192][ T5838] Bluetooth: hci7: command tx timeout [ 994.640063][T16553] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 994.649509][T16553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 994.659113][T16553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 995.273831][T16578] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3368'. [ 995.421340][T16503] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.461899][T16503] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.492949][T16503] bridge_slave_0: entered allmulticast mode [ 995.536022][T16503] bridge_slave_0: entered promiscuous mode [ 995.611573][T16513] chnl_net:caif_netlink_parms(): no params data found [ 995.656437][T16503] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.687538][T16503] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.725100][T16503] bridge_slave_1: entered allmulticast mode [ 995.760394][T16503] bridge_slave_1: entered promiscuous mode [ 995.979385][ T5838] Bluetooth: hci1: command tx timeout [ 996.299221][T16503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.382066][T16503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.470024][ T5838] Bluetooth: hci7: command tx timeout [ 996.562325][T16603] fuse: Bad value for 'fd' [ 997.535670][T16603] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 997.545362][T16603] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 997.550391][T16503] team0: Port device team_slave_0 added [ 997.555096][T16603] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 997.620799][T16503] team0: Port device team_slave_1 added [ 997.763420][T16513] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.780008][T16513] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.796250][T16513] bridge_slave_0: entered allmulticast mode [ 997.814808][T16513] bridge_slave_0: entered promiscuous mode [ 997.932118][T16611] fuse: Bad value for 'fd' [ 998.074361][ T5838] Bluetooth: hci1: command tx timeout [ 998.547359][ T5838] Bluetooth: hci7: command tx timeout [ 999.013263][T16513] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.043216][T16513] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.072292][T16513] bridge_slave_1: entered allmulticast mode [ 999.107745][T16513] bridge_slave_1: entered promiscuous mode [ 999.136750][T16611] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 999.149554][T16611] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 999.160916][T16611] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 999.279957][T16503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.286974][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.313535][T16503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.327091][T16503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.334456][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.361011][T16503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.458463][T16513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.592186][T16513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.957054][T16503] hsr_slave_0: entered promiscuous mode [ 999.983470][T16503] hsr_slave_1: entered promiscuous mode [ 1000.010554][T16503] debugfs: 'hsr0' already exists in 'hsr' [ 1000.020979][T16503] Cannot create hsr debugfs directory [ 1000.039492][T16513] team0: Port device team_slave_0 added [ 1000.437687][T16513] team0: Port device team_slave_1 added [ 1000.621255][ T5838] Bluetooth: hci7: command tx timeout [ 1000.655563][T16513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.663091][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.698599][T16513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.750748][T16513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.765202][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.837175][T16513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.436694][T16513] hsr_slave_0: entered promiscuous mode [ 1001.443804][T16513] hsr_slave_1: entered promiscuous mode [ 1001.465985][T16513] debugfs: 'hsr0' already exists in 'hsr' [ 1001.745814][T16513] Cannot create hsr debugfs directory [ 1002.766318][ T6135] bridge_slave_1: left allmulticast mode [ 1002.781905][ T6135] bridge_slave_1: left promiscuous mode [ 1002.797324][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.836654][ T6135] bridge_slave_0: left allmulticast mode [ 1002.861292][ T6135] bridge_slave_0: left promiscuous mode [ 1002.883630][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.863498][ T6135] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1003.893673][ T6135] bridge1 (unregistering): left promiscuous mode [ 1003.995276][ T6135] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1004.023932][ T6135] bridge2 (unregistering): left promiscuous mode [ 1004.047721][ T6135] bridge2 (unregistering): left allmulticast mode [ 1004.191127][ T6135] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1004.232069][ T6135] bridge3 (unregistering): left promiscuous mode [ 1004.255095][ T6135] bridge3 (unregistering): left allmulticast mode [ 1004.329775][ T6135] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 1004.349414][ T6135] bridge4 (unregistering): left promiscuous mode [ 1004.449939][ T6135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.471327][ T6135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.501623][ T6135] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1004.742649][ T6135] bond0 (unregistering): Released all slaves [ 1004.759603][ T6135] bond1 (unregistering): Released all slaves [ 1004.781933][ T6135] bond2 (unregistering): Released all slaves [ 1006.809761][ T6135] bond3 (unregistering): Released all slaves [ 1007.845379][ T6135] bond4 (unregistering): Released all slaves [ 1008.118995][T16701] overlayfs: failed to resolve './bus': -2 [ 1008.337431][ T6135] bond5 (unregistering): Released all slaves [ 1008.490406][ T6135] tipc: Left network mode [ 1011.534300][T16503] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1014.219747][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.269110][T16503] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1014.326513][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.492805][T16503] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1014.538465][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.557971][T16503] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1014.594042][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.705236][T16736] netlink: 'syz.8.3406': attribute type 1 has an invalid length. [ 1015.017817][T16736] bond6: entered promiscuous mode [ 1015.040183][T16736] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1015.157362][T16742] bond6: (slave bridge6): making interface the new active one [ 1015.189765][T16742] bridge6: entered promiscuous mode [ 1015.204509][T16742] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1016.101503][T14373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1016.121402][T14373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1016.131231][T14373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1016.156617][T14373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1016.167607][T14373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1016.448526][T16765] overlayfs: failed to resolve './bus': -2 [ 1018.299519][T14373] Bluetooth: hci2: command tx timeout [ 1019.222285][T15515] syz_tun (unregistering): left allmulticast mode [ 1021.157600][T14373] Bluetooth: hci2: command tx timeout [ 1021.211918][T16784] fuse: Bad value for 'fd' [ 1023.099189][T16784] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1023.110670][T16784] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1023.120456][T16784] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1023.180919][T14373] Bluetooth: hci2: command tx timeout [ 1025.401574][T16814] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1025.408678][T16814] overlayfs: failed to set xattr on upper [ 1025.414626][T16814] overlayfs: ...falling back to redirect_dir=nofollow. [ 1025.421565][T16814] overlayfs: ...falling back to index=off. [ 1025.427379][T16814] overlayfs: ...falling back to uuid=null. [ 1025.433333][T16814] overlayfs: conflicting lowerdir path [ 1025.583130][T14373] Bluetooth: hci2: command tx timeout [ 1025.658932][T16513] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1025.755548][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.798792][T16513] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1025.860363][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.971055][T16513] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1026.018467][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1026.045462][T16513] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1026.070646][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1026.105775][T16503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.195121][T16827] netlink: 'syz.8.3427': attribute type 1 has an invalid length. [ 1026.328674][ T5479] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1026.366769][T16762] chnl_net:caif_netlink_parms(): no params data found [ 1026.460789][T16827] bond7: entered promiscuous mode [ 1026.473639][T16827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1026.556500][T16828] bond7: (slave bridge7): making interface the new active one [ 1026.578446][T16828] bridge7: entered promiscuous mode [ 1026.594722][T16828] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1026.812555][T16845] netlink: 'syz.5.3432': attribute type 1 has an invalid length. [ 1026.947392][T16845] bond3: entered promiscuous mode [ 1026.960430][T16845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1027.036050][T16850] bond3: (slave bridge4): making interface the new active one [ 1027.043815][T16850] bridge4: entered promiscuous mode [ 1027.051739][T16850] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1027.117548][T16503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.226309][T16762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.239583][T16762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.246888][T16762] bridge_slave_0: entered allmulticast mode [ 1027.256030][T16762] bridge_slave_0: entered promiscuous mode [ 1027.266319][T16762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.277914][T16762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.287845][T16762] bridge_slave_1: entered allmulticast mode [ 1027.297623][T16762] bridge_slave_1: entered promiscuous mode [ 1027.504565][T16862] fuse: Bad value for 'fd' [ 1027.981536][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.988890][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.438601][T16513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.465770][T16513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.527818][T16862] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1028.537310][T16862] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1028.549362][T16862] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1029.519203][T16762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.548897][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.556147][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.617759][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.625060][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.683175][T16762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.470670][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.477928][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.556625][ T5479] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1030.647139][ T6135] hsr_slave_0: left promiscuous mode [ 1030.677975][ T6135] hsr_slave_1: left promiscuous mode [ 1030.698331][ T6135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.734533][ T6135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.497713][ T6135] team0 (unregistering): Port device team_slave_1 removed [ 1032.514268][ T6135] team0 (unregistering): Port device team_slave_0 removed [ 1034.747876][T16762] team0: Port device team_slave_0 added [ 1034.794488][T16762] team0: Port device team_slave_1 added [ 1034.958847][T16762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.988492][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.075436][T16762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.190950][T16762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.255413][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.635342][T16762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.307733][T16762] hsr_slave_0: entered promiscuous mode [ 1036.362550][T16762] hsr_slave_1: entered promiscuous mode [ 1036.433975][T16762] debugfs: 'hsr0' already exists in 'hsr' [ 1036.475243][T16762] Cannot create hsr debugfs directory [ 1036.731681][ T6135] IPVS: stop unused estimator thread 0... [ 1037.720780][T16503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.052350][T16513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.441232][ T6135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.755530][ T6135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.785424][ T5479] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1039.014332][ T6135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.177578][ T6135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.241493][T16513] veth0_vlan: entered promiscuous mode [ 1039.313538][T16513] veth1_vlan: entered promiscuous mode [ 1039.418578][T16503] veth0_vlan: entered promiscuous mode [ 1039.594860][T16762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1039.628758][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1039.647459][T16762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1039.671716][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1039.685597][T16503] veth1_vlan: entered promiscuous mode [ 1039.703918][T16762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1039.725207][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1039.740496][T16762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1039.769033][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1039.846575][T16513] veth0_macvtap: entered promiscuous mode [ 1039.902608][T16513] veth1_macvtap: entered promiscuous mode [ 1040.548562][ T6135] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1040.567373][ T6135] bridge2 (unregistering): left promiscuous mode [ 1040.585479][ T6135] bridge2 (unregistering): left allmulticast mode [ 1040.694159][ T6135] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1040.716331][ T6135] bridge3 (unregistering): left promiscuous mode [ 1040.837647][ T6135] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1040.864000][ T6135] bond0 (unregistering): Released all slaves [ 1040.886791][ T6135] bond1 (unregistering): Released all slaves [ 1040.934070][ T6135] bond2 (unregistering): Released all slaves [ 1040.968488][ T6135] bond3 (unregistering): Released all slaves [ 1041.000541][ T6135] bond4 (unregistering): Released all slaves [ 1041.067276][ T5479] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1041.158426][T16513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.210062][T16513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.310655][T16503] veth0_macvtap: entered promiscuous mode [ 1041.407385][T16503] veth1_macvtap: entered promiscuous mode [ 1041.439715][ T6325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.524514][ T6325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.552996][ T6325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.618546][ T6325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.805192][T16503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.977889][T16503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.270941][ T6323] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.334674][ T1148] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.354318][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.371740][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.383818][ T93] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.400824][ T93] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.083390][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.130344][T16762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.146690][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.956381][ T6135] hsr_slave_0: left promiscuous mode [ 1044.975667][ T6135] hsr_slave_1: left promiscuous mode [ 1045.963707][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.994083][T16762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.018556][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.127771][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.135022][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.276356][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.283684][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.622568][T17158] fuse: Bad value for 'fd' [ 1048.276681][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.310074][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.788936][ T6135] IPVS: stop unused estimator thread 0... [ 1050.928614][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1050.946279][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1050.955717][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1050.965254][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1050.979556][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1051.760317][T16762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.287699][ T6135] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.019328][ T5838] Bluetooth: hci3: command tx timeout [ 1053.833261][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.265448][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.721316][ T6135] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.133043][ T5838] Bluetooth: hci3: command tx timeout [ 1057.182190][ T5838] Bluetooth: hci3: command tx timeout [ 1057.571729][T17187] chnl_net:caif_netlink_parms(): no params data found [ 1057.878536][ T6135] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.191074][ T6135] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.378315][T17263] netlink: 'syz.5.3533': attribute type 1 has an invalid length. [ 1058.640273][T17263] bond4: entered promiscuous mode [ 1058.654473][T17263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1058.773694][T16762] veth0_vlan: entered promiscuous mode [ 1059.289743][ T5838] Bluetooth: hci3: command tx timeout [ 1059.571659][T17275] bond4: (slave bridge5): making interface the new active one [ 1059.581043][T17275] bridge5: entered promiscuous mode [ 1059.587966][T17275] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1059.824208][T16762] veth1_vlan: entered promiscuous mode [ 1059.955157][T17187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.971617][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.994085][T17187] bridge_slave_0: entered allmulticast mode [ 1060.047526][T17187] bridge_slave_0: entered promiscuous mode [ 1060.147955][T17187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.173070][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.208531][T17187] bridge_slave_1: entered allmulticast mode [ 1060.229484][T17187] bridge_slave_1: entered promiscuous mode [ 1060.436294][T17187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.484877][T17187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.858402][T17187] team0: Port device team_slave_0 added [ 1061.038456][T17187] team0: Port device team_slave_1 added [ 1061.248167][ T6135] bridge_slave_1: left allmulticast mode [ 1061.286826][ T6135] bridge_slave_1: left promiscuous mode [ 1061.313124][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.332208][ T6135] bridge_slave_0: left allmulticast mode [ 1061.349608][ T6135] bridge_slave_0: left promiscuous mode [ 1061.357011][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.408006][ T6135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.457646][ T6135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.494830][ T6135] bond0 (unregistering): Released all slaves [ 1063.653700][T16762] veth0_macvtap: entered promiscuous mode [ 1063.974117][T16762] veth1_macvtap: entered promiscuous mode [ 1064.116389][T17187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.156255][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.187088][T17187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.223048][T17187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.239289][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.314458][T17187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.552407][T17187] hsr_slave_0: entered promiscuous mode [ 1064.568586][T17187] hsr_slave_1: entered promiscuous mode [ 1064.581505][T17187] debugfs: 'hsr0' already exists in 'hsr' [ 1064.594745][T17187] Cannot create hsr debugfs directory [ 1065.194246][T17348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.537188][T16762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.594729][ T6135] hsr_slave_0: left promiscuous mode [ 1065.611133][ T6135] hsr_slave_1: left promiscuous mode [ 1065.634924][ T6135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.670853][ T6135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.705182][ T6135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.737356][ T6135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.852376][ T6135] veth1_macvtap: left promiscuous mode [ 1065.889392][ T6135] veth0_macvtap: left promiscuous mode [ 1065.925630][ T6135] veth1_vlan: left promiscuous mode [ 1065.963165][ T6135] veth0_vlan: left promiscuous mode [ 1067.781486][ T6135] team0 (unregistering): Port device team_slave_1 removed [ 1067.864061][ T6135] team0 (unregistering): Port device team_slave_0 removed [ 1068.389173][T16762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.526132][ T6137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.575271][ T6137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.724200][ T6137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.915647][ T6137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.170821][T17419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.896372][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.929680][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.275366][T17229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.315391][T17229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.205122][T17187] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1072.630735][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1073.621724][T17187] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1074.872439][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.953619][T17187] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1075.048214][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.298372][T17187] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1075.383732][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.607603][T17482] netlink: 'syz.5.3576': attribute type 10 has an invalid length. [ 1075.696138][T17479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.915520][T17187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.996449][T17187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.003369][T10029] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1076.058640][T17229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.065875][T17229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.126586][T17229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.133808][T17229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.179596][T10029] usb 4-1: Using ep0 maxpacket: 16 [ 1076.202461][T10029] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.246851][T10029] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1076.342789][T10029] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1076.390351][T10029] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1076.449129][T10029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.517729][T10029] usb 4-1: config 0 descriptor?? [ 1076.974343][T17502] [ 1076.976735][T17502] ============================================ [ 1076.982886][T17502] WARNING: possible recursive locking detected [ 1076.989045][T17502] syzkaller #0 Tainted: G L [ 1076.995025][T17502] -------------------------------------------- [ 1077.001213][T17502] syz.3.3577/17502 is trying to acquire lock: [ 1077.007279][T17502] ffffffff8f7c0970 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.017803][T17502] [ 1077.017803][T17502] but task is already holding lock: [ 1077.025164][T17502] ffffffff8f7c0970 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.035500][T17502] [ 1077.035500][T17502] other info that might help us debug this: [ 1077.043560][T17502] Possible unsafe locking scenario: [ 1077.043560][T17502] [ 1077.051009][T17502] CPU0 [ 1077.054292][T17502] ---- [ 1077.057566][T17502] lock(qp_broker_list.mutex); [ 1077.062434][T17502] lock(qp_broker_list.mutex); [ 1077.067397][T17502] [ 1077.067397][T17502] *** DEADLOCK *** [ 1077.067397][T17502] [ 1077.075538][T17502] May be due to missing lock nesting notation [ 1077.075538][T17502] [ 1077.083854][T17502] 1 lock held by syz.3.3577/17502: [ 1077.088991][T17502] #0: ffffffff8f7c0970 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.099755][T17502] [ 1077.099755][T17502] stack backtrace: [ 1077.105641][T17502] CPU: 0 UID: 0 PID: 17502 Comm: syz.3.3577 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.105691][T17502] Tainted: [L]=SOFTLOCKUP [ 1077.105704][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1077.105726][T17502] Call Trace: [ 1077.105737][T17502] [ 1077.105749][T17502] dump_stack_lvl+0x100/0x190 [ 1077.105812][T17502] print_deadlock_bug.cold+0xbd/0xca [ 1077.105871][T17502] __lock_acquire+0x12bb/0x2630 [ 1077.105916][T17502] lock_acquire+0x1b1/0x370 [ 1077.105952][T17502] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.106000][T17502] ? __pfx___might_resched+0x10/0x10 [ 1077.106042][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.106086][T17502] ? kasan_save_stack+0x3f/0x50 [ 1077.106122][T17502] __mutex_lock+0x1a4/0x1b10 [ 1077.106169][T17502] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.106215][T17502] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.106259][T17502] ? vmci_host_close+0x115/0x1a0 [ 1077.106295][T17502] ? __fput+0x3ff/0xb50 [ 1077.106340][T17502] ? task_work_run+0x150/0x240 [ 1077.106377][T17502] ? exit_to_user_mode_loop+0x100/0x4a0 [ 1077.106413][T17502] ? do_syscall_64+0x706/0xf80 [ 1077.106456][T17502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.106501][T17502] ? __pfx___mutex_lock+0x10/0x10 [ 1077.106563][T17502] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.106607][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.106651][T17502] vmci_qp_broker_detach+0x14c/0x11e0 [ 1077.106696][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.106741][T17502] ? kasan_quarantine_put+0x104/0x240 [ 1077.106799][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.106842][T17502] ? lockdep_hardirqs_on+0x78/0x100 [ 1077.106887][T17502] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1077.106932][T17502] ? ctx_free_ctx+0x4a0/0xda0 [ 1077.106979][T17502] ? ctx_free_ctx+0x4bd/0xda0 [ 1077.107025][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.107069][T17502] ? kfree+0x223/0x6c0 [ 1077.107116][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.107164][T17502] ctx_free_ctx+0x517/0xda0 [ 1077.107214][T17502] ? __pfx___schedule+0x10/0x10 [ 1077.107258][T17502] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1077.107308][T17502] ? preempt_schedule_thunk+0x16/0x30 [ 1077.107363][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.107407][T17502] ? preempt_schedule_common+0x42/0xc0 [ 1077.107449][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.107498][T17502] ? preempt_schedule_thunk+0x16/0x30 [ 1077.107557][T17502] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 1077.107615][T17502] vmci_datagram_dispatch+0x3db/0xc60 [ 1077.107672][T17502] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1077.107727][T17502] ? find_held_lock+0x2b/0x80 [ 1077.107775][T17502] ? vmci_qp_broker_detach+0xef9/0x11e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1077.107820][T17502] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 1077.107865][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.107913][T17502] qp_notify_peer+0x1a6/0x230 [ 1077.107952][T17502] ? __pfx_qp_notify_peer+0x10/0x10 [ 1077.108004][T17502] vmci_qp_broker_detach+0xa20/0x11e0 [ 1077.108054][T17502] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1077.108099][T17502] ? ctx_free_ctx+0x4a0/0xda0 [ 1077.108146][T17502] ? ctx_free_ctx+0x4bd/0xda0 [ 1077.108191][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.108235][T17502] ? kfree+0x223/0x6c0 [ 1077.108281][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.108329][T17502] ctx_free_ctx+0x517/0xda0 [ 1077.108379][T17502] ? synchronize_rcu_expedited+0x3c3/0x450 [ 1077.108441][T17502] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1077.108495][T17502] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1077.108554][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.108601][T17502] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1077.108641][T17502] vmci_ctx_destroy+0x150/0x1c0 [ 1077.108692][T17502] vmci_host_close+0x115/0x1a0 [ 1077.108728][T17502] ? __pfx_vmci_host_close+0x10/0x10 [ 1077.108765][T17502] __fput+0x3ff/0xb50 [ 1077.108817][T17502] task_work_run+0x150/0x240 [ 1077.108857][T17502] ? __pfx_task_work_run+0x10/0x10 [ 1077.108898][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.108942][T17502] ? rcu_is_watching+0x12/0xc0 [ 1077.108989][T17502] exit_to_user_mode_loop+0x100/0x4a0 [ 1077.109025][T17502] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.109071][T17502] do_syscall_64+0x706/0xf80 [ 1077.109114][T17502] ? irqentry_exit+0x117/0x790 [ 1077.109161][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.109198][T17502] RIP: 0033:0x7f907959c819 [ 1077.109226][T17502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.109263][T17502] RSP: 002b:00007f90777d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1077.109295][T17502] RAX: 0000000000000000 RBX: 00007f9079816090 RCX: 00007f907959c819 [ 1077.109319][T17502] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 1077.109342][T17502] RBP: 00007f9079632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1077.109365][T17502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.109387][T17502] R13: 00007f9079816128 R14: 00007f9079816090 R15: 00007ffef50fc9b8 [ 1077.109423][T17502] [ 1077.110518][T17500] loop1: detected capacity change from 0 to 32768 [ 1077.631005][T17500] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3579 (17500) [ 1077.646196][T17500] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1077.656338][T17500] BTRFS info (device loop1): using sha256 checksum algorithm [ 1077.881465][T17500] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1077.881693][T17500] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1077.891279][T17500] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1077.902006][T17500] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1077.929475][T17500] BTRFS error (device loop1): open_ctree failed: -12 [ 1078.767853][ T6323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.874251][ T9638] syz_tun (unregistering): left promiscuous mode [ 1078.935711][ T6323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.052542][ T6323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.137967][ T6323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.322111][ T6323] bridge_slave_1: left allmulticast mode [ 1079.343600][ T6323] bridge_slave_1: left promiscuous mode [ 1079.360107][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.372237][ T6323] bridge_slave_0: left allmulticast mode [ 1079.389296][ T6323] bridge_slave_0: left promiscuous mode [ 1079.396526][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.574242][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.587150][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.597673][ T6323] bond0 (unregistering): Released all slaves [ 1079.865535][ T6323] hsr_slave_0: left promiscuous mode [ 1079.879867][ T6323] hsr_slave_1: left promiscuous mode [ 1079.892806][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.900851][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.908518][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.915981][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.927463][ T6323] veth1_macvtap: left promiscuous mode [ 1079.933030][ T6323] veth0_macvtap: left promiscuous mode [ 1079.938558][ T6323] veth1_vlan: left promiscuous mode [ 1079.944128][ T6323] veth0_vlan: left promiscuous mode [ 1080.088470][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 1080.101311][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 1081.055076][ T6323] bridge_slave_1: left allmulticast mode [ 1081.060890][ T6323] bridge_slave_1: left promiscuous mode [ 1081.066662][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.076416][ T6323] bridge_slave_0: left allmulticast mode [ 1081.083062][ T6323] bridge_slave_0: left promiscuous mode [ 1081.088832][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.238198][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.248722][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.261407][ T6323] bond0 (unregistering): Released all slaves [ 1081.303149][ T6323] ip6gretap0 (unregistering): left promiscuous mode [ 1081.492299][ T6323] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1081.500721][ T6323] bridge3 (unregistering): left promiscuous mode [ 1081.532299][ T6323] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1081.540554][ T6323] bridge4 (unregistering): left promiscuous mode [ 1081.592022][ T6323] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 1081.600192][ T6323] bridge5 (unregistering): left promiscuous mode [ 1081.642638][ T6323] bond0 (unregistering): left promiscuous mode [ 1081.648823][ T6323] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 1081.657216][ T6323] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1081.661338][T10029] usbhid 4-1:0.0: can't add hid device: -32 [ 1081.671494][T10029] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1081.672509][ T6323] bond0 (unregistering): Released all slaves [ 1081.689663][ T6323] bond1 (unregistering): Released all slaves [ 1081.700642][ T6323] bond2 (unregistering): Released all slaves [ 1081.711514][ T6323] bond3 (unregistering): Released all slaves [ 1081.724236][ T6323] bond4 (unregistering): Released all slaves [ 1082.295785][ T6323] hsr_slave_0: left promiscuous mode [ 1082.301899][ T6323] hsr_slave_1: left promiscuous mode [ 1082.307781][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.315767][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.324380][ T6323] batadv0: left promiscuous mode [ 1082.333175][ T6323] hsr_slave_0: left promiscuous mode [ 1082.338976][ T6323] hsr_slave_1: left promiscuous mode [ 1082.478474][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 1082.492431][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 1083.250373][ T6323] IPVS: stop unused estimator thread 0... [ 1084.798638][ T6325] bridge_slave_1: left allmulticast mode [ 1084.808269][ T6325] bridge_slave_1: left promiscuous mode [ 1084.815978][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.825498][ T6325] bridge_slave_0: left allmulticast mode [ 1084.831305][ T6325] bridge_slave_0: left promiscuous mode [ 1084.837203][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.986849][ T6325] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1084.995309][ T6325] bridge1 (unregistering): left promiscuous mode [ 1085.042226][ T6325] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1085.050461][ T6325] bridge2 (unregistering): left promiscuous mode [ 1085.143405][ T6325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.153383][ T6325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.163656][ T6325] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1085.172644][ T6325] bond0 (unregistering): Released all slaves [ 1085.181816][ T6325] bond1 (unregistering): Released all slaves [ 1085.192893][ T6325] bond2 (unregistering): Released all slaves [ 1085.204342][ T6325] bond3 (unregistering): Released all slaves [ 1085.215074][ T6325] bond4 (unregistering): Released all slaves [ 1085.227681][ T5479] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1085.600896][ T5479] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1085.962979][ T6325] hsr_slave_0: left promiscuous mode [ 1085.968900][ T6325] hsr_slave_1: left promiscuous mode [ 1086.054745][ T6325] team0 (unregistering): Port device team_slave_1 removed [ 1086.067182][ T6325] team0 (unregistering): Port device team_slave_0 removed [ 1086.135792][ T5479] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1086.314306][ T6325] IPVS: stop unused estimator thread 0... [ 1086.510832][ T5479] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1086.899763][ T5479] 8021q: adding VLAN 0 to HW filter on device eth5