last executing test programs: 38.909632734s ago: executing program 1 (id=741): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0x4, 0x5}) 37.882973948s ago: executing program 1 (id=744): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)="5a55453d3f343ddf743dc5752a17c50e8c344bdd8b937be477a38f6b79dcd1ba98a90c913f3471198b20812b5499f6bcfc208168b795619a3ce46f37248e6cba356f6b1885942d89207ccea25d016530e3b22325d068a2296d9ff316eeccd4b7878222acc208802610b68c2394af83726245e1ab82644e033c4289eaf3da5fefe11c876e76a5", 0x86}, {&(0x7f00000003c0)="f72ab9ff1c2ce7c231514e2165f87922d536a04e157ac98a4876270061b5e58b7d8fb03864e5eb7336c5de1451a4e896dd9fa64b948664cebdd6ca691d641226eff9c0cec60cb586af9c3d2d0c36213df2c95b73989db6f2a2313dca09bec542818535db3ffd6980c65b9b0d3b13bc1a3956a3c05500dcc4f959a05ae2352ce151df9a67827c95fcd4cf971575c9d16a4998ebf201127b66ff140efc7aafaf5f0e4d549c3422a2aa23a8", 0xaa}, {&(0x7f0000000640)="bfd7c993d03bc8cbbe6613b514fbaad2189637ac3eb8845946a54c47c4ca1e012af77070c7bceb9d427de15ee89d0131205ac32a293034197d42059ecac86062a0dc285533f36127c93798f411580ced55ca1ca5e89fd7f1f6790bc0efd9533074218537200c64e99d38948296f9da1e88bfde065703eeafb747f6ed3cabea74bd37146dd16be4304f74ee9d12274abf9a54d1ea320c346b15c88ffe9421cd41f6eac8e306fa14d611719e082d9069a81d8041ffaf159997f4b8d7e19d784358d693d9a8599ade814f79806f60", 0xcd}, {&(0x7f0000000740)="fa851b61ff", 0x5}, {&(0x7f0000000780)="02b82292cc9d87e2f5eb21376b2541f42d7300ee0a0c0decfe4bba31f399def9d92bc8af22d4d8a7d6dfae79df7aee6c2396cafa10a0c9ab6f93a5c77aaa4f328806f40d4c32555feb6c26d4a2266788dfa0fa928504fe5ce09f3436e5f2d3b0abcfb12d3b74317d1598fe5295a30d06d316ec112f09fcd17b2cfda980878d58e4c5581a5cc8ed6e8792ae", 0x8b}, {&(0x7f0000000840)="2e43ab2be877d8746d80ba95", 0xc}, {&(0x7f0000000880)="7d0ec91a80eab8a766617c48f65fd21c45cfc3663ec9199afeb46b9aceeea191651b68a3b2bad049958b98c3d6965ad425e7945af6e5166d0bc69efea1e2f39d061641bdd4a3ef564ff66122405578a0fe2b13617f004e089ed9f83e6210695892fec46dc3b0454e748961ed9063ba084af66cefd076f95c35baebf51bda1af83aeb4eaab4239c2b3719440d3c3d848d67317bafcbcef9edecdd966d196033aebbbaebd6a35c26961edbdd688accfc6a3a004f0e4d004eaea7158b8bcdbe056f09a8e41ddc75ca299a79c72e4be8cd21d8f4e52c12cec63b37", 0xd9}], 0x7, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x90}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b00)="f67698772b066510c51a5047fbded356a89881d70c208803505e4d066cdd94e1fa615447c3232194f38de4a03ca6cc285582e163e07c7efaab16dd0d66b6d5f0c0", 0x41}, {&(0x7f0000000c40)="83d802ff01f0b47952563ae8316e7e210046ac7b8fade25b586c3cfaf212963052d0e2d53dc24d385b60c36c993424b5be7b95c73db50c357fce0b1a2977b1d5bdffe1150c10fdc048bc502d94e037c44f3ced9a26fe263387ac6b713044b42a46c2bace8d3c0a645613bd5e5323d66283ebcb5e50c6020831e0ccec35890a76ac04292ab1fed6571ecb7fd736867813e87ddc66ffd1cd11f4c2f09a13dec5bfdaee87c7959ffbc673784a35d192464f4e0c3a78347cdb51b305c7a06b6686", 0xbf}, {&(0x7f0000000d40)="e013ace94516e38af8b240535637ac61eb58e475c61ff82819478725ad1ad55eb62c10573263f27e0d9edeccdd81446ca4a9224b71aaf856039516c40a73116b598a29efc209f6dd8f4a5d41f7d15dd7b2800dcb0a34630bfea14aaeb67480d362f24b5214212571073bae5dad641ef36147f0a566fff32baa58f832f8fb4c194fbbafd110021a953c16e1c77552b8b09ce82c", 0x93}], 0x3, &(0x7f0000000f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40b2}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0xf, 0x99, [@local, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x70, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x7fffffff}, {@multicast2}, {@local, 0x5}, {@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010100, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010101}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x71, [@remote, @local, @remote, @empty, @multicast2, @local]}, @timestamp={0x44, 0x28, 0x35, 0x0, 0x7, [0xa6, 0x2, 0x400, 0x10, 0x80000001, 0x128b2f10, 0x1, 0x0, 0x0]}, @rr={0x7, 0x17, 0x77, [@loopback, @loopback, @multicast2, @remote, @multicast1]}, @end, @ssrr={0x89, 0x7, 0x4c, [@rand_addr=0x64010102]}, @cipso={0x86, 0x20, 0x1, [{0x1, 0xa, "2bbab09dd8e0c721"}, {0x5, 0xa, "03bec7436c99a796"}, {0x1, 0x6, "59d5e71d"}]}, @timestamp_prespec={0x44, 0x1c, 0x3d, 0x3, 0x5, [{@private=0xa010101, 0x1000}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}]}, @end, @timestamp_prespec={0x44, 0x4c, 0x44, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x6}, {@rand_addr=0x64010100, 0xff}, {@local, 0x37}, {@rand_addr=0x64010101, 0x3}, {@loopback}, {@multicast2, 0x5}, {@local}, {@multicast2, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x1c8}}], 0x2, 0x20088000) 37.8117376s ago: executing program 1 (id=745): r0 = socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x20044010) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0x11) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) 36.804042713s ago: executing program 1 (id=746): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 30.818514593s ago: executing program 1 (id=758): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x14, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb563", 0xa6}, {0x0}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000640)="bfd7c993d03bc8cbbe6613b514fbaad2189637ac3eb8845946a54c47c4ca1e012af77070c7bceb9d427de15ee89d0131205ac32a293034197d42059ecac86062a0dc285533f36127c93798f411580ced55ca1ca5e89fd7f1f6790bc0efd9533074218537200c64e99d38948296f9da1e88bfde065703eeafb747f6ed3cabea74bd37146dd16be4304f74ee9d12274abf9a54d1ea320c346b15c88ffe9421cd41f6eac8e306fa14d611719e082d9069a81d8041ffaf159997f4b8d7e19d784358d693d9a8599ade814f79806f60", 0xcd}, {&(0x7f0000000780)="02b82292cc9d87e2f5eb21376b2541f42d7300ee0a0c0decfe4bba31f399def9d92bc8af22d4d8a7d6dfae79df7aee6c2396cafa10a0c9ab6f93a5c77aaa4f328806f40d4c32555feb6c26d4a2266788dfa0fa928504fe5ce09f3436e5f2d3b0abcfb12d3b74317d1598fe5295a30d06d316ec112f09fcd17b2cfda980878d58e4c5581a5cc8ed6e8792ae", 0x8b}, {&(0x7f0000000840)="2e43ab2be877d8746d80ba95", 0xc}], 0x4, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x90}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40b2}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0xf, 0x99, [@local, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010101}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0xf8, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x71, [@remote, @local, @remote, @empty, @multicast2, @local]}, @timestamp={0x44, 0x28, 0x35, 0x0, 0x7, [0xa6, 0x2, 0x400, 0x10, 0x80000001, 0x128b2f10, 0x1, 0x0, 0x0]}, @rr={0x7, 0x13, 0x77, [@loopback, @loopback, @multicast2, @remote]}, @end, @ssrr={0x89, 0x7, 0x4c, [@rand_addr=0x64010102]}, @cipso={0x86, 0x20, 0x1, [{0x1, 0xa, "2bbab09dd8e0c721"}, {0x5, 0xa, "03bec7436c99a796"}, {0x1, 0x6, "59d5e71d"}]}, @timestamp_prespec={0x44, 0x1c, 0x3d, 0x3, 0x5, [{@private=0xa010101, 0x1000}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}]}, @end, @timestamp_prespec={0x44, 0x4c, 0x44, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x6}, {@rand_addr=0x64010100, 0xff}, {@local, 0x37}, {@rand_addr=0x64010101, 0x3}, {@loopback}, {@multicast2, 0x5}, {@local}, {@multicast2, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x190}}], 0x2, 0x20088000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0xc0b0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 29.62897406s ago: executing program 1 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() timer_create(0x4, 0x0, 0x0) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x4000010) 13.327575371s ago: executing program 32 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() timer_create(0x4, 0x0, 0x0) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x4000010) 9.527194039s ago: executing program 2 (id=797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "d1b8d5ba3c537b1b", "dec8701245cef68063e2c1e96640003bbd0fc7f8ffe400", '\x00', "00003073d22d00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e4ca6a41ea89670118bd966a8ca2ff5b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b0c4f138ea00000000807174bac1414aae00000027f00e0007f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffff"], 0x113}, 0x0) 9.351978613s ago: executing program 2 (id=798): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 9.176078677s ago: executing program 3 (id=800): lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf5000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200"/52], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) read$msr(r2, &(0x7f0000019a80)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg(r4, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000003c0)=""/19, 0xff5b, 0x0, 0x1, 0x2}}, 0x48) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xaf4, 0x0) 7.089557385s ago: executing program 2 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(0x3) 6.704117304s ago: executing program 0 (id=803): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20088000) 6.464069729s ago: executing program 0 (id=804): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0x4, 0x5}) 5.419232494s ago: executing program 3 (id=805): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 4.994899074s ago: executing program 0 (id=806): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x18}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add5", 0x32}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.109346435s ago: executing program 3 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "d1b8d5ba3c537b1b", "dec8701245cef68063e2c1e96640003bbd0fc7f8ffe400", '\x00', "00003073d22d00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e4ca6a41ea89670118bd966a8ca2ff5b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b0c4f138ea00000000807174bac1414aae00000027f00e0007f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffff"], 0x113}, 0x0) 4.107885415s ago: executing program 2 (id=814): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20088000) 3.928783439s ago: executing program 2 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.923104939s ago: executing program 3 (id=809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x3, 0x1f, 0x1c, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 3.788780252s ago: executing program 0 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x10, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0xc0104d08, &(0x7f0000000900)) 3.728174704s ago: executing program 3 (id=811): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 3.672149405s ago: executing program 2 (id=812): lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf5000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200"/52], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) read$msr(r2, &(0x7f0000019a80)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg(r4, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000003c0)=""/19, 0xff5b, 0x0, 0x1, 0x2}}, 0x48) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xaf4, 0x0) 2.660538738s ago: executing program 3 (id=813): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0x4, 0x5}) 1.681038681s ago: executing program 4 (id=789): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x14, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb563", 0xa6}, {0x0}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000640)="bfd7c993d03bc8cbbe6613b514fbaad2189637ac3eb8845946a54c47c4ca1e012af77070c7bceb9d427de15ee89d0131205ac32a293034197d42059ecac86062a0dc285533f36127c93798f411580ced55ca1ca5e89fd7f1f6790bc0efd9533074218537200c64e99d38948296f9da1e88bfde065703eeafb747f6ed3cabea74bd37146dd16be4304f74ee9d12274abf9a54d1ea320c346b15c88ffe9421cd41f6eac8e306fa14d611719e082d9069a81d8041ffaf159997f4b8d7e19d784358d693d9a8599ade814f79806f60", 0xcd}, {&(0x7f0000000780)="02b82292cc9d87e2f5eb21376b2541f42d7300ee0a0c0decfe4bba31f399def9d92bc8af22d4d8a7d6dfae79df7aee6c2396cafa10a0c9ab6f93a5c77aaa4f328806f40d4c32555feb6c26d4a2266788dfa0fa928504fe5ce09f3436e5f2d3b0abcfb12d3b74317d1598fe5295a30d06d316ec112f09fcd17b2cfda980878d58e4c5581a5cc8ed6e8792ae", 0x8b}, {&(0x7f0000000840)="2e43ab2be877d8746d80ba95", 0xc}], 0x4, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x90}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40b2}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0xf, 0x99, [@local, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010101}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0xf8, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x71, [@remote, @local, @remote, @empty, @multicast2, @local]}, @timestamp={0x44, 0x28, 0x35, 0x0, 0x7, [0xa6, 0x2, 0x400, 0x10, 0x80000001, 0x128b2f10, 0x1, 0x0, 0x0]}, @rr={0x7, 0x13, 0x77, [@loopback, @loopback, @multicast2, @remote]}, @end, @ssrr={0x89, 0x7, 0x4c, [@rand_addr=0x64010102]}, @cipso={0x86, 0x20, 0x1, [{0x1, 0xa, "2bbab09dd8e0c721"}, {0x5, 0xa, "03bec7436c99a796"}, {0x1, 0x6, "59d5e71d"}]}, @timestamp_prespec={0x44, 0x1c, 0x3d, 0x3, 0x5, [{@private=0xa010101, 0x1000}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}]}, @end, @timestamp_prespec={0x44, 0x4c, 0x44, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x6}, {@rand_addr=0x64010100, 0xff}, {@local, 0x37}, {@rand_addr=0x64010101, 0x3}, {@loopback}, {@multicast2, 0x5}, {@local}, {@multicast2, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x190}}], 0x2, 0x20088000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0xc0b0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 698.114954ms ago: executing program 4 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(0x3) 579.238506ms ago: executing program 4 (id=816): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)="5a55453d3f343ddf743dc5752a17c50e8c344bdd8b937be477a38f6b79dcd1ba98a90c913f3471198b20812b5499f6bcfc208168b795619a3ce46f37248e6cba356f6b1885942d89207ccea25d016530e3b22325d068a2296d9ff316eeccd4b7878222acc208802610b68c2394af83726245e1ab82644e033c4289eaf3da5fefe11c876e76a5", 0x86}, {&(0x7f00000003c0)="f72ab9ff1c2ce7c231514e2165f87922d536a04e157ac98a4876270061b5e58b7d8fb03864e5eb7336c5de1451a4e896dd9fa64b948664cebdd6ca691d641226eff9c0cec60cb586af9c3d2d0c36213df2c95b73989db6f2a2313dca09bec542818535db3ffd6980c65b9b0d3b13bc1a3956a3c05500dcc4f959a05ae2352ce151df9a67827c95fcd4cf971575c9d16a4998ebf201127b66ff140efc7aafaf5f0e4d549c3422a2aa23a8", 0xaa}, {&(0x7f0000000640)="bfd7c993d03bc8cbbe6613b514fbaad2189637ac3eb8845946a54c47c4ca1e012af77070c7bceb9d427de15ee89d0131205ac32a293034197d42059ecac86062a0dc285533f36127c93798f411580ced55ca1ca5e89fd7f1f6790bc0efd9533074218537200c64e99d38948296f9da1e88bfde065703eeafb747f6ed3cabea74bd37146dd16be4304f74ee9d12274abf9a54d1ea320c346b15c88ffe9421cd41f6eac8e306fa14d611719e082d9069a81d8041ffaf159997f4b8d7e19d784358d693d9a8599ade814f79806f60", 0xcd}, {&(0x7f0000000740)="fa851b61ff", 0x5}, {&(0x7f0000000780)="02b82292cc9d87e2f5eb21376b2541f42d7300ee0a0c0decfe4bba31f399def9d92bc8af22d4d8a7d6dfae79df7aee6c2396cafa10a0c9ab6f93a5c77aaa4f328806f40d4c32555feb6c26d4a2266788dfa0fa928504fe5ce09f3436e5f2d3b0abcfb12d3b74317d1598fe5295a30d06d316ec112f09fcd17b2cfda980878d58e4c5581a5cc8ed6e8792ae", 0x8b}, {&(0x7f0000000840)="2e43ab2be877d8746d80ba95", 0xc}, {&(0x7f0000000880)="7d0ec91a80eab8a766617c48f65fd21c45cfc3663ec9199afeb46b9aceeea191651b68a3b2bad049958b98c3d6965ad425e7945af6e5166d0bc69efea1e2f39d061641bdd4a3ef564ff66122405578a0fe2b13617f004e089ed9f83e6210695892fec46dc3b0454e748961ed9063ba084af66cefd076f95c35baebf51bda1af83aeb4eaab4239c2b3719440d3c3d848d67317bafcbcef9edecdd966d196033aebbbaebd6a35c26961edbdd688accfc6a3a004f0e4d004eaea7158b8bcdbe056f09a8e41ddc75ca299a79c72e4be8cd21d8f4e52c12cec63b37", 0xd9}], 0x7, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x90}}], 0x1, 0x20088000) 424.07131ms ago: executing program 4 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e4ca6a41ea89670118bd966a8ca2ff5b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b0c4f138ea00000000807174bac1414aae00000027f00e0007f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffff"], 0x113}, 0x0) 285.628164ms ago: executing program 0 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ee, &(0x7f0000000300)) 224.039385ms ago: executing program 4 (id=819): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x18}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add5", 0x32}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 76.775586][ T5762] cgroup: Unknown subsys name 'net' [ 76.931545][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.555586][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.882707][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.890946][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.893295][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.898775][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.907664][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.914153][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.919942][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.927913][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.935407][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.944503][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.955568][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.965455][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.978975][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.986528][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.993961][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.994135][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.008741][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.016945][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.021092][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.032530][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.046789][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.048553][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.064102][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.071821][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.541991][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.615953][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.637019][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.720200][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.747031][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.756498][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.763765][ T5775] bridge_slave_0: entered allmulticast mode [ 81.770847][ T5775] bridge_slave_0: entered promiscuous mode [ 81.780845][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.788064][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.795304][ T5775] bridge_slave_1: entered allmulticast mode [ 81.802087][ T5775] bridge_slave_1: entered promiscuous mode [ 81.920316][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.927542][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.934807][ T5777] bridge_slave_0: entered allmulticast mode [ 81.941653][ T5777] bridge_slave_0: entered promiscuous mode [ 81.952514][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.965338][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.999293][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.006781][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.013932][ T5777] bridge_slave_1: entered allmulticast mode [ 82.022351][ T5777] bridge_slave_1: entered promiscuous mode [ 82.029044][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.038912][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.046167][ T5776] bridge_slave_0: entered allmulticast mode [ 82.052997][ T5776] bridge_slave_0: entered promiscuous mode [ 82.061942][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.069857][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.077508][ T5776] bridge_slave_1: entered allmulticast mode [ 82.084982][ T5776] bridge_slave_1: entered promiscuous mode [ 82.121921][ T5775] team0: Port device team_slave_0 added [ 82.156571][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.163800][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.174142][ T5774] bridge_slave_0: entered allmulticast mode [ 82.181092][ T5774] bridge_slave_0: entered promiscuous mode [ 82.192093][ T5775] team0: Port device team_slave_1 added [ 82.200297][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.220639][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.230575][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.237902][ T5774] bridge_slave_1: entered allmulticast mode [ 82.244847][ T5774] bridge_slave_1: entered promiscuous mode [ 82.261600][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.273131][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.311419][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.318780][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.345070][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.360018][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.389845][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.396947][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.425803][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.466665][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.479257][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.490800][ T5777] team0: Port device team_slave_0 added [ 82.499891][ T5777] team0: Port device team_slave_1 added [ 82.552315][ T5776] team0: Port device team_slave_0 added [ 82.562127][ T5776] team0: Port device team_slave_1 added [ 82.593256][ T5775] hsr_slave_0: entered promiscuous mode [ 82.599955][ T5775] hsr_slave_1: entered promiscuous mode [ 82.619315][ T5774] team0: Port device team_slave_0 added [ 82.627396][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.634550][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.660960][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.673572][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.680623][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.706785][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.735111][ T5774] team0: Port device team_slave_1 added [ 82.768439][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.775968][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.802258][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.837536][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.844827][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.871256][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.884398][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.891446][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.917822][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.929516][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.939297][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.965913][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.053351][ T5777] hsr_slave_0: entered promiscuous mode [ 83.060081][ T5777] hsr_slave_1: entered promiscuous mode [ 83.068074][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.076217][ T5777] Cannot create hsr debugfs directory [ 83.085214][ T5784] Bluetooth: hci2: command tx timeout [ 83.085461][ T5788] Bluetooth: hci0: command tx timeout [ 83.090871][ T5784] Bluetooth: hci3: command tx timeout [ 83.122018][ T5776] hsr_slave_0: entered promiscuous mode [ 83.129374][ T5776] hsr_slave_1: entered promiscuous mode [ 83.136051][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.143634][ T5776] Cannot create hsr debugfs directory [ 83.164636][ T5784] Bluetooth: hci1: command tx timeout [ 83.229130][ T5774] hsr_slave_0: entered promiscuous mode [ 83.235567][ T5774] hsr_slave_1: entered promiscuous mode [ 83.241721][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.250202][ T5774] Cannot create hsr debugfs directory [ 83.555821][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.579560][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.591444][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.622580][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.689807][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.707137][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.718344][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.732517][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.821430][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.841367][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.859320][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.881780][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.958785][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.969657][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.010448][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.026414][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.069440][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.138718][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.158200][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.170796][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.178347][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.202856][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.210072][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.280899][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.295096][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.302276][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.339001][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.346856][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.393072][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.485421][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.500142][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.586110][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.593307][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.632776][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.640027][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.658247][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.701398][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.708631][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.807385][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.814648][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.923433][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.038498][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.099939][ T5775] veth0_vlan: entered promiscuous mode [ 85.147319][ T5775] veth1_vlan: entered promiscuous mode [ 85.164997][ T5784] Bluetooth: hci0: command tx timeout [ 85.166132][ T5786] Bluetooth: hci2: command tx timeout [ 85.175765][ T5784] Bluetooth: hci3: command tx timeout [ 85.246618][ T5784] Bluetooth: hci1: command tx timeout [ 85.307880][ T5776] veth0_vlan: entered promiscuous mode [ 85.358970][ T5776] veth1_vlan: entered promiscuous mode [ 85.372208][ T5775] veth0_macvtap: entered promiscuous mode [ 85.386924][ T5775] veth1_macvtap: entered promiscuous mode [ 85.436918][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.449670][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.467756][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.496613][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.507394][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.517500][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.526355][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.541970][ T5776] veth0_macvtap: entered promiscuous mode [ 85.554479][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.588629][ T5776] veth1_macvtap: entered promiscuous mode [ 85.631022][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.642066][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.655814][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.671506][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.682843][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.695150][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.730061][ T5777] veth0_vlan: entered promiscuous mode [ 85.768455][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.778711][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.788233][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.797013][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.833430][ T5774] veth0_vlan: entered promiscuous mode [ 85.844270][ T5777] veth1_vlan: entered promiscuous mode [ 85.852648][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.864748][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.935907][ T5774] veth1_vlan: entered promiscuous mode [ 85.947863][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.956976][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.001546][ T5777] veth0_macvtap: entered promiscuous mode [ 86.032712][ T5777] veth1_macvtap: entered promiscuous mode [ 86.064935][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.084570][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.121997][ T5774] veth0_macvtap: entered promiscuous mode [ 86.159469][ T5774] veth1_macvtap: entered promiscuous mode [ 86.190609][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.213449][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.224964][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.236497][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.249156][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.301304][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.321316][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.335545][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.346342][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.358358][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.368505][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.370300][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.379943][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.389659][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.406327][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.418367][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.429469][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.441049][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.454808][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.480647][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.498131][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.508651][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.518607][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.532476][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.549780][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.559854][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.570539][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.582743][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.593992][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.607484][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.637196][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.649067][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.660254][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.669507][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.843404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.853475][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.896586][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.906037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.990325][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.018609][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.038003][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.050708][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.244918][ T5784] Bluetooth: hci2: command tx timeout [ 87.244950][ T5786] Bluetooth: hci3: command tx timeout [ 87.250429][ T5784] Bluetooth: hci0: command tx timeout [ 87.807162][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.923105][ T5784] Bluetooth: hci1: command tx timeout [ 89.324442][ T5784] Bluetooth: hci3: command tx timeout [ 89.330781][ T5784] Bluetooth: hci0: command tx timeout [ 89.339460][ T5784] Bluetooth: hci2: command tx timeout [ 90.214722][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 90.724283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 91.118546][ T5788] Bluetooth: hci1: command tx timeout [ 92.551648][ T9] cfg80211: failed to load regulatory.db [ 97.734219][ C0] sched: RT throttling activated [ 98.130997][ T177] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.646831][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 100.555212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 100.964835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.771459][ T5944] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 105.375402][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 106.354766][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.341406][ T5992] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 113.125526][ T6029] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 128.714290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 129.381558][ T6191] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 131.173130][ T6224] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 133.461240][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.468265][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.242195][ T6247] CUSE: unknown device info "" [ 134.248527][ T6247] CUSE: unknown device info "" [ 134.253428][ T6247] CUSE: unknown device info "" [ 134.258759][ T6247] CUSE: unknown device info "" [ 134.263691][ T6247] CUSE: unknown device info "ÿ" [ 134.268722][ T6247] CUSE: zero length info key specified [ 135.163931][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 136.529556][ T6268] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 138.274019][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 138.954303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 143.056148][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 146.635149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 147.114641][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 149.746866][ T6340] syz.0.151 (6340): drop_caches: 2 [ 150.774596][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 154.775473][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 157.176662][ T6424] CUSE: unknown device info "" [ 157.182623][ T6424] CUSE: unknown device info "" [ 157.187949][ T6424] CUSE: unknown device info "" [ 157.192844][ T6424] CUSE: unknown device info "" [ 157.197860][ T6424] CUSE: unknown device info "ÿ" [ 157.202852][ T6424] CUSE: zero length info key specified [ 158.664555][ T6409] syz.2.173 (6409): drop_caches: 2 [ 160.465828][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 163.608452][ T6466] vxcan2: entered allmulticast mode [ 165.443645][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 167.664131][ T6470] syz.3.191 (6470): drop_caches: 2 [ 168.699425][ T6498] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 170.494389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 171.114822][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 172.313308][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 175.172904][ T6538] syz.0.209 (6538): drop_caches: 2 [ 175.614379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 177.355137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 177.764745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 178.634859][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 180.742406][ T6581] syz.0.223 (6581): drop_caches: 2 [ 183.799466][ T6613] netlink: 80 bytes leftover after parsing attributes in process `syz.2.221'. [ 185.447980][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 187.934316][ T5764] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 188.124307][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 188.139018][ T5764] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.163977][ T5764] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.182153][ T5764] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 188.193183][ T5764] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.260304][ T5764] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.286522][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.363540][ T5764] usbtmc 2-1:16.0: bulk endpoints not found [ 189.022854][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 191.377716][ T5853] usb 2-1: USB disconnect, device number 2 [ 192.303463][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 194.610552][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.617256][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.810799][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 195.386431][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 198.114816][ T5853] kernel write not supported for file /video8 (pid: 5853 comm: kworker/1:7) [ 198.736882][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 200.013631][ T6750] capability: warning: `syz.2.276' uses 32-bit capabilities (legacy support in use) [ 201.970852][ T6761] sctp: failed to load transform for md5: -2 [ 202.685030][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 204.504317][ T5845] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 204.719652][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 204.822832][ T5845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.010315][ T5845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 132, changing to 7 [ 205.186990][ T5845] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 205.246206][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.318894][ T5845] usb 4-1: Product: syz [ 205.360108][ T5845] usb 4-1: Manufacturer: syz [ 205.402123][ T5845] usb 4-1: SerialNumber: syz [ 205.691199][ T5845] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 205.776520][ T5845] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 205.819627][ T5845] usb 4-1: USB disconnect, device number 2 [ 205.869916][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.894530][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 206.136729][ T5853] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 206.153147][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.161354][ T5853] usb 3-1: Product: syz [ 206.165966][ T5853] usb 3-1: Manufacturer: syz [ 206.173845][ T5853] usb 3-1: SerialNumber: syz [ 206.840576][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 208.195425][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 208.201709][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 208.203771][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 208.207930][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 208.481421][ T5853] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 210.493763][ T5853] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 210.532464][ T5853] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 210.598861][ T5853] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 210.772446][ T5853] lan78xx: probe of 3-1:1.0 failed with error -71 [ 211.112146][ T5853] usb 3-1: USB disconnect, device number 2 [ 211.725191][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 212.479266][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 215.116731][ T6852] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 215.125560][ T6852] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 217.460149][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 221.844067][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 223.982304][ T6933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.327'. [ 224.006220][ T6933] ======================================================= [ 224.006220][ T6933] WARNING: The mand mount option has been deprecated and [ 224.006220][ T6933] and is ignored by this kernel. Remove the mand [ 224.006220][ T6933] option from the mount to silence this warning. [ 224.006220][ T6933] ======================================================= [ 224.044606][ T6933] syz.0.327: attempt to access beyond end of device [ 224.044606][ T6933] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 224.060035][ T6933] syz.0.327: attempt to access beyond end of device [ 224.060035][ T6933] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 224.073015][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 224.083141][ T6933] syz.0.327: attempt to access beyond end of device [ 224.083141][ T6933] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 224.096064][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 224.105680][ T6933] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 224.113344][ T6933] UDF-fs: Scanning with blocksize 512 failed [ 224.120887][ T6933] syz.0.327: attempt to access beyond end of device [ 224.120887][ T6933] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 224.133976][ T6933] syz.0.327: attempt to access beyond end of device [ 224.133976][ T6933] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 224.146918][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 224.157980][ T6933] syz.0.327: attempt to access beyond end of device [ 224.157980][ T6933] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 224.170990][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 224.180597][ T6933] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 224.188867][ T6933] UDF-fs: Scanning with blocksize 1024 failed [ 224.195732][ T6933] syz.0.327: attempt to access beyond end of device [ 224.195732][ T6933] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 224.208834][ T6933] syz.0.327: attempt to access beyond end of device [ 224.208834][ T6933] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 224.221841][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 224.232237][ T6933] syz.0.327: attempt to access beyond end of device [ 224.232237][ T6933] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 224.245322][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 224.256132][ T6933] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 224.263832][ T6933] UDF-fs: Scanning with blocksize 2048 failed [ 224.271369][ T6933] syz.0.327: attempt to access beyond end of device [ 224.271369][ T6933] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 224.284681][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 224.294516][ T6933] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 224.304114][ T6933] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 224.311850][ T6933] UDF-fs: Scanning with blocksize 4096 failed [ 224.317976][ T6933] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 226.595098][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 230.183917][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 233.943046][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 238.682288][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 242.501505][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 255.038299][ T7182] comedi comedi1: board detection failed [ 255.106878][ T7184] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 256.054880][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.061274][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.360306][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 265.359897][ T7226] Zero length message leads to an empty skb [ 268.134297][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 271.740352][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 275.153481][ T27] audit: type=1326 audit(1786857263.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.232835][ T27] audit: type=1326 audit(1786857263.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.339912][ T27] audit: type=1326 audit(1786857263.303:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.416488][ T27] audit: type=1326 audit(1786857263.333:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.545085][ T27] audit: type=1326 audit(1786857263.333:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.682313][ T27] audit: type=1326 audit(1786857263.333:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.851115][ T27] audit: type=1326 audit(1786857263.343:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.933858][ T27] audit: type=1326 audit(1786857263.343:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 275.967208][ T27] audit: type=1326 audit(1786857263.343:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 276.019639][ T27] audit: type=1326 audit(1786857263.353:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.1.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7ff9b539e0d9 code=0x7ffc0000 [ 276.884539][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 280.304531][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 283.924251][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 284.124366][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 284.131714][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.152072][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.167045][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.179706][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.195284][ T23] usb 2-1: config 0 descriptor?? [ 284.211870][ T23] hub 2-1:0.0: USB hub found [ 284.416155][ T23] hub 2-1:0.0: 1 port detected [ 285.053197][ T9] usb 2-1: USB disconnect, device number 3 [ 285.053641][ T23] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 288.714854][ T23] IPVS: starting estimator thread 0... [ 288.901646][ T7476] IPVS: using max 15 ests per chain, 36000 per kthread [ 290.024497][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 290.244360][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 290.258105][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.269962][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.280489][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 290.290098][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.301818][ T23] usb 4-1: config 0 descriptor?? [ 290.322379][ T23] hub 4-1:0.0: USB hub found [ 290.551334][ T23] hub 4-1:0.0: 1 port detected [ 290.881378][ T7502] tmpfs: Bad value for 'mpol' [ 291.207355][ T23] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 291.214596][ T5818] usb 4-1: USB disconnect, device number 3 [ 291.939098][ T9] IPVS: starting estimator thread 0... [ 293.494829][ T7520] IPVS: using max 15 ests per chain, 36000 per kthread [ 294.069105][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 296.638455][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 296.638474][ T27] audit: type=1326 audit(1786857284.703:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.513" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6b9e0d9 code=0x7fc00000 [ 303.359369][ T5830] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 303.576957][ T5830] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 303.596098][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.624019][ T5830] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 303.636856][ T5830] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 303.654248][ T5830] usb 1-1: Manufacturer: syz [ 303.669057][ T5830] usb 1-1: config 0 descriptor?? [ 303.814259][ T5830] rc_core: IR keymap rc-hauppauge not found [ 303.826314][ T5830] Registered IR keymap rc-empty [ 303.846726][ T5830] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 303.876447][ T5830] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 303.910209][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 303.928092][ T5830] usb 1-1: USB disconnect, device number 3 [ 304.800444][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.549'. [ 307.261493][ T27] audit: type=1326 audit(1786857295.293:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.0.552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff259e0d9 code=0x7fc00000 [ 307.628536][ T5830] IPVS: starting estimator thread 0... [ 307.770030][ T7685] IPVS: using max 17 ests per chain, 40800 per kthread [ 310.592431][ T7706] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.560'. [ 313.615716][ T5845] IPVS: starting estimator thread 0... [ 314.016393][ T7742] IPVS: using max 16 ests per chain, 38400 per kthread [ 317.489837][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.496717][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.699486][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'. [ 323.746874][ T27] audit: type=1326 audit(1786857311.383:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.1.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7fc00000 [ 324.234366][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 329.809422][ T27] audit: type=1326 audit(1786857317.683:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.1.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b539e0d9 code=0x7fc00000 [ 352.599463][ T27] audit: type=1326 audit(1786857340.443:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.0.650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff259e0d9 code=0x7fc00000 [ 356.710261][ T27] audit: type=1326 audit(1786857344.533:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7fc00000 [ 356.810345][ T5845] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 357.516760][ T5845] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.534415][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.556877][ T5845] usb 3-1: config 0 descriptor?? [ 357.576408][ T5845] cp210x 3-1:0.0: cp210x converter detected [ 358.002892][ T5845] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 358.049310][ T5845] usb 3-1: cp210x converter now attached to ttyUSB0 [ 358.368915][ T5845] usb 3-1: USB disconnect, device number 3 [ 358.445926][ T5845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.529189][ T5845] cp210x 3-1:0.0: device disconnected [ 370.811773][ T8179] loop6: detected capacity change from 0 to 524288000 [ 370.885437][ T8179] loop6: detected capacity change from 524288000 to 1 [ 370.908790][ C1] I/O error, dev loop6, sector 524287984 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.934135][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.965597][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.975030][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.022083][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.031371][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.041458][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.050868][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.059998][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.069237][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.083903][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.093180][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.107231][ T8179] ldm_validate_partition_table(): Disk read failed. [ 371.123851][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.133144][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.223375][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.232735][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.246913][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.256275][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.267533][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.278684][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 371.308227][ T8179] Dev loop6: unable to read RDB block 0 [ 371.414057][ T8179] loop6: unable to read partition table [ 371.493370][ T8179] loop6: partition table beyond EOD, truncated [ 371.592882][ T8179] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 373.508757][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 373.892250][ T5822] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.205016][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.339285][ T5822] usb 2-1: config 0 descriptor?? [ 374.399316][ T5822] cp210x 2-1:0.0: cp210x converter detected [ 376.627069][ T5822] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 376.647740][ T5822] cp210x 2-1:0.0: querying part number failed [ 376.669660][ T5822] usb 2-1: cp210x converter now attached to ttyUSB0 [ 376.721567][ T5822] usb 2-1: USB disconnect, device number 4 [ 376.773953][ T5822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.817508][ T8216] netlink: 104 bytes leftover after parsing attributes in process `syz.1.706'. [ 376.824752][ T5822] cp210x 2-1:0.0: device disconnected [ 378.325511][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 379.218036][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.224530][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.199134][ T8243] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.710'. [ 382.422581][ C0] blk_print_req_error: 12 callbacks suppressed [ 382.422610][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.438076][ C0] buffer_io_error: 9 callbacks suppressed [ 382.438090][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.547837][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.557098][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.584143][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.593361][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.602487][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.611677][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.620841][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.630053][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.638103][ T5140] ldm_validate_partition_table(): Disk read failed. [ 382.649555][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.658763][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.686808][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.696059][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.712049][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.721282][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.730323][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.740027][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.747966][ T5140] Dev loop6: unable to read RDB block 0 [ 382.759000][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.768209][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 382.795374][ T5140] loop6: unable to read partition table [ 383.330995][ T5140] loop6: partition table beyond EOD, truncated [ 385.485054][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 394.364373][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 394.604351][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 394.687819][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 394.742577][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.959668][ T23] usb 3-1: config 0 descriptor?? [ 395.206804][ T23] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 396.072056][ C0] blk_print_req_error: 9 callbacks suppressed [ 396.072073][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.087447][ C0] buffer_io_error: 8 callbacks suppressed [ 396.087460][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.103640][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.112868][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.124604][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.133889][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.142528][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.151757][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.164272][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.173440][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.192663][ T5140] ldm_validate_partition_table(): Disk read failed. [ 396.209987][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.219270][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.228178][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.237541][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.245685][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.254870][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.263979][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.273175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.281722][ T5140] Dev loop6: unable to read RDB block 0 [ 396.291100][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.293332][ T23] gspca_sonixj: reg_w1 err -71 [ 396.300385][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.334974][ T5140] loop6: unable to read partition table [ 396.341040][ T5140] loop6: partition table beyond EOD, truncated [ 396.944433][ T23] sonixj: probe of 3-1:0.0 failed with error -71 [ 397.004357][ T23] usb 3-1: USB disconnect, device number 4 [ 410.608200][ T8414] Bluetooth: MGMT ver 1.22 [ 411.437417][ T8419] netlink: 'syz.2.755': attribute type 3 has an invalid length. [ 411.447751][ T8419] netlink: 1496 bytes leftover after parsing attributes in process `syz.2.755'. [ 417.159969][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 417.169126][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 417.354509][ T8452] netlink: 'syz.2.771': attribute type 5 has an invalid length. [ 418.073935][ T8452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.083148][ T8452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.091951][ T8452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.102025][ T8452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.130375][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 418.142844][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 418.159045][ T8452] netlink: 'syz.2.771': attribute type 5 has an invalid length. [ 424.214929][ T42] kernel write not supported for file /input/mice (pid: 42 comm: kworker/1:1) [ 428.055838][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.066810][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.078517][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.088055][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.097732][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.106576][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.558445][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 428.861752][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.905682][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.915315][ T8522] bridge_slave_0: entered allmulticast mode [ 428.965865][ T8522] bridge_slave_0: entered promiscuous mode [ 428.996193][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.003465][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.022135][ T8522] bridge_slave_1: entered allmulticast mode [ 429.042006][ T8522] bridge_slave_1: entered promiscuous mode [ 429.228847][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.248131][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.374904][ T8522] team0: Port device team_slave_0 added [ 429.435352][ T8522] team0: Port device team_slave_1 added [ 429.562119][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.580537][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.634220][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.284331][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.365994][ T5784] Bluetooth: hci4: command tx timeout [ 430.399608][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.495939][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.618030][ T8522] hsr_slave_0: entered promiscuous mode [ 430.685371][ T8522] hsr_slave_1: entered promiscuous mode [ 430.701652][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.721667][ T8522] Cannot create hsr debugfs directory [ 432.728393][ T5784] Bluetooth: hci4: command tx timeout [ 432.801124][ T8522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.852876][ T8522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.911489][ T8522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.947467][ T8522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.141909][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.178137][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.200496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.207730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.241925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.249114][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.553706][ T8572] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 434.762848][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.774864][ T5784] Bluetooth: hci4: command tx timeout [ 435.527822][ T8522] veth0_vlan: entered promiscuous mode [ 435.550452][ T8522] veth1_vlan: entered promiscuous mode [ 435.666261][ T8522] veth0_macvtap: entered promiscuous mode [ 435.706589][ T8522] veth1_macvtap: entered promiscuous mode [ 435.769160][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.782179][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.802409][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.824133][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.834018][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.851188][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.861437][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.879218][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.907800][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.952180][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.964644][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.984174][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.002261][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.012497][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.035716][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.060517][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.081472][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.103725][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.147051][ T8522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.164487][ T8522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.173298][ T8522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.202453][ T8522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.414858][ T5784] Bluetooth: hci4: command tx timeout [ 437.494292][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.502180][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.230797][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.239420][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.221910][ T8635] ================================================================== [ 440.230054][ T8635] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 440.237930][ T8635] Read of size 8 at addr ffff888142a53018 by task syz.3.813/8635 [ 440.245669][ T8635] [ 440.248017][ T8635] CPU: 1 PID: 8635 Comm: syz.3.813 Not tainted syzkaller #0 [ 440.255321][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.265406][ T8635] Call Trace: [ 440.268714][ T8635] [ 440.271666][ T8635] dump_stack_lvl+0x18c/0x250 [ 440.276455][ T8635] ? read_lock_is_recursive+0x20/0x20 [ 440.281914][ T8635] ? show_regs_print_info+0x20/0x20 [ 440.287145][ T8635] ? load_image+0x420/0x420 [ 440.291720][ T8635] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 440.297294][ T8635] ? __virt_addr_valid+0x10c/0x380 [ 440.302468][ T8635] ? __virt_addr_valid+0x10c/0x380 [ 440.307620][ T8635] ? __virt_addr_valid+0x10c/0x380 [ 440.312769][ T8635] print_report+0xa8/0x210 [ 440.317219][ T8635] ? dvb_device_open+0xc9/0x360 [ 440.322100][ T8635] kasan_report+0x117/0x150 [ 440.326678][ T8635] ? chrdev_open+0x385/0x600 [ 440.331301][ T8635] ? dvb_device_open+0xc9/0x360 [ 440.336190][ T8635] dvb_device_open+0xc9/0x360 [ 440.340899][ T8635] chrdev_open+0x58c/0x600 [ 440.345351][ T8635] ? cd_forget+0x160/0x160 [ 440.349812][ T8635] ? fsnotify_perm+0x3ed/0x5e0 [ 440.354684][ T8635] do_dentry_open+0x880/0x14b0 [ 440.359514][ T8635] ? cd_forget+0x160/0x160 [ 440.363972][ T8635] path_openat+0x284f/0x3270 [ 440.368612][ T8635] ? verify_lock_unused+0x140/0x140 [ 440.373850][ T8635] ? do_filp_open+0x430/0x430 [ 440.378567][ T8635] do_filp_open+0x1f2/0x430 [ 440.383115][ T8635] ? vfs_tmpfile+0x620/0x620 [ 440.387742][ T8635] ? _raw_spin_unlock+0x28/0x40 [ 440.392634][ T8635] ? alloc_fd+0x590/0x640 [ 440.397022][ T8635] do_sys_openat2+0x134/0x1d0 [ 440.401737][ T8635] ? do_sys_open+0xe0/0xe0 [ 440.406226][ T8635] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 440.412238][ T8635] ? lock_chain_count+0x20/0x20 [ 440.417208][ T8635] __x64_sys_openat+0x139/0x160 [ 440.422108][ T8635] do_syscall_64+0x55/0xb0 [ 440.426623][ T8635] ? clear_bhb_loop+0x40/0x90 [ 440.431377][ T8635] ? clear_bhb_loop+0x40/0x90 [ 440.436085][ T8635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.442009][ T8635] RIP: 0033:0x7fa3f875e90e [ 440.446464][ T8635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 440.466104][ T8635] RSP: 002b:00007fa3f96c5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.474551][ T8635] RAX: ffffffffffffffda RBX: 00007fa3f96c66c0 RCX: 00007fa3f875e90e [ 440.482550][ T8635] RDX: 0000000000040002 RSI: 00007fa3f96c5c00 RDI: ffffffffffffff9c [ 440.490549][ T8635] RBP: 00007fa3f96c5c00 R08: 0000000000000000 R09: 0000000000000000 [ 440.498543][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 440.506554][ T8635] R13: 00007fa3f8a26128 R14: 00007fa3f8a26090 R15: 00007ffc4fbf5c88 [ 440.514549][ T8635] [ 440.517562][ T8635] [ 440.519874][ T8635] Allocated by task 1: [ 440.523943][ T8635] kasan_set_track+0x4e/0x70 [ 440.528534][ T8635] __kasan_kmalloc+0x8f/0xa0 [ 440.533118][ T8635] dvb_register_device+0x309/0x1df0 [ 440.538490][ T8635] dvb_register_frontend+0x62d/0x900 [ 440.543780][ T8635] vidtv_bridge_probe+0x9d6/0xf60 [ 440.548872][ T8635] platform_probe+0x13b/0x1c0 [ 440.553560][ T8635] really_probe+0x247/0xae0 [ 440.558075][ T8635] __driver_probe_device+0x1f5/0x390 [ 440.563361][ T8635] driver_probe_device+0x4f/0x420 [ 440.568380][ T8635] __driver_attach+0x444/0x6d0 [ 440.573141][ T8635] bus_for_each_dev+0x235/0x2b0 [ 440.577986][ T8635] bus_add_driver+0x340/0x630 [ 440.582663][ T8635] driver_register+0x23a/0x310 [ 440.587420][ T8635] vidtv_bridge_init+0x49/0x80 [ 440.592270][ T8635] do_one_initcall+0x242/0x790 [ 440.597048][ T8635] do_initcall_level+0x13d/0x1f0 [ 440.602058][ T8635] do_initcalls+0x69/0xd0 [ 440.606408][ T8635] kernel_init_freeable+0x3d9/0x560 [ 440.611614][ T8635] kernel_init+0x1d/0x1c0 [ 440.615961][ T8635] ret_from_fork+0x48/0x80 [ 440.620394][ T8635] ret_from_fork_asm+0x11/0x20 [ 440.625172][ T8635] [ 440.627538][ T8635] Freed by task 8572: [ 440.631530][ T8635] kasan_set_track+0x4e/0x70 [ 440.636142][ T8635] kasan_save_free_info+0x28/0x40 [ 440.641184][ T8635] ____kasan_slab_free+0x126/0x1f0 [ 440.646302][ T8635] slab_free_freelist_hook+0x130/0x1a0 [ 440.651760][ T8635] __kmem_cache_free+0xba/0x1f0 [ 440.656613][ T8635] dvb_device_open+0x2d9/0x360 [ 440.661388][ T8635] chrdev_open+0x58c/0x600 [ 440.665806][ T8635] do_dentry_open+0x880/0x14b0 [ 440.670566][ T8635] path_openat+0x284f/0x3270 [ 440.675161][ T8635] do_filp_open+0x1f2/0x430 [ 440.679684][ T8635] do_sys_openat2+0x134/0x1d0 [ 440.684373][ T8635] __x64_sys_openat+0x139/0x160 [ 440.689232][ T8635] do_syscall_64+0x55/0xb0 [ 440.693642][ T8635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.699545][ T8635] [ 440.701869][ T8635] The buggy address belongs to the object at ffff888142a53000 [ 440.701869][ T8635] which belongs to the cache kmalloc-256 of size 256 [ 440.715927][ T8635] The buggy address is located 24 bytes inside of [ 440.715927][ T8635] freed 256-byte region [ffff888142a53000, ffff888142a53100) [ 440.729649][ T8635] [ 440.731972][ T8635] The buggy address belongs to the physical page: [ 440.738395][ T8635] page:ffffea00050a9480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142a52 [ 440.748631][ T8635] head:ffffea00050a9480 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 440.757578][ T8635] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 440.765636][ T8635] page_type: 0xffffffff() [ 440.769972][ T8635] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 440.778568][ T8635] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 440.787142][ T8635] page dumped because: kasan: bad access detected [ 440.793644][ T8635] page_owner tracks the page as allocated [ 440.799374][ T8635] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17060461803, free_ts 0 [ 440.819180][ T8635] post_alloc_hook+0x1c1/0x200 [ 440.823996][ T8635] get_page_from_freelist+0x2181/0x22a0 [ 440.829548][ T8635] __alloc_pages+0x1f0/0x460 [ 440.834161][ T8635] alloc_page_interleave+0x24/0x1e0 [ 440.839356][ T8635] alloc_slab_page+0x5d/0x180 [ 440.844024][ T8635] new_slab+0x87/0x2d0 [ 440.848092][ T8635] ___slab_alloc+0xc5c/0x12f0 [ 440.852763][ T8635] __kmem_cache_alloc_node+0x11f/0x250 [ 440.858222][ T8635] kmalloc_trace+0x2a/0xe0 [ 440.862657][ T8635] bus_add_driver+0x162/0x630 [ 440.867359][ T8635] driver_register+0x23a/0x310 [ 440.872140][ T8635] usb_register_driver+0x205/0x3c0 [ 440.877285][ T8635] sd_mod_init+0x1e/0x30 [ 440.881540][ T8635] do_one_initcall+0x242/0x790 [ 440.886484][ T8635] do_initcall_level+0x13d/0x1f0 [ 440.891417][ T8635] do_initcalls+0x69/0xd0 [ 440.895746][ T8635] page_owner free stack trace missing [ 440.901105][ T8635] [ 440.903421][ T8635] Memory state around the buggy address: [ 440.909044][ T8635] ffff888142a52f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.917098][ T8635] ffff888142a52f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.925154][ T8635] >ffff888142a53000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.933209][ T8635] ^ [ 440.938068][ T8635] ffff888142a53080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.946131][ T8635] ffff888142a53100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.954183][ T8635] ================================================================== [ 441.086425][ T8635] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 441.093695][ T8635] CPU: 1 PID: 8635 Comm: syz.3.813 Not tainted syzkaller #0 [ 441.101008][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.111091][ T8635] Call Trace: [ 441.114414][ T8635] [ 441.117367][ T8635] dump_stack_lvl+0x18c/0x250 [ 441.122083][ T8635] ? show_regs_print_info+0x20/0x20 [ 441.127310][ T8635] ? load_image+0x420/0x420 [ 441.131851][ T8635] panic+0x2ca/0x720 [ 441.135779][ T8635] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.141969][ T8635] ? bpf_jit_dump+0xd0/0xd0 [ 441.146509][ T8635] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 441.152536][ T8635] ? _raw_spin_unlock+0x40/0x40 [ 441.157427][ T8635] ? dvb_device_open+0xc9/0x360 [ 441.162315][ T8635] check_panic_on_warn+0x84/0xa0 [ 441.167310][ T8635] ? dvb_device_open+0xc9/0x360 [ 441.172193][ T8635] end_report+0x6f/0x130 [ 441.176468][ T8635] kasan_report+0x128/0x150 [ 441.181003][ T8635] ? chrdev_open+0x385/0x600 [ 441.185625][ T8635] ? dvb_device_open+0xc9/0x360 [ 441.190504][ T8635] dvb_device_open+0xc9/0x360 [ 441.195223][ T8635] chrdev_open+0x58c/0x600 [ 441.199668][ T8635] ? cd_forget+0x160/0x160 [ 441.204115][ T8635] ? fsnotify_perm+0x3ed/0x5e0 [ 441.208911][ T8635] do_dentry_open+0x880/0x14b0 [ 441.213706][ T8635] ? cd_forget+0x160/0x160 [ 441.218152][ T8635] path_openat+0x284f/0x3270 [ 441.222872][ T8635] ? verify_lock_unused+0x140/0x140 [ 441.228099][ T8635] ? do_filp_open+0x430/0x430 [ 441.232827][ T8635] do_filp_open+0x1f2/0x430 [ 441.237359][ T8635] ? vfs_tmpfile+0x620/0x620 [ 441.241989][ T8635] ? _raw_spin_unlock+0x28/0x40 [ 441.246878][ T8635] ? alloc_fd+0x590/0x640 [ 441.251243][ T8635] do_sys_openat2+0x134/0x1d0 [ 441.255957][ T8635] ? do_sys_open+0xe0/0xe0 [ 441.260408][ T8635] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 441.266419][ T8635] ? lock_chain_count+0x20/0x20 [ 441.271306][ T8635] __x64_sys_openat+0x139/0x160 [ 441.276192][ T8635] do_syscall_64+0x55/0xb0 [ 441.280655][ T8635] ? clear_bhb_loop+0x40/0x90 [ 441.285360][ T8635] ? clear_bhb_loop+0x40/0x90 [ 441.290068][ T8635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.295986][ T8635] RIP: 0033:0x7fa3f875e90e [ 441.300433][ T8635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.320067][ T8635] RSP: 002b:00007fa3f96c5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 441.328510][ T8635] RAX: ffffffffffffffda RBX: 00007fa3f96c66c0 RCX: 00007fa3f875e90e [ 441.336514][ T8635] RDX: 0000000000040002 RSI: 00007fa3f96c5c00 RDI: ffffffffffffff9c [ 441.344520][ T8635] RBP: 00007fa3f96c5c00 R08: 0000000000000000 R09: 0000000000000000 [ 441.352520][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 441.360521][ T8635] R13: 00007fa3f8a26128 R14: 00007fa3f8a26090 R15: 00007ffc4fbf5c88 [ 441.368532][ T8635] [ 441.371900][ T8635] Kernel Offset: disabled [ 441.376229][ T8635] Rebooting in 86400 seconds..