last executing test programs: 10.773661526s ago: executing program 2 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x1e, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 9.15633705s ago: executing program 1 (id=336): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 9.057100302s ago: executing program 1 (id=337): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000200)=0x400a45) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new\f\x00\x00\x00ault user:syz 00000000000000004093\x00'], 0x2a, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000c12, &(0x7f00000001c0)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@cruft}, {@nocompress}, {@map_off}, {@nocompress}, {@mode={'mode', 0x3d, 0xd2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@map_normal}, {@sbsector}, {@showassoc}, {@session={'session', 0x3d, 0x49}}]}, 0x8, 0xa1a, &(0x7f0000000d40)="$eJzs3c1vHOd9B/Dv8EWiaFeSbdV1BdtayZBM2yxFUrVUwQdXIlcSXb4UJAVY6MFyLaoQxNat1QKyUcAyUPRUowUa5JDcjJySiwFf4kvgW3JLTjkECPwvGDkpJwazu6SW5C6XpClSsj8fYXfn5TfP85uXnUe7nJ0nPF6WDq0aW1qqPbY5fvWnu5Axj7CL419/9vmn5eOTe9mX7rxe/DzpS1JJepI8l/SOjc/OTHUo6HZyPclXSZFkf+qvm3I9xf/myQfjX6X4cVlvW/s2WzKdLPG9ttfHHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPIqKsfHh4ZFiXyamr75dqUsq64yNz84UWVpaP2d5mbova71+F192rDcpykf6+pa7+n7uyIPZzyapnMjz9bHnax2Spy8fPfHs4Tee6elaXr5dNt/K/s0Xe+fDj26/u7i48EH7kKWP6+uwM7k9Yi5XpyfmZiamLlyuVibmZirnz54dPn3l0lzl0sRkde7a3Hx1qjI2W70wPzNbGRh7pTJy/vyZSnXo2szV6cvjQ5PV5Ynn/mp0ePhs5a2hv69emJ2bmT791tDc2JWJycmJ6cu1mHJ2GXOuPBD/bmK+Ml+9MFWp3Ly1uHBmTU7dazd2GTTSaU3KoNFOQaPDo6MjI6OjI580es9emXD29fOvnxse7hleI+siHtJBy6PlQPvdvMNncNi+rnr7n0xmItO5mrdTaflvLOOZzUym2sxvWG7/T56ublhvc/vfaOV7mmYfLZ9O5MXGaF+b9r9NLrv3704+zEe5nXezmMUs5IM9z2h3/11ONdOZyFxmMpGpXKhNqTSmVHI+Z3M2w3knV3Isc6nkUiYymWrmci1zmU+1dkSNZTbVXMh8ZjKbSgYylldSyUjO53zOpJJqhnItM7ma6VzOeC7USrmZW7XtfmaDHFeCRjYTNLpB0NrGvDzWt9b+V7+r/xNk03b+JA7btNRo//d1Dh0Y242EAAAAgB33l7/KwSNP//L3SZEXat/LX5qYrL6512kBAAAAO6h2ud7z5UtvOfRCivLz//BepwUAAADsoKL2G7siSX+O1YeWfwnlSwAAAAD4jqj9/f/FFMceTPD5HwAAAL5jOt9jv2NEMbh8+9/KjfrrjUZEfazovzQxWR0am5l8YySnancZqP3SYF1p3UnRW/v5was5Xo863l9/7X9QYllnXxk1MvTGSF7NicaKDLxUvrw00CJytB75cj3y5ebI7qyKPFNGtrCJ2yMCwOPjxAbt8Wbb/1czWI8YPFpr8nuOtmiDh9u0rADArlvpY+ePjS7NWrT/jYgX27X/f73B5/8y4uncPFa/pGAo7+X9LOZGBtO44uDYqlKL5F5TdvXLEAY7fBvQ37hk4TfnujK47vuAvpXSmmMXMprBlt8INJVbLOdwph7XvfPbHwD2wonW7fCW2v/BDp//+11SCACPlJUe7Lcw8PFWghc+uLPX6wgArKaVBgAAAAAAAAAAAAAAAAAAAAAAAAAAgJ23qRv4//pUsri4kGyjs4BtD/RtJcONB7rysHM+sGubZeOB7iR7Vfub2fJS5T7+FpX+7MC3WtzARgN7fGICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgVxRJd6vpXcn+JMNJTu9+Vg/Pvb1OYKdUtrdYcT/3czcHdzodAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDvu8b9/7tSf32iPik9XcnJJNeT/MNe57iT7u91Anvmn2vPTff/70p6s1Skp77bU/SOjc/OTJW7v9hfzv/6s88/LR+dy17fq0JZQFnDqs4lGjU0TeldvdRTtaX6xxfu3P739/+1Mn6xdmBenL80OT51efZvHwQ+W3xR7wKhuRuE5Xz/8+Qv/q9p8r5G5V+Ua9ra2nov1eodX1/vX7Rauk29m3BrcWG0rGm++vb8f/zLrbtNW+vpHE9eGkgGVtf0T+WjTU3H127P1Ypviv8uDuaHuV7b/+XWKJaKchcdqq3/gZu3FheG3nt/8cZKTh/futtUwOEcS3Ij6dt8Tsdq55OWakddV29Z63AZdLB8OtKhvA01lTjSvF2bQp6qHTL9W1qHSvt1qOmw3RsZnWmZ0f//2zM5teU9fapDjS0V3xS/K67kt/mvpv4/usr9fzIt350tiqhFNh0pzfNWvb266pG1NR9tnvHO2jLbvivZUbVTcv4n/5i/Wdn/XU3n/8a+avO+2eHzUVONrd8XydbfFz85tK5FWbP6R9a0SI2zT7tlGnkeqUe1yfPP81rSc3RLZ5TXOpxRHtb7/0fFQP6Qe/r/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHn1F0t0Y/LPm6V3JySSHkxwqxyvJ0tpl722jvq7+Yrup7ojt5Pz4KdquaHE/93M3B3c7IwAAAAAAAAAejovjX3/2+aflo/b3+O6s/Fm+kvQkOVz8oHdsfHZmqkNBvcn15WX7tpbD9fLpyQfjX5Vjz3VYaG8vHwCAx9qfAgAA//8t+W3C") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 8.686164458s ago: executing program 0 (id=341): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x58, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x114}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1}, 0x4}], 0x2, 0x40000043, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.682769768s ago: executing program 0 (id=342): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x14, 0x1, 0x40000000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) 7.86399625s ago: executing program 1 (id=343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/149, 0x95, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.814142971s ago: executing program 0 (id=344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f00000000c0)={0x0}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@random={'security.', 'tmpfs\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r3, &(0x7f0000000080), 0x10) 7.516152055s ago: executing program 1 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(r0, 0x0, 0x0, 0xdf, 0x7, 0x1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) sched_setscheduler(r2, 0x5, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="0800a0009e09000008009f000e0000"], 0x3c}}, 0x0) 6.829822136s ago: executing program 3 (id=348): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r4) 5.845088891s ago: executing program 3 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB], 0x20000600}}, 0x0) 5.754247522s ago: executing program 1 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB], 0x20000600}}, 0x0) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 4.649613979s ago: executing program 4 (id=352): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x58, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x114}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1}, 0x4}], 0x2, 0x40000043, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.57965826s ago: executing program 2 (id=353): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f00000006c0)) 4.57901128s ago: executing program 3 (id=354): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000200)=0x400a45) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new\f\x00\x00\x00ault user:syz 00000000000000004093\x00'], 0x2a, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000c12, &(0x7f00000001c0)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@cruft}, {@nocompress}, {@map_off}, {@nocompress}, {@mode={'mode', 0x3d, 0xd2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@map_normal}, {@sbsector}, {@showassoc}, {@session={'session', 0x3d, 0x49}}]}, 0x8, 0xa1a, &(0x7f0000000d40)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 4.312339534s ago: executing program 2 (id=355): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"70ca253e230ef7cea884834d6c465f42def02f94c45b1f01cfd13fd2861758c6a3f127481e685c30df940fabe7e21f351b0c7c1b8de44552a95e7bc2997931185cdd971d5e6eb64794c87e1fec87a1a270a7bbbab5be8c0815954251fc2e177c022a16298decd4a2566ade604f962c561b894cdd8c8cf2a10c9da36d16647cdcbf6e575406baf4b5730e3e7e57622384fb84a0e9cd2b8ad525a43aebfbccad8e0e39512d2daeafc434c2f2234c59fa4ddb14477949df126432e20d94eac5ea6b880dbb7862010f40482da409cef850a503d0d8eba1d9b0de9c4fe0c1aa8af96afa487c89608b76c9791ae6bd00939d567acb5b11d54398aa649c9f60131e2ce92df810af5dd279c14f70a97c4735249817a2bf26af0fb9befc6be91ee11e10efaeb20bf2e58e4698b820bc7493d7cb4cd9a67b4517c589ef0bbd2f0deb3f8df2701a65c9cffa95e9d91fec02ad09a5822c683e346bc75160941a0e85ddf2485ee64ac7320e72767a0ed3a0788435f6a137773a9327450b780de47ad36a45a2431f4cec1ba7a1c63676f21456878798e8881ac7d692c182893bbb158790c8b30ae773a4c487bd6c5248d0ac861160f114f2fb0bf313f3eed9040d7ddbca03d2fcf6450b658209e4976ce602d5e976de5b17550fdd711206c667e644e5c58732549a1d9ea03ef6a4b96b9342851bbd4d9d31965ff1a5c96ff57f2af85b15519b08641eb6c3451167a28954ab9c713ce8c9890165717d52ef0557dd5c79d861deb2c66fb1a40b4f4c850970a74b5154b1120222a0b5bf5a1935623cb37042a9e98026b8800c53a187a532d759187da97f679e9525d79db3d253ab8622bca7357d164c51a762426296f9e518687bcc3d34264e16de8c8e2d74454c4ea5278fdcfc9a935fc059fb8476eb0c1d8f61b58a7bbe509b687a00ecf37095f2b4aed0b9a0f4c61f38254448081651bada010e316a23b1a22e598314c581e88a21a8b428ddf33e082499e0e8964543e36ecc72f759ee86432298f175aaf1350f54193965539dca6eaa159765c87ad5a6649b47e80b2dd93b076cccc9cbc95da67f3d52c94c5cd683c38c9f548da3b8714d44b5109f761dab9800a258759a8597e995615ba771d74479c8728d933733fbe62a722807e1839f5a537ebb2ee9d5e93252d64abfab5a7eac00413623924f48f9b304df00634b82c95650eb4bec42d1386c37a993ad5fae4483a9177421c454026af1ccce94b80b785671fc209264ce374a9add2ce2d95a08c31ad5c62d6608c338ff5a28d5400ea4d71f847381a83c2a7ba1437cebd9b665377595d5cd8f82f462b7763bcc5d0453a3ed95a99d316040b8f3578f516e79d53cccf98fd4548902a5deaaca146b799b4cdeeb60a429beb6d912153b793b725eca39b8ab21e34966dca1d24edbb891443cd619ef0435ea2ef563fbf3f3a07dff8f29381b13990a2d909e43dd3f57e176d7808e2d91b1364c1748880d96bc29101b0987f0e280886dd20c40b6bec7e721ebda7954fb1e77e1abb1a47da1ff213f994a22759a7d186f4d0f23e7f042b97051c9b12ca3bd47a30f05a0e8648201450f68b78ed541ed6ea9a920731caec520c2d6991ccbff20cedacbd07e94046ab083a6be822a020c19889f4bef2e057910c81e340a2869197906e2e9da4f8dc11bf778a72aa5590254a72520aa1a80ff8d02eb47e98053b23e9c98358c871e04669606838f8eb599dc0df5287dde674c05636a403fdb22f9b19182db445d732bd397d154d66dc1b9206b638ed38b15a3ed5eb72d28401398f7379541c715faf1b78985df2f41be10ec3c27ce1ea495cfd682a3efb9049ebab3e2b97b371b487c7a56bf16d371742002be0fa27693dadfc10290b37825f2d4a1a7385fdd812d71fcb951a3f329a183132894bdd256dc078e0b6216ebd341fc56c1175c80bd74064610a65655e4140a8c5920a516060f1a02e867de51136d2a82cf0450914a61288d92506ad04fc7e54a4003d3b102345fbe2e3fd5a75714345eefd25ef74aadb17a52ff41c7597163cd7de6e24c26d157176be3c3936c77916f8b51b9cd0ac9c583371a5f68add5561c306867ca4592965bd8932716f45dece476ea210a56386f102039316da5e3e632b0ebaab0856c1803f21c44d67fa9ec35c1aedf79ac427adb62f48cfab8c308faafadd00d24194e95a51f2f7c60a2fec8e094b71f8c1e6b0ba27c32c30e8da05f928d848fa295e3c9594220bafd302bf915d34a1bb20638aafaba3bd55b6f58b0427a863a961372add3d240a72913cf78772487b073d3db96b7447e2a85de6e8df404f49cd79feaddc69ed4e8061a6122d4e12d3cd32f20360b6f57c0d29cdbfd8f0fbb0f58328213680ca465efc7a891fce48174b12473f90850b56f246f83826e13ba4f39041d0344032be484a11473d31dce46cf28166680237199d55ae53b18acc4d67cd0ea8859d0362b68cda330e801e7fcceb0421a029615511900777583c2da500fd048382e54435ad7be5cec1499c6fa3e4688107b9946ea2f81fe935be159fafaacd07dc6a9de0d4d6a02a493e53a572c2880e59b29aebd31fa7e0bbd08119586d923cf76e3bb0ee5083e31e26dd2e103ce687b9aad198d7cb650965ca3a7d63155f4976127e37ce8f4668f4583419b3587cafb33b202816539000c9f45422c4642aa5e3aa6fe82c83f9151476f3c10e4531a419cdd72455c271d20317658c116b3f122c6bfe87db2a63d8235eeed3d3dc92e3b640cffcd0672dad125b9b7d850b8b27f5c1e3c89b121c5449acb9377c33f4a2ea99a580ff98e2d6e937834d556ea2afece5e75850600ddb540693d0f37a45e7cd9c4a186f34e18e334bbb2e9302e6e7159d73e6c654e5e6748e1ba24fec14a9a37701b9dcb3b8cdad2f6e6edcb955ef3f33f2db362c1f08ae514af64c4c02f079726128be3a487320dfaaf7feac2845878c23fa21b1edff5f5df1268cef6e94308a75161f1cb3aee1d8c1d574e1bd15a97df84983768ec12453c1d5418ab30568cee229c3ff0ee163d159165b5841c701a622e63236301e0a05764cf4ab14e4ddb6d6a0c10689f23decbffdfa5c71c7384bd986f76872033f47b920ac84f5decdd029444ec0b5780fcbc298350af77020ea5b328e1d6ea51f5ad6a2aac2c4e6ac3da48c1671fafba498e676b16ae1d11cc7d835f2a5ab0014fc1b408057620356e261e4721e1fd6cc4fb789641bab7c7897d29904d9bdf14c8b62f640da42776c10f4763dce9d0cd7b0231f4281cc48e9e6255a03ee0ae5ff7a13db515e2fcde1664d8030d48fd0936a9eb2b35ae4989d8ce527a5987d46f34f5f67e302ddc86ef8d1358a3929462b8cf302238172f18984c0129204eb84f88e4875c9ed62c4df4dec9b31a35fc47f49f371800e929f6ff6afb7006419581fb776dbd8e3669b799c920605ea26fbfe8b2eceba96e80c430967b4f154f9a8191b0ad02ad0e43b7219d4a1426c71e7dd69b52c35fbce6be14c07f7c38539a9c043e585f0b1baaaab411271962e1e28a9638dab16c568b8911c25d1100f970f629869f4bbe30efbaee3ec3e086477be178a882cbbbf698e6f456a3d0ee5f64325bb238b55f70f51cd4884b3002276c05ce7f8e801cc0238395fd98f884a12e6a980e79f434734a6d29f6724e2e6b4e41d72c7694a03fe1ca3d8ce9df03eafe3d7273b922cf942b224d795445c8716b092be6de27ac9e9e365d2dfa79a702fadc4472f42fe383b16688b4e9cd64ac288a466ed152f1fcc91f8d22912c750bbfe15ca304fcd82ff1c11c12f5df148d74a27caaf75780128fe17ad86c3b7f3d97659ffa1abbe292b2896c82f76d1b503eb80eae07fb1e7f68da96a536817c12d964b9f4ef6b6f901373ac365cbf6d276ad8b295a30de3288bc50ce3744b7d63c183e1fb072463baa366f67bcf6e7aa01c4fc129654413dba4747786ae3967a77a6f5d0bb24b1a18e276e9899a8fdc45df61ef84368964d77204c187b12d06ed7961b239aa3aad6b2ae75edebe0018335b77f9ff7a90a3518417ebad569ca9df6d9d028c347b0bc0754ff05bd30bc10057c339eb09fbdd875cb4a0760aa2e0a88633bf5b4beccbd3146046a490d66278cf75de76671c4ba8124fc9de5427ad120b202b8424e734eddbe08466259e757214f58b47cf3aaa21b8c98f6e8d4f66e9fda897732827855d987e6f8e310fce14a05034cf1d53d211aa4ad56eab17bbd39fc69d950ba5d14bcd5db8605950b6785acd04f00cf054998613dda8a6630102a86550205331444ce0248f2c44d3edec23a935cee7b093e47fd4fd72cae4bd1421adff6f2c13525692c511c19bd4008624510aafcf120801d7f6366806d3e377e2e39f47e341a40f812715e8a1130ee9770f998cea169038f43ba9bbefbff9882a85fe984a39c1930b7255ae8ddce424c1e5468557f072a3a76aa6932cc16a2633b27572a0696bd2a3303deba70cca4cad54b34ddb67acee56a95dde9c157890e36784576a9b8f96163c463c2c8392fb54e34da218c42616b8186c6e45298973af8769446a9fced6440543e4b355c0d1f2288f769ad5c62394f5ac6907d811c9f0e5c228ff01d7837833ffbe3b0fc4e45ee6356fe8fca29b6a5a7f498cce5c765ab77108ede41f455aa325d387bbf175a525104878d344d32e5afdfb68c4108551c2a45089c943456deb57f5dfe634fbcd305c076a4b93bb30286b474317e7daeadd45fa1a3fa21b74832c932773fa4d4f95794355c7692fd58e0b8a331e77d06d590ba1b14ed1349febb6782a695f16d8ebae63dd5e14650783f904e8f4835f941ff1f9d07208541a90f3412308074a882236abfb0540ded765b8ee18aef943ae608d5d8889d3d7d6b4871cdfb548d408dc67fee80ded13ad01e99cd9d6630099566f811d23859c65a87440790729e136e972734047262a8be47c4d8794fd4605b284db6365a8da83da9a3c3f6951e13ece5b2a454aa9e9d3421153e6e822cf05896a59561cea7d7ceec0a5e80141706ce6ff41429806d80fea11b222eda4ee1e3d983970fd31dc529de82e0b37d8b1d58692c1a45bdaee904359020d9bbad4c16ac667ad3c966019e988c498fa9041a7eece51ea6fd9292e522bd3f62876a3b29fb5cc759913495364bb505d200b9a7aa327f252453251099d5d815de77e81c4d75ada7630b4a72b184594d8e97ba8b09fcec10bd873e04b50f9f914067fe92d28691aec9f15c205ec4d59022798715348ed787418c2c7127f7077dbd83e72590675b237a9a0f88603b07679bdfb24e6dfdbc7718fc72d060c3ca002e42d5d93ab5b13ddab1aca5ac8cf245951e0ab9bb80060421053ff84e1b83751b7fa3449c326c5c5d5e0c0261a7e3ed779e376b3522b831e7d33a296e95d06ce7275f1f7d52b69e0116e4ade52cfc508e3bf9717aeb3320e3621c5d2fe06ef071d00c89698af91c37bdf52228f029412d18018baf7daae644fd700ba99331593f470ebf919f7bb360ab433cc5425b38ee89e1bc8c3e82da0b96c41a4506023146da65d5c1ef3b1bc968aa03c60933d6792e34bb221dec52509ece5d0976088acc0c36685f599e900aef4e86377e4206d0e54cf7fa76bbee156ceea501176807879f705ca5fea9ec6464d61b3c8f89ae03bef165e086a53104c0fa87c8007996bfd1c8f43d7d8ac3a7ae4e1bdf94d5fa9092eb580ca5756181d89f22f12b7e8d253958f0b281688e915e729b40cfe98ec9a8c0211b0c10ed3b2e88dc210b757153a797ccc22d349a7a419", 0x1000}}, 0x1006) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x81, 0x660804850a118895) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb70000"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) 4.311541564s ago: executing program 4 (id=356): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b70800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x50, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x104}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 3.730171403s ago: executing program 2 (id=357): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'team0\x00', &(0x7f0000000000)=@ethtool_ts_info}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(0x0, 0x13) 3.539511276s ago: executing program 3 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.539126916s ago: executing program 4 (id=359): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r3) 2.265219965s ago: executing program 4 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0xfffd, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x7, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 2.245356126s ago: executing program 1 (id=361): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) 2.073137588s ago: executing program 2 (id=362): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x50, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x104}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 1.269238411s ago: executing program 3 (id=363): openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 1.142287913s ago: executing program 4 (id=364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 1.141872923s ago: executing program 2 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB], 0x20000600}}, 0x0) 1.132860393s ago: executing program 0 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x400, 0xf, 0x80, 0x7, 0x0, 0xff, 0xc, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x1]}}) 137.398848ms ago: executing program 0 (id=367): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x58, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x114}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x1}, 0x4}], 0x2, 0x40000043, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 136.853288ms ago: executing program 3 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) 90.257659ms ago: executing program 4 (id=369): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902240001010330050904000801030101000f000000000000000b09058103100002ba07"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) 0s ago: executing program 0 (id=370): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b70800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x50, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x104}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. syzkaller login: [ 50.654103][ T4157] cgroup: Unknown subsys name 'net' [ 50.797256][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.105987][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.580297][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 53.628895][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 53.644876][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 53.696790][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.704064][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.711811][ T4172] device bridge_slave_0 entered promiscuous mode [ 53.728335][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.735414][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.743334][ T4172] device bridge_slave_1 entered promiscuous mode [ 53.809465][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.830807][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.869275][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 53.909159][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.916446][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.924872][ T4171] device bridge_slave_0 entered promiscuous mode [ 53.934004][ T4172] team0: Port device team_slave_0 added [ 53.939898][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.946975][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.955049][ T4171] device bridge_slave_1 entered promiscuous mode [ 53.970383][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.977459][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.985501][ T4169] device bridge_slave_0 entered promiscuous mode [ 53.994083][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.001174][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.009115][ T4169] device bridge_slave_1 entered promiscuous mode [ 54.027386][ T4172] team0: Port device team_slave_1 added [ 54.040749][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 54.077989][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.085032][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.110984][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.124396][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.137923][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.149066][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.161710][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.168756][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.194683][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.207382][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.265312][ T4169] team0: Port device team_slave_0 added [ 54.295390][ T4169] team0: Port device team_slave_1 added [ 54.310032][ T4171] team0: Port device team_slave_0 added [ 54.316169][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.323723][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.331522][ T4168] device bridge_slave_0 entered promiscuous mode [ 54.353190][ T4172] device hsr_slave_0 entered promiscuous mode [ 54.360238][ T4172] device hsr_slave_1 entered promiscuous mode [ 54.368317][ T4171] team0: Port device team_slave_1 added [ 54.374500][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.381556][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.389391][ T4168] device bridge_slave_1 entered promiscuous mode [ 54.444466][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.451422][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.477536][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.489051][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.496664][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.522645][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.540538][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.547859][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.555717][ T4170] device bridge_slave_0 entered promiscuous mode [ 54.567782][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.575046][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.583811][ T4170] device bridge_slave_1 entered promiscuous mode [ 54.591011][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.598158][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.624135][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.639975][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.646987][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.673321][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.700048][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.735622][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.765866][ T4171] device hsr_slave_0 entered promiscuous mode [ 54.772909][ T4171] device hsr_slave_1 entered promiscuous mode [ 54.779432][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.787221][ T4171] Cannot create hsr debugfs directory [ 54.804941][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.818972][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.843479][ T4168] team0: Port device team_slave_0 added [ 54.872505][ T4168] team0: Port device team_slave_1 added [ 54.896927][ T4169] device hsr_slave_0 entered promiscuous mode [ 54.904043][ T4169] device hsr_slave_1 entered promiscuous mode [ 54.910564][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.918362][ T4169] Cannot create hsr debugfs directory [ 54.951183][ T4170] team0: Port device team_slave_0 added [ 54.961202][ T4170] team0: Port device team_slave_1 added [ 54.980569][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.987595][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.013788][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.045420][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.052601][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.078684][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.105655][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.112643][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.138603][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.157857][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.165193][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.191736][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.228792][ T4168] device hsr_slave_0 entered promiscuous mode [ 55.236173][ T4168] device hsr_slave_1 entered promiscuous mode [ 55.242845][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.250388][ T4168] Cannot create hsr debugfs directory [ 55.290427][ T4170] device hsr_slave_0 entered promiscuous mode [ 55.297155][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 55.304048][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 55.308344][ T4170] device hsr_slave_1 entered promiscuous mode [ 55.310347][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 55.322440][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.322473][ T4170] Cannot create hsr debugfs directory [ 55.371933][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 55.382189][ T4211] Bluetooth: hci0: command 0x0409 tx timeout [ 55.511867][ T4172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.524000][ T4172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.540717][ T4172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.549460][ T4172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.577390][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.586413][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.600018][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.616016][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.663599][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.684581][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.698611][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.726464][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.794684][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.805225][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.830581][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.839772][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.848542][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.871720][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.882010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.890202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.904577][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.936897][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.946478][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.955227][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.962503][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.976673][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.990858][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.998288][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.007740][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.016060][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.024580][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.033263][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.041606][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.048698][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.057963][ T4170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.067405][ T4170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.078816][ T4170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.088892][ T4170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.104234][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.113837][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.123403][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.130448][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.138032][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.147062][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.156216][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.163298][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.170995][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.196488][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.206043][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.215451][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.225758][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.252730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.261374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.270004][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.277090][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.285290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.294313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.303146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.311533][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.318589][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.326597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.336159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.366955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.379052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.388814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.397772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.406858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.417482][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.427322][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.438503][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.447627][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.484496][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.492684][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.500850][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.509709][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.518605][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.527792][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.536300][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.546898][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.555270][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.563875][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.572354][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.580729][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.589146][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.597650][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.606173][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.620800][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.631939][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.643847][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.654982][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.666058][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.674422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.683376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.693551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.701831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.719276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.747244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.768622][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.786418][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.800219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.810119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.830615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.852565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.861471][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.868571][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.881442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.899123][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.907274][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.918992][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.945140][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.952334][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.988009][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.010049][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.020085][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.036072][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.055499][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.071649][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.087173][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.095160][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.103440][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.114185][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.122629][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.149409][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.171575][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.180341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.190078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.199020][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.206131][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.214729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.225081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.233526][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.240556][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.248574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.258177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.268119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.276137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.283817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.292425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.300717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.309759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.318271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.326845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.334555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.344086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.352990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.372340][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 57.373271][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 57.392499][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 57.406217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.415242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.423892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.433910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.442850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.451093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.452459][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 57.461149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.471527][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 57.474932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.487221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.495627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.503941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.512818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.521262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.529501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.538239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.546672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.554391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.563316][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.583607][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.592246][ T4171] device veth0_vlan entered promiscuous mode [ 57.599922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.610095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.619315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.627247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.636357][ T4169] device veth0_vlan entered promiscuous mode [ 57.653068][ T4171] device veth1_vlan entered promiscuous mode [ 57.677580][ T4169] device veth1_vlan entered promiscuous mode [ 57.730882][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.740095][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.749764][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.764670][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.778937][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.790258][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.804907][ T4171] device veth0_macvtap entered promiscuous mode [ 57.825844][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.842357][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.857134][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.889621][ T4171] device veth1_macvtap entered promiscuous mode [ 57.908286][ T4172] device veth0_vlan entered promiscuous mode [ 57.920822][ T4169] device veth0_macvtap entered promiscuous mode [ 57.928464][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.938498][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.947236][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.955780][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.980681][ T4172] device veth1_vlan entered promiscuous mode [ 57.990479][ T4169] device veth1_macvtap entered promiscuous mode [ 57.998201][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.006797][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.017970][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.026275][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.034279][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.042335][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.049721][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.059239][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.070707][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.086059][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.095000][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.104998][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.114109][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.132234][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.139494][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.147784][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.156783][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.168160][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.191935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.200569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.226271][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.235512][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.244497][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.254119][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.273696][ T4172] device veth0_macvtap entered promiscuous mode [ 58.280727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.291436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.300484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.312356][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.324436][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.336423][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.363462][ T4172] device veth1_macvtap entered promiscuous mode [ 58.376738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.384967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.393699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.407271][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.418475][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.429643][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.457225][ T4168] device veth0_vlan entered promiscuous mode [ 58.468889][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.478928][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.488595][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.498287][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.516027][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.528249][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.538462][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.549078][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.561309][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.570919][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.582147][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.592149][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.602858][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.613626][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.626231][ T4168] device veth1_vlan entered promiscuous mode [ 58.634514][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.642295][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.649841][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.660602][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.669362][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.678252][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.687600][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.707180][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.716216][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.725650][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.735648][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.749645][ T4172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.761066][ T4172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.770488][ T4172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.779224][ T4172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.804818][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.813603][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.823722][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.861284][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.870036][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.887869][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.907003][ T4170] device veth0_vlan entered promiscuous mode [ 58.938813][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.950368][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.959006][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.967783][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.980800][ T4170] device veth1_vlan entered promiscuous mode [ 58.994062][ T4168] device veth0_macvtap entered promiscuous mode [ 59.010004][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.024176][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.032320][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.040217][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.072148][ T4168] device veth1_macvtap entered promiscuous mode [ 59.109332][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.112902][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.124189][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.127727][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.142976][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.154194][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.162476][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.167057][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.179717][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.184203][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.199672][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.210658][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.223323][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.238167][ T4170] device veth0_macvtap entered promiscuous mode [ 59.245946][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.254475][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.262866][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.270567][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.278606][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.286687][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.296095][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.305874][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.315348][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.324495][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.337894][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.351384][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.361378][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.372270][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.382161][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.392594][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.403938][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.413452][ T4170] device veth1_macvtap entered promiscuous mode [ 59.435169][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.449134][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.458761][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 59.462797][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 59.465298][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 59.477947][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.488783][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.499774][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.508858][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.517741][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.532770][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 59.542102][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 59.575085][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.586828][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.596299][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.604453][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.617927][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.628761][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.655932][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.668916][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.685570][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.699762][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.723525][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.745217][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.760098][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.778872][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.790568][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.804853][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.815696][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.825834][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.836299][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.847947][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.862419][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.871433][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.880364][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.889250][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.589596][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.637798][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.681865][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.689754][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.703240][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.712877][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.721408][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.731438][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.968577][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.008290][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.056655][ T4293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'. [ 61.059454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.085383][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.093523][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.109318][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.129859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.148211][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.157775][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.176465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.190284][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.258610][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.542166][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 61.655970][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 61.692217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.692692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.772556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.781509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.790443][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 61.799373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.808296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.817244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.826230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.835175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.415833][ T4307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.479104][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 62.499293][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 62.546294][ T1325] Bluetooth: hci3: command 0x0419 tx timeout [ 62.701895][ T4309] use of bytesused == 0 is deprecated and will be removed in the future, [ 62.710642][ T4309] use the actual size instead. [ 62.739880][ T4309] futex_wake_op: syz.1.8 tries to shift op by 535; fix this program [ 63.600123][ T4313] loop0: detected capacity change from 0 to 32768 [ 63.813962][ T4313] XFS (loop0): Mounting V5 Filesystem [ 64.848143][ T4313] XFS (loop0): Ending clean mount [ 64.870941][ T4313] XFS (loop0): Quotacheck needed: Please wait. [ 64.913437][ T4313] XFS (loop0): Quotacheck: Done. [ 65.188820][ T4339] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 65.198799][ T4172] XFS (loop0): Unmounting Filesystem [ 65.487106][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.663136][ T4339] team0: Port device bond0 added [ 65.733536][ T4339] syz.1.13 (4339) used greatest stack depth: 21024 bytes left [ 65.924380][ T4344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16'. [ 66.779202][ T26] audit: type=1326 audit(1751207240.383:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.1.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3341c59929 code=0x0 [ 66.833767][ T4357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 66.865252][ T4359] nfs: Unknown parameter 'ÿÿÿÿà' [ 67.817627][ T4185] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 67.829166][ T4185] CPU: 0 PID: 4185 Comm: kworker/u5:7 Not tainted 5.15.186-syzkaller #0 [ 67.837510][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.847568][ T4185] Workqueue: hci3 hci_rx_work [ 67.852280][ T4185] Call Trace: [ 67.855567][ T4185] [ 67.858511][ T4185] dump_stack_lvl+0x168/0x230 [ 67.863206][ T4185] ? show_regs_print_info+0x20/0x20 [ 67.868414][ T4185] ? load_image+0x3b0/0x3b0 [ 67.872938][ T4185] sysfs_create_dir_ns+0x252/0x280 [ 67.878061][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 67.883095][ T4185] ? sysfs_warn_dup+0xa0/0xa0 [ 67.887776][ T4185] ? le_conn_complete_evt+0xcbc/0x1590 [ 67.893326][ T4185] ? hci_event_packet+0xe05/0x12f0 [ 67.898449][ T4185] ? process_one_work+0x863/0x1000 [ 67.903573][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 67.908779][ T4185] kobject_add_internal+0x662/0xd00 [ 67.913994][ T4185] kobject_add+0x152/0x210 [ 67.918421][ T4185] ? kobject_init+0x1d0/0x1d0 [ 67.923111][ T4185] ? klist_children_get+0x50/0x50 [ 67.928138][ T4185] ? get_device_parent+0x121/0x3f0 [ 67.933258][ T4185] device_add+0x483/0xfb0 [ 67.937602][ T4185] hci_conn_add_sysfs+0xd1/0x1e0 [ 67.942548][ T4185] le_conn_complete_evt+0xcbc/0x1590 [ 67.947853][ T4185] ? cs_le_create_conn+0x5e0/0x5e0 [ 67.952974][ T4185] ? __mutex_trylock_common+0x14f/0x250 [ 67.958533][ T4185] hci_le_meta_evt+0x289/0x3b80 [ 67.963401][ T4185] ? hci_event_packet+0x36d/0x12f0 [ 67.968526][ T4185] ? hci_event_packet+0x2e2/0x12f0 [ 67.973645][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 67.978690][ T4185] ? hci_remote_host_features_evt+0x280/0x280 [ 67.984773][ T4185] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 67.990415][ T4185] ? mark_lock+0x94/0x320 [ 67.994757][ T4185] ? mutex_unlock+0x10/0x10 [ 67.999270][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 68.005269][ T4185] ? lock_chain_count+0x20/0x20 [ 68.010156][ T4185] ? __rwlock_init+0x140/0x140 [ 68.014934][ T4185] hci_event_packet+0xe05/0x12f0 [ 68.019876][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 68.025189][ T4185] ? rcu_lock_release+0x20/0x20 [ 68.030060][ T4185] ? hci_send_to_monitor+0x9c/0x4a0 [ 68.035285][ T4185] hci_rx_work+0x255/0xa10 [ 68.039731][ T4185] process_one_work+0x863/0x1000 [ 68.044697][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 68.050337][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 68.055642][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 68.060690][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 68.066084][ T4185] ? wq_worker_running+0x97/0x170 [ 68.071140][ T4185] worker_thread+0xaa8/0x12a0 [ 68.075847][ T4185] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 68.081768][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 68.086985][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 68.092372][ T4185] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 68.098300][ T4185] kthread+0x436/0x520 [ 68.102384][ T4185] ? rcu_lock_release+0x20/0x20 [ 68.107241][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 68.111841][ T4185] ret_from_fork+0x1f/0x30 [ 68.116286][ T4185] [ 68.302607][ T4185] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 68.403089][ T4376] Zero length message leads to an empty skb [ 69.490635][ T4185] Bluetooth: hci3: failed to register connection device [ 69.825192][ T4388] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.095338][ T4380] loop2: detected capacity change from 0 to 131072 [ 70.320112][ T4380] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 70.328362][ T4380] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.343438][ T4380] F2FS-fs (loop2): invalid crc value [ 70.402844][ T4394] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 70.402844][ T4394] program syz.3.28 not setting count and/or reply_len properly [ 70.553309][ T4380] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.592958][ T4380] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 70.600141][ T4380] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 70.978387][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.987695][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.567878][ T1092] block nbd1: Attempted send on invalid socket [ 71.574940][ T1092] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.587593][ T4413] qnx6: unable to read the first superblock [ 71.596561][ T1092] block nbd1: Attempted send on invalid socket [ 71.603747][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.620046][ T4413] qnx6: unable to read the first superblock [ 71.626232][ T4413] qnx6: unable to read the first superblock [ 74.055432][ T4434] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 74.202144][ T4438] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 74.500593][ T4438] team0: Device ipvlan1 failed to register rx_handler [ 75.038854][ T4438] syz.1.40 (4438) used greatest stack depth: 20000 bytes left [ 76.100755][ T4453] loop0: detected capacity change from 0 to 131072 [ 76.111033][ T1108] cfg80211: failed to load regulatory.db [ 76.143336][ T4464] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.174213][ T4453] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 76.182549][ T4453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.192824][ T4453] F2FS-fs (loop0): invalid crc value [ 76.264921][ T4453] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.316567][ T4453] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.323667][ T4453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 77.898358][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.914963][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.923160][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.051921][ T4278] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.633115][ T4501] UBIFS error (pid: 4501): cannot open "", error -22 [ 78.657569][ T4501] overlayfs: failed to resolve './file1': -2 [ 78.702060][ T4278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.715015][ T4504] tmpfs: Bad value for 'huge' [ 78.722455][ T4278] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.741508][ T4278] usb 4-1: config 1 has no interface number 0 [ 78.751636][ T4278] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.781865][ T4278] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 78.801090][ T4278] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.815230][ T4278] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.997081][ T4278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.006480][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 79.031873][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.050167][ T4278] usb 4-1: Product: syz [ 79.060448][ T4278] usb 4-1: Manufacturer: syz [ 79.090520][ T4278] usb 4-1: SerialNumber: syz [ 79.812003][ T4278] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 79.818230][ T4278] cdc_ncm 4-1:1.1: bind() failure [ 80.037566][ T4278] usb 4-1: USB disconnect, device number 2 [ 81.485513][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 82.106972][ T4544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 82.116148][ T4544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 83.579671][ T4555] loop0: detected capacity change from 0 to 131072 [ 83.617744][ T4555] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 83.625922][ T4555] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 83.636503][ T4555] F2FS-fs (loop0): invalid crc value [ 83.697124][ T4555] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.737407][ T4555] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 83.744521][ T4555] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 85.585223][ T4578] syz.3.81 uses obsolete (PF_INET,SOCK_PACKET) [ 86.911884][ T4239] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.123715][ T4211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.305233][ T4239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.341478][ T4239] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 87.370974][ T4600] loop0: detected capacity change from 0 to 1764 [ 87.388998][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.451366][ T4239] usb 4-1: config 0 descriptor?? [ 87.491990][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.518631][ T4211] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.548484][ T4239] rndis_wlan: probe of 4-1:0.0 failed with error -22 [ 87.560682][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.562400][ T4239] rndis_host: probe of 4-1:0.0 failed with error -22 [ 87.588669][ T4211] usb 2-1: config 0 descriptor?? [ 87.638669][ T4211] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 87.736334][ T4239] usb 4-1: USB disconnect, device number 3 [ 87.841980][ T4278] usb 2-1: USB disconnect, device number 2 [ 91.341826][ T4239] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.512371][ T4638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.591971][ T4239] usb 5-1: Using ep0 maxpacket: 8 [ 91.688713][ T4641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.713603][ T4641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.871951][ T4239] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.887511][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.902022][ T4239] usb 5-1: Product: syz [ 91.911870][ T4239] usb 5-1: Manufacturer: syz [ 91.927821][ T4239] usb 5-1: SerialNumber: syz [ 91.953293][ T4239] usb 5-1: config 0 descriptor?? [ 92.222034][ T4239] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 95.006495][ T4239] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 95.646598][ T4239] usb 5-1: USB disconnect, device number 2 [ 96.407179][ T4689] process 'syz.3.112' launched './file0' with NULL argv: empty string added [ 96.462726][ T4684] loop2: detected capacity change from 0 to 1764 [ 100.261189][ T4707] sched: RT throttling activated [ 100.923646][ T4716] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.059404][ T4719] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.081170][ T4719] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 102.333172][ T4732] loop1: detected capacity change from 0 to 131072 [ 102.392494][ T4732] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 102.400768][ T4732] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.411306][ T4732] F2FS-fs (loop1): invalid crc value [ 102.544768][ T4732] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.318205][ T4732] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.325299][ T4732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 105.674929][ T4764] tipc: Started in network mode [ 105.685200][ T4764] tipc: Node identity 96e45e435701, cluster identity 4711 [ 105.697488][ T4764] tipc: Enabled bearer , priority 0 [ 105.706300][ T4763] tipc: Resetting bearer [ 105.928680][ T4763] tipc: Disabling bearer [ 106.218964][ T4777] loop3: detected capacity change from 0 to 1764 [ 108.179281][ T4792] loop2: detected capacity change from 0 to 131072 [ 108.740852][ T4792] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 108.749121][ T4792] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.758797][ T4792] F2FS-fs (loop2): invalid crc value [ 108.878762][ T4792] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.942629][ T4792] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 108.949707][ T4792] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 109.867349][ T4827] fuse: Unknown parameter 'fd0x0000000000000006' [ 109.883451][ T4827] netlink: 'syz.0.151': attribute type 4 has an invalid length. [ 112.677904][ T4211] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.148520][ T4211] usb 5-1: Using ep0 maxpacket: 8 [ 114.328260][ T4888] sp0: Synchronizing with TNC [ 114.439284][ T4211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.540288][ T4892] netlink: 'syz.2.172': attribute type 27 has an invalid length. [ 114.590708][ T4211] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.745885][ T4211] usb 5-1: config 1 has no interface number 1 [ 114.833227][ T4211] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 115.008773][ T4211] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.019923][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.028042][ T4211] usb 5-1: Product: syz [ 115.032652][ T4211] usb 5-1: Manufacturer: syz [ 115.037356][ T4211] usb 5-1: SerialNumber: syz [ 115.373534][ T4211] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 115.382230][ T4211] usb 5-1: 2:1 : sample bitwidth 128 in over sample bytes 8 [ 115.553662][ T4211] usb 5-1: 2:1 : unsupported sample bitwidth 128 in 8 bytes [ 115.604491][ T4211] usb 5-1: USB disconnect, device number 3 [ 115.626368][ T4892] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.634532][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.854772][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.973150][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.038280][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.539105][ T4892] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.548086][ T4892] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.557014][ T4892] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.567479][ T4892] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.704006][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 118.380878][ T4923] loop2: detected capacity change from 0 to 131072 [ 118.443843][ T4923] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 118.451998][ T4923] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.463005][ T4923] F2FS-fs (loop2): invalid crc value [ 118.567911][ T4923] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.752515][ T4923] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.759621][ T4923] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 119.659966][ T4934] loop3: detected capacity change from 0 to 1764 [ 123.710681][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.988966][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 124.248101][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 124.658315][ T4981] loop4: detected capacity change from 0 to 131072 [ 125.586636][ T4981] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 125.594907][ T4981] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.622921][ T4981] F2FS-fs (loop4): invalid crc value [ 125.818601][ T4981] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.864757][ T4981] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 125.871919][ T4981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 126.173109][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 126.191290][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.209949][ T13] usb 4-1: Product: syz [ 126.397263][ T5006] loop3: detected capacity change from 0 to 1764 [ 126.447369][ T13] usb 4-1: Manufacturer: syz [ 126.491515][ T13] usb 4-1: config 0 descriptor?? [ 126.573574][ T13] usb 4-1: can't set config #0, error -71 [ 126.602157][ T13] usb 4-1: USB disconnect, device number 4 [ 131.187285][ T5048] lo speed is unknown, defaulting to 1000 [ 131.197377][ T5048] lo speed is unknown, defaulting to 1000 [ 131.204633][ T5048] lo speed is unknown, defaulting to 1000 [ 131.289963][ T5048] infiniband syz2: set active [ 131.294929][ T5048] infiniband syz2: added lo [ 131.306838][ T5048] infiniband syz2: Couldn't open port 1 [ 131.325703][ T1325] lo speed is unknown, defaulting to 1000 [ 131.353584][ T5048] RDS/IB: syz2: added [ 131.358621][ T5048] smc: adding ib device syz2 with port count 1 [ 131.364903][ T5048] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 131.375729][ T5048] lo speed is unknown, defaulting to 1000 [ 131.437804][ T5048] lo speed is unknown, defaulting to 1000 [ 131.499774][ T5048] lo speed is unknown, defaulting to 1000 [ 131.561401][ T5048] lo speed is unknown, defaulting to 1000 [ 131.622943][ T5048] lo speed is unknown, defaulting to 1000 [ 131.746663][ T1325] lo speed is unknown, defaulting to 1000 [ 132.387203][ T5053] loop4: detected capacity change from 0 to 131072 [ 132.412302][ T5053] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 132.420531][ T5053] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 132.457080][ T5053] F2FS-fs (loop4): invalid crc value [ 132.529407][ T5053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.749021][ T5061] loop1: detected capacity change from 0 to 1764 [ 132.766274][ T5053] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 132.773346][ T5053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 135.529195][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.535539][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.576095][ T5091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 135.582793][ T5091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.882744][ T5091] vhci_hcd vhci_hcd.0: Device attached [ 136.010040][ T5092] vhci_hcd: connection closed [ 136.027092][ T4341] vhci_hcd: stop threads [ 136.062842][ T4341] vhci_hcd: release socket [ 136.092321][ T4341] vhci_hcd: disconnect device [ 136.133153][ T21] vhci_hcd: vhci_device speed not set [ 136.812938][ T5108] loop3: detected capacity change from 0 to 1764 [ 137.107444][ T4174] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.383957][ T4174] usb 1-1: Using ep0 maxpacket: 16 [ 137.532518][ T4174] usb 1-1: config 2 has an invalid interface number: 142 but max is 0 [ 137.550522][ T4174] usb 1-1: config 2 has no interface number 0 [ 137.898403][ T4174] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 137.929207][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.980402][ T4174] usb 1-1: Product: syz [ 138.005806][ T4174] usb 1-1: Manufacturer: syz [ 138.040670][ T4174] usb 1-1: SerialNumber: syz [ 138.187062][ T4174] usb 1-1: NFC: intf ffff88801f3b0000 id ffffffff8c94a6a0 [ 138.282923][ T5118] loop4: detected capacity change from 0 to 131072 [ 138.295388][ T5118] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 138.303552][ T5118] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.313787][ T5118] F2FS-fs (loop4): invalid crc value [ 138.338390][ T5118] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.377289][ T5118] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.384408][ T5118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 138.409355][ T4174] usb 1-1: USB disconnect, device number 2 [ 140.848480][ T5143] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 140.982788][ T26] audit: type=1326 audit(1751207311.449:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8757c4a929 code=0x7ffc0000 [ 141.113270][ T26] audit: type=1326 audit(1751207311.524:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f8757c4a929 code=0x7ffc0000 [ 141.370124][ T5151] loop2: detected capacity change from 0 to 1764 [ 141.557433][ T26] audit: type=1326 audit(1751207311.533:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8757c4a929 code=0x7ffc0000 [ 141.880269][ T5153] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.245'. [ 142.570188][ T5157] loop1: detected capacity change from 0 to 131072 [ 142.579439][ T5157] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 142.587566][ T5157] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.597311][ T5157] F2FS-fs (loop1): invalid crc value [ 142.696554][ T5157] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.878520][ T5157] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.885934][ T5157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 145.511555][ T26] audit: type=1326 audit(1751207315.687:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 145.557641][ T5190] netlink: 'syz.4.254': attribute type 10 has an invalid length. [ 145.630168][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.630993][ T26] audit: type=1326 audit(1751207315.724:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 145.667459][ T5190] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 145.722707][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.770270][ T26] audit: type=1326 audit(1751207315.724:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 145.770708][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.874770][ T26] audit: type=1326 audit(1751207315.724:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 145.910493][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.942260][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.219773][ T26] audit: type=1326 audit(1751207315.724:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 146.307442][ T5191] bond0: (slave batadv0): Releasing backup interface [ 146.479508][ T26] audit: type=1326 audit(1751207315.724:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 146.746121][ T26] audit: type=1326 audit(1751207315.724:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 147.280963][ T5207] loop0: detected capacity change from 0 to 1764 [ 147.310526][ T26] audit: type=1326 audit(1751207315.724:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 147.928163][ T26] audit: type=1326 audit(1751207315.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 147.962970][ T26] audit: type=1326 audit(1751207315.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0e11929 code=0x7ffc0000 [ 148.412469][ T5215] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.259'. [ 148.828072][ T5212] loop0: detected capacity change from 0 to 131072 [ 148.925065][ T5212] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 148.933195][ T5212] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.963798][ T5212] F2FS-fs (loop0): invalid crc value [ 148.998614][ T5212] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.067213][ T5212] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 149.074440][ T5212] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 152.178585][ T5260] loop0: detected capacity change from 0 to 1764 [ 152.220314][ T5262] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.273'. [ 155.927516][ T4212] hid-generic 0005:10CF:000B.0001: item fetching failed at offset 0/1 [ 155.943378][ T4212] hid-generic: probe of 0005:10CF:000B.0001 failed with error -22 [ 155.975763][ T5299] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.284'. [ 156.242304][ T5305] tmpfs: Unknown parameter 'usrquota' [ 156.304608][ T5305] lo speed is unknown, defaulting to 1000 [ 157.106114][ T5311] loop2: detected capacity change from 0 to 1764 [ 159.093595][ T5327] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.295'. [ 161.530859][ T5362] loop3: detected capacity change from 0 to 131072 [ 161.593485][ T5362] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 161.601931][ T5362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 161.619590][ T5362] F2FS-fs (loop3): invalid crc value [ 161.651049][ T5362] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.737617][ T5362] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 161.744707][ T5362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 161.881170][ T5372] loop1: detected capacity change from 0 to 1764 [ 162.958027][ T5386] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.307'. [ 163.896807][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.121093][ T5397] tipc: Can't bind to reserved service type 2 [ 165.012522][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.121009][ T13] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.567491][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.165516][ T5409] loop0: detected capacity change from 0 to 131072 [ 166.231258][ T5409] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 166.239523][ T5409] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 166.251140][ T5409] F2FS-fs (loop0): invalid crc value [ 166.298449][ T5409] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.364921][ T5409] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 166.372426][ T5409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 166.380656][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 166.547441][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 166.626267][ T13] usb 2-1: Product: syz [ 166.669435][ T13] usb 2-1: Manufacturer: syz [ 166.852475][ T13] usb 2-1: SerialNumber: syz [ 167.232617][ T13] usb 2-1: can't set config #1, error -71 [ 167.296491][ T13] usb 2-1: USB disconnect, device number 3 [ 168.401140][ T5427] loop0: detected capacity change from 0 to 1764 [ 173.300691][ T5494] loop1: detected capacity change from 0 to 1764 [ 177.805185][ T5547] loop3: detected capacity change from 0 to 1764 [ 180.407278][ T5565] device syzkaller1 entered promiscuous mode [ 182.029418][ T5591] ------------[ cut here ]------------ [ 182.049694][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 182.057360][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 182.075260][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 182.081813][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 182.082066][ T5591] WARNING: CPU: 1 PID: 5591 at fs/inode.c:389 inc_nlink+0x11d/0x130 [ 182.170320][ T5591] Modules linked in: [ 182.210545][ T5591] CPU: 0 PID: 5591 Comm: syz.3.368 Not tainted 5.15.186-syzkaller #0 [ 182.218837][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.246577][ T5591] RIP: 0010:inc_nlink+0x11d/0x130 [ 182.262619][ T5591] Code: 0c ef ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 ad 0c ef ff e9 3f ff ff ff e8 b3 93 a9 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 57 41 [ 182.285702][ T5591] RSP: 0018:ffffc900040ffc28 EFLAGS: 00010283 [ 182.292084][ T5591] RAX: ffffffff81ce2f5d RBX: ffff8880759e0190 RCX: 0000000000080000 [ 182.302223][ T5591] RDX: ffffc9000cfda000 RSI: 000000000000bcd9 RDI: 000000000000bcda [ 182.312433][ T5591] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100eb3c106 [ 182.328686][ T5591] R10: ffffed100eb3c106 R11: 1ffff1100eb3c105 R12: dffffc0000000000 [ 182.347650][ T5591] R13: 1ffff1100eb3c032 R14: ffff8880759e0148 R15: 0000000000000000 [ 182.370066][ T5591] FS: 00007f9ab6e056c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 182.447019][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.636735][ T5591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.654849][ T5591] CR2: 000020000001f030 CR3: 000000007d2a6000 CR4: 00000000003506e0 [ 182.673882][ T5591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.683050][ T5591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.691354][ T5591] Call Trace: [ 182.694824][ T5591] [ 182.698418][ T5591] v9fs_vfs_mkdir_dotl+0x52c/0x640 [ 182.703777][ T5591] ? v9fs_vfs_symlink_dotl+0x4e0/0x4e0 [ 182.709379][ T5591] ? privileged_wrt_inode_uidgid+0x1ed/0x240 [ 182.715695][ T5591] ? generic_permission+0x292/0x510 [ 182.721139][ T5591] ? inode_permission+0xef/0x480 [ 182.726605][ T5591] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 182.731916][ T5591] ? security_inode_mkdir+0xb3/0x100 [ 182.739117][ T5591] vfs_mkdir+0x387/0x570 [ 182.743495][ T5591] do_mkdirat+0x1d7/0x5a0 [ 182.758612][ T5591] ? vfs_mkdir+0x570/0x570 [ 182.775848][ T5591] ? getname_flags+0x1fe/0x500 [ 182.795582][ T5591] __x64_sys_mkdir+0x6a/0x80 [ 182.812222][ T5591] do_syscall_64+0x4c/0xa0 [ 182.824988][ T5591] ? clear_bhb_loop+0x30/0x80 [ 182.836765][ T5591] ? clear_bhb_loop+0x30/0x80 [ 182.858459][ T5591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.883148][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 182.908216][ T5591] RIP: 0033:0x7f9ab8f9d929 [ 182.926158][ T5591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.964032][ T5591] RSP: 002b:00007f9ab6e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 182.973528][ T5591] RAX: ffffffffffffffda RBX: 00007f9ab91c4fa0 RCX: 00007f9ab8f9d929 [ 182.983595][ T5591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 182.992114][ T5591] RBP: 00007f9ab901fb39 R08: 0000000000000000 R09: 0000000000000000 [ 183.000291][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.008738][ T5591] R13: 0000000000000000 R14: 00007f9ab91c4fa0 R15: 00007ffe65198cf8 [ 183.016995][ T5591] [ 183.020213][ T5591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.027500][ T5591] CPU: 0 PID: 5591 Comm: syz.3.368 Not tainted 5.15.186-syzkaller #0 [ 183.035572][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.045653][ T5591] Call Trace: [ 183.048947][ T5591] [ 183.051883][ T5591] dump_stack_lvl+0x168/0x230 [ 183.056579][ T5591] ? show_regs_print_info+0x20/0x20 [ 183.061809][ T5591] ? load_image+0x3b0/0x3b0 [ 183.066332][ T5591] panic+0x2c9/0x7f0 [ 183.070248][ T5591] ? bpf_jit_dump+0xd0/0xd0 [ 183.074766][ T5591] ? inc_nlink+0x11d/0x130 [ 183.079189][ T5591] __warn+0x248/0x2b0 [ 183.083181][ T5591] ? inc_nlink+0x11d/0x130 [ 183.087615][ T5591] report_bug+0x1b7/0x2e0 [ 183.091954][ T5591] handle_bug+0x3a/0x70 [ 183.096122][ T5591] exc_invalid_op+0x16/0x40 [ 183.100638][ T5591] asm_exc_invalid_op+0x16/0x20 [ 183.105495][ T5591] RIP: 0010:inc_nlink+0x11d/0x130 [ 183.110535][ T5591] Code: 0c ef ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 ad 0c ef ff e9 3f ff ff ff e8 b3 93 a9 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 57 41 [ 183.130142][ T5591] RSP: 0018:ffffc900040ffc28 EFLAGS: 00010283 [ 183.136217][ T5591] RAX: ffffffff81ce2f5d RBX: ffff8880759e0190 RCX: 0000000000080000 [ 183.144203][ T5591] RDX: ffffc9000cfda000 RSI: 000000000000bcd9 RDI: 000000000000bcda [ 183.152191][ T5591] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100eb3c106 [ 183.160164][ T5591] R10: ffffed100eb3c106 R11: 1ffff1100eb3c105 R12: dffffc0000000000 [ 183.168147][ T5591] R13: 1ffff1100eb3c032 R14: ffff8880759e0148 R15: 0000000000000000 [ 183.176132][ T5591] ? inc_nlink+0x11d/0x130 [ 183.180572][ T5591] ? inc_nlink+0x11d/0x130 [ 183.184999][ T5591] v9fs_vfs_mkdir_dotl+0x52c/0x640 [ 183.190123][ T5591] ? v9fs_vfs_symlink_dotl+0x4e0/0x4e0 [ 183.195599][ T5591] ? privileged_wrt_inode_uidgid+0x1ed/0x240 [ 183.201605][ T5591] ? generic_permission+0x292/0x510 [ 183.206812][ T5591] ? inode_permission+0xef/0x480 [ 183.211754][ T5591] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 183.216900][ T5591] ? security_inode_mkdir+0xb3/0x100 [ 183.222206][ T5591] vfs_mkdir+0x387/0x570 [ 183.226479][ T5591] do_mkdirat+0x1d7/0x5a0 [ 183.230832][ T5591] ? vfs_mkdir+0x570/0x570 [ 183.235256][ T5591] ? getname_flags+0x1fe/0x500 [ 183.240026][ T5591] __x64_sys_mkdir+0x6a/0x80 [ 183.244627][ T5591] do_syscall_64+0x4c/0xa0 [ 183.249052][ T5591] ? clear_bhb_loop+0x30/0x80 [ 183.253735][ T5591] ? clear_bhb_loop+0x30/0x80 [ 183.258415][ T5591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.264311][ T5591] RIP: 0033:0x7f9ab8f9d929 [ 183.268749][ T5591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.288360][ T5591] RSP: 002b:00007f9ab6e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 183.296784][ T5591] RAX: ffffffffffffffda RBX: 00007f9ab91c4fa0 RCX: 00007f9ab8f9d929 [ 183.304850][ T5591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 183.312829][ T5591] RBP: 00007f9ab901fb39 R08: 0000000000000000 R09: 0000000000000000 [ 183.320804][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.328778][ T5591] R13: 0000000000000000 R14: 00007f9ab91c4fa0 R15: 00007ffe65198cf8 [ 183.336775][ T5591] [ 183.340095][ T5591] Kernel Offset: disabled [ 183.344608][ T5591] Rebooting in 86400 seconds..