last executing test programs: 1m5.298045243s ago: executing program 4 (id=2229): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 1m3.984898407s ago: executing program 4 (id=2233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fadvise64(r1, 0x8, 0x4000000, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getuid() getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) stat(&(0x7f00000000c0)='./file0/file0/..\x00', 0x0) fcntl$getownex(r2, 0x10, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000200)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000180)='./file0/file0/..\x00', 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68060200) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) lseek(r5, 0x9, 0x0) 23.715622179s ago: executing program 3 (id=2292): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = creat(0x0, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x10}}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711637000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$HCIINQUIRY(r10, 0x800448f0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x58}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf37", @ANYRES16], 0xfc}}, 0x0) 22.844960562s ago: executing program 0 (id=2294): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_notify(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x338, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r3 = gettid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000002140)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "64f30ea84907e175d5966472c23d26ce8d6f3c"}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000300)=""/185, 0xb1}], 0x1e8) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000100737b7a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800050e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a3000000000140000001000010000000000000000000000000a2e7d05371fa68a4752874e772e5acd85be0a7273e3ec9b247dd5179b000000000000000000"], 0xc8}}, 0x8000) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r9, 0x540a, 0x3) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{}, 0xee, 0x0, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x48}, 0x2}, 0x40000) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0), 0x8) epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 22.494262106s ago: executing program 3 (id=2295): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d3131cc"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab97fc979fd1e00d96072000001ea89de2b7fb0900000080b8785d9600010000000000eeffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177c54e98dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x1000000]}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0x11, 0x21, 0x10, 0xb95, 0x178a, 0xfc30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) socket$inet6(0xa, 0x1, 0x0) close(r6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, 0x0) 18.987026841s ago: executing program 1 (id=2298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10021, 0x9, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) ioctl$sock_netdev_private(r7, 0x89f5, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r6, 0x541b, &(0x7f0000000100)) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01c5baf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea880fc7a20068bafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c744c35f00d93f19000066c7442402000001006766c744240600000000670f050924", 0x7a}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x125f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x66, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x4}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000900feff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 18.985761357s ago: executing program 3 (id=2299): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 18.42828654s ago: executing program 3 (id=2301): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) recvmmsg(r3, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup3(r7, r8, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1}, 0x1c) r10 = dup(r2) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="745361ff733d66642c070000006f1184e71b07113b2f89e5506511035ad4d34e7b89715c66dd23dcac03352e75305b530ab4d78ec5042cdcf86cfb4c20c13144b3fbe0bcf24165f87414116624791be547c75d8e8038327d0cbd75c90a3e16a574cbcbae404e3fce1004fd53466d74aa2f6c5b157a5d8a1a4005", @ANYRESHEX=r1, @ANYRESOCT=r4]) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r12 = dup(r11) connect$can_bcm(r12, &(0x7f0000000180), 0x10) 16.994039746s ago: executing program 0 (id=2302): r0 = socket(0x2c, 0x3, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000980)={0x33c05f29, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000480)=""/40, 0x28}, {0x0}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/39, 0x27}, {&(0x7f0000000840)=""/65, 0x41}, {0x0}, {&(0x7f0000000a40)=""/161, 0xa1}], 0x8}, 0x40008141) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000740)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x2400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) process_vm_readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/237, 0xed}], 0x1, &(0x7f00000003c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x40600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x4, 0x36, 0x0, 0x1, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x7, @void, @value, @void, @value}, 0x48) getsockopt$bt_BT_SECURITY(r0, 0x11b, 0x4, 0x0, 0x7a9bd347011c1783) 15.923218614s ago: executing program 0 (id=2304): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="fb002dc9"], 0x64}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 13.236198346s ago: executing program 1 (id=2306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xffff219d}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0xfdff, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_lifetime={0x4, 0x4}, @sadb_lifetime={0x4, 0x3}]}, 0x98}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfffffdef, 0x0) listen(r0, 0x400) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) close(r0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12.778062378s ago: executing program 3 (id=2308): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d3131cc"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab97fc979fd1e00d96072000001ea89de2b7fb0900000080b8785d9600010000000000eeffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177c54e98dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x1000000]}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0x11, 0x21, 0x10, 0xb95, 0x178a, 0xfc30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) socket$inet6(0xa, 0x1, 0x0) close(r6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, 0x0) 12.552378466s ago: executing program 2 (id=2309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) epoll_create(0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x473a, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_clone(0x1100080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioprio_set$pid(0x3, r3, 0x6000) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x240480, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100000009000300739c7a320000000014000480080002400000000008000140000000050900010073797a310000000044000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000018000480140003"], 0xcc}}, 0x0) 11.617912185s ago: executing program 4 (id=2245): rt_sigtimedwait(0x0, &(0x7f0000000380), 0x0, 0x0) 11.523140427s ago: executing program 0 (id=2310): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 11.399257308s ago: executing program 1 (id=2311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = io_uring_setup(0x55f0, &(0x7f0000000480)={0x0, 0xfffffffd, 0x100, 0x8000002, 0xffffffff}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x4011}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2080c0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5452, 0x20001439) epoll_pwait2(r3, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, &(0x7f0000000340), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), 0x0) 11.331180779s ago: executing program 4 (id=2312): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r6 = dup(r5) write$char_usb(r6, &(0x7f0000000240)="259772bd9402000000000000008c19f3da78ce7f427cb49491881fac78851681a78c8049cbb19337f4077f7ec86308", 0x2f) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r8, 0x107, 0xe, 0x0, 0x209fffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4809) 10.393534007s ago: executing program 0 (id=2313): r0 = socket(0x2c, 0x3, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000980)={0x33c05f29, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000480)=""/40, 0x28}, {0x0}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/39, 0x27}, {&(0x7f0000000840)=""/65, 0x41}, {0x0}, {&(0x7f0000000a40)=""/161, 0xa1}], 0x8}, 0x40008141) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000740)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2400) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) process_vm_readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/237, 0xed}], 0x1, &(0x7f00000003c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x40600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x4, 0x36, 0x0, 0x1, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x7, @void, @value, @void, @value}, 0x48) getsockopt$bt_BT_SECURITY(r0, 0x11b, 0x4, 0x0, 0x7a9bd347011c1783) 8.797833601s ago: executing program 2 (id=2314): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='-'], 0x6f) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) r1 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c403163", 0x80}], 0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1d2d, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)}, 0x2000c015) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'geneve1\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000140)) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close(r6) ioctl$UI_SET_SWBIT(r10, 0x4004556d, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) 8.645189454s ago: executing program 4 (id=2315): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d3131cc"], 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab97fc979fd1e00d96072000001ea89de2b7fb0900000080b8785d9600010000000000eeffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177c54e98dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x1000000]}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0x11, 0x21, 0x10, 0xb95, 0x178a, 0xfc30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) socket$inet6(0xa, 0x1, 0x0) close(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, 0x0) 8.153708893s ago: executing program 3 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10021, 0x9, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) ioctl$sock_netdev_private(r7, 0x89f5, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r6, 0x541b, &(0x7f0000000100)) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01c5baf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea880fc7a20068bafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c744c35f00d93f19000066c7442402000001006766c744240600000000670f050924", 0x7a}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x125f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x66, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x4}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000900feff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.017374506s ago: executing program 0 (id=2317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006480)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5de, &(0x7f0000000200), &(0x7f0000000940), 0x0) pause() io_uring_enter(r4, 0x1d2d, 0x0, 0x11, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000140)="83", 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)={0x80000007}) epoll_pwait(r5, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c1341, 0x0) 7.888275502s ago: executing program 1 (id=2318): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0406"], 0x7) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045515, &(0x7f0000002a40)) 6.825588349s ago: executing program 1 (id=2319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$getown(r2, 0x9) ptrace$setsig(0x4203, r4, 0xb, &(0x7f0000000140)={0x33, 0xfff, 0x800}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ecab5329269972f145883fef0be71d70c188594bf89a5adaef0704ad67faf87fb50d21384b2ab982aaa9178abb878db234fcee71f2a3eb772da0da2e0fcab20a94463c2dd91b3ccf1241a07660aeb4655bf29d65fb3f3c548573d096c0d15ee237570afa9fe4d0b2be5cd2ea7d3675e2e2cc0b27db4f43ac1348b2d57cec24d85817a66e968973bfb3e700c39380946e85a44c1b58a6d3df9af4f07e152ff5f615", 0xa1) setsockopt$inet_mreqsrc(r5, 0x0, 0x0, &(0x7f0000000240)={@private=0xa010100, @broadcast, @multicast1}, 0xc) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}, {&(0x7f00000003c0)="519752052311a5260200000000000200e6f5ac699cd77d1088ec6de7368c4358800540db051b40ed5fba851a35b2f753f2a227ab9858d9c3958b5511ac29371c6f0000", 0x43}, {&(0x7f0000000440)="7bbd7042b0104a0d3653857731d60f1e098a83a394b4703180cdccb591ac5af9b58bb4b7c12ad747794a7be1951cec572ae2d2ad5000d9058bb35c9eed4f2e1802214ef84e516f1db75053b02a660a0ebf36e7c077b3510c04fc00e0835bc3889908a831ccee1b1a0b348ed00949b93d3b227cf6", 0x74}], 0x3, 0x0, 0x0, 0xe0000000}, 0x20040088) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.775781919s ago: executing program 2 (id=2320): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sigaltstack(&(0x7f0000000200)={0x0, 0x180000002, 0xfffffca4}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3b) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d50101e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b15655", 0x53}, {&(0x7f0000000e80)="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", 0x166}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66675e037213753148d", 0x1f}, {&(0x7f0000000300)="f0fa7f9fdb6b5b2bcf3b9726fde35d7fddb7f048579a78bfea7c69f25c7761a8b2f46c598c3335d55333355234b6ca56afb9d929d6a2a9c8212eeaa5a4218c268263663a71b06d6fb8dadfe3e6c0b6", 0x4f}], 0x2}}], 0x2, 0x0) 5.889887937s ago: executing program 1 (id=2321): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xffff219d}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0xfdff, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_lifetime={0x4, 0x4}, @sadb_lifetime={0x4, 0x3}]}, 0x98}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfffffdef, 0x0) listen(r0, 0x400) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) close(r0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.851229619s ago: executing program 2 (id=2322): rt_sigtimedwait(0x0, &(0x7f0000000380), 0x0, 0x0) 5.644145481s ago: executing program 2 (id=2323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x26f2, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000480), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000004c0)={0x9c6, 0x4aaefb294d379cc3, 0x3ff}) syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x3d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x0, 0x130, 0x26010000, 0xc8, 0x130, 0x338, 0x220, 0x220, 0x338, 0x220, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'hsr0\x00', 'pim6reg0\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x25e}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'team_slave_0\x00'}, 0x0, 0x208, 0x270, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x8, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @mcast2, @dev, @ipv4={'\x00', '\xff\xff', @local}, @remote, @mcast1, @remote, @private0, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1, @local, @private1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000400), &(0x7f0000000140)=@udp=r1}, 0x20) 50.901421ms ago: executing program 2 (id=2324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x0, 0x48, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r4) 0s ago: executing program 4 (id=2325): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000020000061124000000000009500000000050000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000002740)=ANY=[@ANYBLOB="18150000000000000000000000000200bf15c5b5f0f5cdd50dad0f93b51c579f849dedb738769c2a7facaf7eb396514e4e43f19d79139a08cdec967b16a4dd653bf454a89095906e34d00b52608d035633984f90a3ad3addc3d90aacd0be1cfe4499cbc4407b86dd3dfea96551599f496050098438c413e5d39b5d2d7793ada922d95cdd55d99b20fccce883cc8b15a768a3a5e020c7938823343c951c7f77d30723fe41e9cfd80ec2b855a948121007db54cc34e5a2e95117acaefd63b9fbd0aabeb8d83a42dae31e7e7d49064bde94a5c65cf247ddf83e645e55f96d640ee5f75a310cd2547bf0989728dc794b1ba823adfcc15714fd9044640206d9e1b73a571bbd524d76d909a107f715b3b59d32afe35e2683e46953ce42c89c518b927469d50124be5d33aa877536a9c013f758f282178490e95b8a26eca7376d9819e48a6cf937664bbe9303caa6db87e47d511743ec9ddf7247204ef835a54dd4e805bb65a358cc91b2b72feb408a45f32376db6bccd51cdc65c218d897d23cc72b219cf2db041432b7ff6aaa5d04da10ebfd996a963f474581f029"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="8129c99b810f64ee753646543d14", 0x0, 0x0, 0x0, 0x1, 0x60, &(0x7f0000000140)='\x00', 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000080)=0x8b, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @local}, 0x1f, 0x1, 0x2, 0x5, 0xa024, 0x1}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000001c0), 0x4c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x6, 0x40, 0x3, 0x8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000001b80)={r3, &(0x7f0000001ac0), &(0x7f0000001b00)=""/114}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={0xffffffffffffffff, 0x0, &(0x7f0000000880)=@buf="dfabbe70bc78f6f5cb21521739d5e6beedc4968c40ae57e125ae5db74434746fe2817fe1925eb723b3156a8ab8df58a491b982427124fff2fda8b7e47b56f6aaa9bf6a5646638cfc4e300d33910e39371abf0ee2ab858b365a269f279dfef835974b87d1431fed4038b25229b1576b1929cc206438f217e90703ff6afd498469c6f3d1080ba46b3d2ab7a6e2dea71df3cf3ad30d37814b88af7347ec9b70ba70705b8dedc854e0f0c624925003794febc6f4ba593f77f72b86745bd021dc1a"}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="c3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000002280)="f9", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x1c8}}, {{&(0x7f0000000700)={0xa, 0x0, 0x4, @private0, 0x80}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000c00)="832fe54d9fc2fc609536537bc49e3a3ef1f51f8a1ecc4636ce6a54bdaff33dbb497766f9245f5a57aaaa74050e2b0656b28e2dabd8953afbb1ed45192023dd9438c9d562e4d1156176170c725c59b17798613fbd3a7353c0a08583271a2451a92953608b7019115a772424c4569be9", 0x6f}, {&(0x7f0000000740)="0214c0b4d8dd931cc5b3ce569a06708df480ac9312108cfac8b6b8155130a5f962fc4cbef961b27275e8372d39034313c6422fed1d6fef931fc778537e40169d30737a83711e25a76fe532ded93493ae94ee8ed358e077c86820105900ed2b39e1bd69", 0x63}, {&(0x7f0000000800)="e66c348fe075799fbad8ceb054d96b90cd1ccd62927a85b3bcf67bfe07b49bb86395966e46c3f6ff27c074ba3cd12410434966fc28", 0x35}, {&(0x7f0000000d00)="86bcd346e5e5c05a0524da32874e3b68555f70711d2ae4b8e7545159b792f358b86b9dbd8d7a07d4ecc66dc8b30a52eb3b0a4fd596301b1975c314f7b0855662b711400155f987c4d80c64009635725d0431451392002a38df09fe14e66b57d5f88773b3f171308e98f052d42aca41171e06ace369dce91e894a20ab963b65ba41cf60353cf308f3ece2939f95f8456a7717cf26d95c56411b34180450f3a61a392f1f4322e0bd2c2371de436c5eab07fed7f9300150eb2207094a1ac6b34cef78b569926a81e8", 0xc7}, {&(0x7f0000002740)}, {&(0x7f0000000840)="fd13fcd919833956ddafcd714cfc064649569523a434ef633d9d9c4c7094777fe173732c2ae51abf40", 0x29}], 0x6, &(0x7f0000002900)=ANY=[@ANYBLOB="24000000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001a00)={0xa, 0x4e20, 0x7, @empty, 0xfffffffc}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001a40)="e08c9e1b79500ea29891e5cb88fd577571e5591f0e9745e3fbe121495cf67f2d074d111827441e1fbb7beb455e3af2e819e20c15c7fda0e6bb8754dc48277698dcfcda2bb2f5691100b1f75e39dcbcdac2f6bc0cec08b1f5f7df4985a6023aa67ea596241d0505d879dc867afec182bdc42ccc9626068c233bfc1e6b663054a633626498", 0x84}, {&(0x7f0000001bc0)="e2360cead26f49af7b589519cb03f218f701725c29de08e105348304ca5c71d160bdd353123ffdfd1f8baf8cb75606748284570aad74766ad66a0988b8dba4ad03d54d339377cb1fe2d760245dc216ba90a2942b586dc3b530eb496e51bfbef3931ef3fb535e8cc45ca966e2cf7f44d0982b73ff7d7b1b07dce8be6f76a64bab8c071af00b48fa07397bfd5548353aaed32b557330faf047893666a366c48b04adb5f1af829ad100a8", 0xa9}, {&(0x7f00000009c0)="5b8a2cd997c725c6787113f327aaac1c81f0f94cf9178d273b4f5444b42933f8317cfa145286ddf7", 0x28}, {&(0x7f0000001cc0)}], 0x4}}, {{&(0x7f0000002000)={0xa, 0x4e20, 0xa, @remote, 0x5}, 0x1c, &(0x7f0000002040)=[{&(0x7f00000020c0)="8aa75d20f71047d9eb31330c7c9bad3118effa45247ca106ffb0f682d35e5df12dea408b3869b6962d97b131b68d12f496b5229b45e3d6da52f35438fa0ef1027e63c62ffdd3a2b2ef3e7e7394cebce478cb5a34615c81a3a1500d83fc88f03ed77a99a20350c8612cb5a7dd", 0x6c}, {&(0x7f0000002140)}], 0x2, &(0x7f0000002240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}], 0x18}}], 0x5, 0x4048000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000ac0)="e87516e3e21c398c5ea387f30e26e2877186e07903157db86457ba91f4bef44ade3329a8afcaaf85ca30ccdab7403843acc98ec110b608e6d8203bda0d59b64d9a00e1d2c6bf01ccec26ff877449aa87cb0870c5d7705f46436d86b76307b8b645e8977af952784399efc55c8c3eb535413049335aff0cf2d617657a5160fd5c5f206bccc794a9ba68514d017036a93c47a000b780bfa3349ceb0605c75b7f7802c75654328058d04182f2e437f9f18be26bc0f6f9e7dbf0c5fcfb36d7816624c752e2eb15f4eb655e0fa07dd097dabfd6c281668c59386a953c4aa7947aca0d3c", &(0x7f0000004740)=""/4096, 0x4}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000006c0)={0x2, 0x0, 0x8000, 0x0, 0x4}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @remote}, 0x5d}) kernel console output (not intermixed with test programs): tadv_slave_0 [ 1812.451353][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.508172][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.573810][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.611866][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.820303][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.842216][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.388695][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.480475][T12004] IPVS: starting estimator thread 0... [ 1813.493346][T13516] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1813.807580][T13516] Bluetooth: hci8: command tx timeout [ 1813.829831][T18916] IPVS: using max 16 ests per chain, 38400 per kthread [ 1813.846841][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.876210][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.922119][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.934026][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.962224][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.999700][T18495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.095444][T18495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.155535][T18495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.167847][T18495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.178184][T18495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.200738][ T29] audit: type=1326 audit(1726425205.311:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18920 comm="syz.0.1905" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1533d7def9 code=0x0 [ 1814.261813][T18925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1814.406233][T18930] loop2: detected capacity change from 0 to 7 [ 1814.414566][T18930] Dev loop2: unable to read RDB block 7 [ 1814.421957][T18930] loop2: unable to read partition table [ 1814.427907][T18930] loop2: partition table beyond EOD, truncated [ 1814.434601][T18930] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1814.742916][T14072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.774407][T14072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.843805][T18931] netlink: 'syz.1.1907': attribute type 10 has an invalid length. [ 1814.894037][T18931] batman_adv: batadv0: Adding interface: team0 [ 1814.900660][T18931] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.928299][T18931] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1814.990383][T18932] netlink: 'syz.1.1907': attribute type 10 has an invalid length. [ 1815.020796][ T5320] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1815.036440][T18932] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1907'. [ 1815.059796][T18932] team0: entered promiscuous mode [ 1815.070471][T18932] team_slave_0: entered promiscuous mode [ 1815.076687][T18932] team_slave_1: entered promiscuous mode [ 1815.101732][T18932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1815.160278][T18932] batman_adv: batadv0: Interface activated: team0 [ 1815.181731][T18932] batman_adv: batadv0: Interface deactivated: team0 [ 1815.190518][T18940] ieee802154 phy0 wpan0: encryption failed: -22 [ 1815.220760][ T5320] usb 4-1: Using ep0 maxpacket: 16 [ 1815.226817][T18932] batman_adv: batadv0: Removing interface: team0 [ 1815.240637][T18932] bridge0: port 3(team0) entered blocking state [ 1815.257912][T18932] bridge0: port 3(team0) entered disabled state [ 1815.273200][ T5320] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1815.286286][T18932] team0: entered allmulticast mode [ 1815.299572][T18932] team_slave_0: entered allmulticast mode [ 1815.320877][ T5320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.344638][T18932] team_slave_1: entered allmulticast mode [ 1815.368999][ T5320] usb 4-1: Product: syz [ 1815.376967][T18932] bridge0: port 3(team0) entered blocking state [ 1815.383500][T18932] bridge0: port 3(team0) entered forwarding state [ 1815.394272][ T5320] usb 4-1: Manufacturer: syz [ 1815.398887][ T5320] usb 4-1: SerialNumber: syz [ 1815.464456][T14072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.474534][ T5320] usb 4-1: config 0 descriptor?? [ 1815.512318][ T5320] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1815.563346][T14072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.705057][T18929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1816.020423][ T4674] Dev loop2: unable to read RDB block 7 [ 1816.454412][ T4674] loop2: unable to read partition table [ 1816.614134][ T4674] loop2: partition table beyond EOD, truncated [ 1816.708066][T18947] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1912'. [ 1816.709292][T18954] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 1816.778828][T18954] macvlan0: entered promiscuous mode [ 1816.791244][T18954] macvlan0: entered allmulticast mode [ 1816.863230][T18954] veth1_vlan: entered allmulticast mode [ 1816.879008][ T5320] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1817.059155][ T5320] usb 2-1: Using ep0 maxpacket: 8 [ 1817.117833][T18954] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1817.136820][T12004] usb 4-1: USB disconnect, device number 22 [ 1817.145780][ T5320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1817.187125][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 1817.206787][T18955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1686'. [ 1817.286970][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.369794][T18964] loop2: detected capacity change from 0 to 7 [ 1818.158585][T18964] Dev loop2: unable to read RDB block 7 [ 1818.164414][T18964] loop2: unable to read partition table [ 1818.170408][T18964] loop2: partition table beyond EOD, truncated [ 1818.177332][T18964] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1818.199129][ T5320] usb 2-1: Product: syz [ 1818.206051][ T5320] usb 2-1: Manufacturer: syz [ 1818.212987][ T5320] usb 2-1: SerialNumber: syz [ 1818.289210][ T4674] Dev loop2: unable to read RDB block 7 [ 1818.316036][ T4674] loop2: unable to read partition table [ 1818.347413][ T4674] loop2: partition table beyond EOD, truncated [ 1818.487728][T12004] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1818.695924][T18970] Cannot find add_set index 0 as target [ 1819.377714][ T4674] Dev loop2: unable to read RDB block 7 [ 1819.405366][ T4674] loop2: unable to read partition table [ 1819.411363][ T4674] loop2: partition table beyond EOD, truncated [ 1819.451887][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.461027][T12004] usb 4-1: Using ep0 maxpacket: 16 [ 1819.471440][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.501536][ T5320] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1819.514180][T12004] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1819.572153][T12004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.655225][T12004] usb 4-1: Product: syz [ 1819.860269][T12004] usb 4-1: Manufacturer: syz [ 1819.879542][T12004] usb 4-1: SerialNumber: syz [ 1819.888726][T12004] usb 4-1: config 0 descriptor?? [ 1819.896674][T12004] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1820.629679][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1820.680347][ T9509] usb 2-1: USB disconnect, device number 29 [ 1820.688867][T12004] usb 4-1: USB disconnect, device number 23 [ 1820.721294][ T9509] usblp0: removed [ 1821.626820][T11772] Bluetooth: hci7: command 0x0406 tx timeout [ 1822.132963][T19003] 9pnet_virtio: no channels available for device [ 1822.282722][T19006] ieee802154 phy0 wpan0: encryption failed: -22 [ 1824.050494][ T29] audit: type=1326 audit(1726425215.651:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1824.133148][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 1824.243854][ T29] audit: type=1326 audit(1726425215.861:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1824.338113][ T29] audit: type=1326 audit(1726425215.861:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1824.387930][ T29] audit: type=1326 audit(1726425215.861:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1824.452080][ T29] audit: type=1326 audit(1726425215.893:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1824.608878][ T29] audit: type=1326 audit(1726425215.893:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1824.701405][T19034] loop2: detected capacity change from 0 to 7 [ 1825.192780][ T29] audit: type=1326 audit(1726425215.893:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1825.514119][T19034] Dev loop2: unable to read RDB block 7 [ 1825.519902][T19034] loop2: unable to read partition table [ 1825.527977][T19034] loop2: partition table beyond EOD, truncated [ 1825.538325][T19034] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1825.568812][ T29] audit: type=1326 audit(1726425215.893:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19012 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x7fc00000 [ 1825.817502][ T4674] Dev loop2: unable to read RDB block 7 [ 1825.834096][ T4674] loop2: unable to read partition table [ 1825.846939][ T4674] loop2: partition table beyond EOD, truncated [ 1826.741771][T19046] syz.0.1932: attempt to access beyond end of device [ 1826.741771][T19046] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1827.283730][T19059] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 1827.839280][T19059] bridge0: port 3(team0) entered disabled state [ 1828.002061][T19059] team0: left allmulticast mode [ 1828.007830][T19059] team_slave_0: left allmulticast mode [ 1828.016627][T19059] team_slave_1: left allmulticast mode [ 1828.024379][T19059] team0: left promiscuous mode [ 1828.031051][T19059] team_slave_0: left promiscuous mode [ 1828.056663][T19059] team_slave_1: left promiscuous mode [ 1828.067354][T19059] bridge0: port 3(team0) entered disabled state [ 1828.123421][T19059] batman_adv: batadv0: Adding interface: team0 [ 1828.404167][T19059] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1829.471315][T19059] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1830.047449][T19080] kAFS: unable to lookup cell '׭6W6߾%$ɆJJ=1 Ux' [ 1830.069381][T19057] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 1830.114564][T19057] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1935'. [ 1830.210660][T19057] team0: entered promiscuous mode [ 1830.239705][T19057] team_slave_0: entered promiscuous mode [ 1830.279228][T19057] team_slave_1: entered promiscuous mode [ 1830.332169][T19057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.439109][T19085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1940'. [ 1830.537752][ T5278] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1831.507045][T11772] Bluetooth: hci8: command tx timeout [ 1831.524689][T19057] batman_adv: batadv0: Interface activated: team0 [ 1831.533658][T19057] batman_adv: batadv0: Interface deactivated: team0 [ 1831.545704][T19057] batman_adv: batadv0: Removing interface: team0 [ 1831.558028][T19087] ieee802154 phy0 wpan0: encryption failed: -22 [ 1831.620355][T19057] bridge0: port 3(team0) entered blocking state [ 1831.633816][T19057] bridge0: port 3(team0) entered disabled state [ 1831.642159][T19057] team0: entered allmulticast mode [ 1831.649406][T19057] team_slave_0: entered allmulticast mode [ 1831.661002][T19057] team_slave_1: entered allmulticast mode [ 1831.890684][ T5278] usb 4-1: device not accepting address 24, error -71 [ 1833.211117][T19094] ./bus: Can't lookup blockdev [ 1834.437280][T19057] bridge0: port 3(team0) entered blocking state [ 1834.443854][T19057] bridge0: port 3(team0) entered forwarding state [ 1835.151002][T19102] ieee802154 phy0 wpan0: encryption failed: -22 [ 1835.670347][T19105] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 1835.913944][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 1835.972876][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 1836.025969][T19105] tap0: tun_chr_ioctl cmd 1074025677 [ 1836.059514][T19105] tap0: linktype set to 270 [ 1836.509189][T19126] loop2: detected capacity change from 0 to 7 [ 1837.304587][T19126] Dev loop2: unable to read RDB block 7 [ 1837.310217][T19126] loop2: unable to read partition table [ 1837.316064][T19126] loop2: partition table beyond EOD, truncated [ 1837.322313][T19126] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1837.615927][T13978] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1837.958640][T13978] usb 2-1: Using ep0 maxpacket: 16 [ 1838.072819][T13978] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1838.342548][T13978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.354544][T13978] usb 2-1: Product: syz [ 1838.359591][T13978] usb 2-1: Manufacturer: syz [ 1838.366902][T13978] usb 2-1: SerialNumber: syz [ 1838.383343][T13978] usb 2-1: config 0 descriptor?? [ 1838.392030][T13978] ax88179_178a 2-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1838.495204][T11772] block nbd0: Receive control failed (result -32) [ 1838.504037][T19136] block nbd0: shutting down sockets [ 1838.588406][T19125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1839.625628][T13978] usb 2-1: USB disconnect, device number 30 [ 1840.289836][T19154] ieee802154 phy0 wpan0: encryption failed: -22 [ 1840.858306][T19163] ieee802154 phy0 wpan0: encryption failed: -22 [ 1844.614680][T19193] loop2: detected capacity change from 0 to 7 [ 1844.642910][T19193] Dev loop2: unable to read RDB block 7 [ 1844.648931][T19193] loop2: unable to read partition table [ 1844.657366][T19193] loop2: partition table beyond EOD, truncated [ 1844.664876][T19193] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1847.586590][T19191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1848.786234][ T4674] Dev loop2: unable to read RDB block 7 [ 1848.826650][ T4674] loop2: unable to read partition table [ 1848.865811][ T4674] loop2: partition table beyond EOD, truncated [ 1848.938800][T19205] could not allocate digest TFM handle sha256-arm64-neon [ 1849.101744][T19216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1849.272430][T11772] Bluetooth: hci8: unexpected event 0x04 length: 14 > 10 [ 1849.395947][T19224] fuse: Unknown parameter '0x0000000000000008' [ 1850.471305][T19227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1851.389307][T11772] Bluetooth: hci8: command tx timeout [ 1851.437124][T19236] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.018574][T19252] loop2: detected capacity change from 0 to 7 [ 1853.768582][T19252] Dev loop2: unable to read RDB block 7 [ 1853.774658][T19252] loop2: unable to read partition table [ 1853.778590][ T29] audit: type=1326 audit(1726425247.858:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19246 comm="syz.0.1981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x0 [ 1853.782328][T19252] loop2: partition table beyond EOD, truncated [ 1853.810742][T19252] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1854.076782][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1854.104780][ T4674] Dev loop2: unable to read RDB block 7 [ 1854.110425][ T4674] loop2: unable to read partition table [ 1854.144113][ T4674] loop2: partition table beyond EOD, truncated [ 1854.295090][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1854.402857][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1854.611830][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.744316][ T9] usb 4-1: Product: syz [ 1854.764520][T13978] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1854.782624][ T9] usb 4-1: Manufacturer: syz [ 1854.831135][ T9] usb 4-1: SerialNumber: syz [ 1854.917989][ T9] usb 4-1: config 0 descriptor?? [ 1855.009610][T13978] usb 2-1: Using ep0 maxpacket: 16 [ 1855.058116][T13978] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1855.068011][ T9] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1855.094768][T13978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.114106][T13978] usb 2-1: Product: syz [ 1855.118357][T13978] usb 2-1: Manufacturer: syz [ 1855.123006][T13978] usb 2-1: SerialNumber: syz [ 1855.172162][T13978] usb 2-1: config 0 descriptor?? [ 1855.193780][T13978] ax88179_178a 2-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1855.206111][T19251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.443016][T19260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1856.190620][ T4674] Dev loop2: unable to read RDB block 7 [ 1856.196491][ T4674] loop2: unable to read partition table [ 1856.229823][ T4674] loop2: partition table beyond EOD, truncated [ 1856.247661][ T9509] usb 4-1: USB disconnect, device number 26 [ 1856.343490][T19271] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 1856.380717][T19271] batman_adv: batadv0: Adding interface: team0 [ 1856.395943][T19271] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.423129][T19271] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1856.435451][T19272] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 1856.447522][T19272] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1986'. [ 1856.457824][T19272] team0: entered promiscuous mode [ 1856.464097][T19272] team_slave_0: entered promiscuous mode [ 1856.470948][T19272] team_slave_1: entered promiscuous mode [ 1856.485818][T19272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.493183][T19272] batman_adv: batadv0: Interface activated: team0 [ 1856.500524][T19272] batman_adv: batadv0: Interface deactivated: team0 [ 1856.507889][T19272] batman_adv: batadv0: Removing interface: team0 [ 1856.520256][T19272] bridge0: port 3(team0) entered blocking state [ 1856.526920][T19272] bridge0: port 3(team0) entered disabled state [ 1856.534052][T19272] team0: entered allmulticast mode [ 1856.539357][T19272] team_slave_0: entered allmulticast mode [ 1856.545361][T19272] team_slave_1: entered allmulticast mode [ 1856.579904][T19272] bridge0: port 3(team0) entered blocking state [ 1856.586404][T19272] bridge0: port 3(team0) entered forwarding state [ 1856.867984][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1856.889758][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1998'. [ 1856.927852][T19279] kAFS: unable to lookup cell '׭6W6߾%$ɆJJ=1 Ux' [ 1857.110552][T10590] usb 2-1: USB disconnect, device number 31 [ 1857.221672][T19283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1857.255509][ T4674] Dev loop2: unable to read RDB block 7 [ 1857.293390][ T4674] loop2: unable to read partition table [ 1858.014922][T19290] block nbd3: shutting down sockets [ 1858.309413][T19265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1859.336232][ T4674] loop2: partition table beyond EOD, truncated [ 1859.670414][ T4674] Dev loop2: unable to read RDB block 7 [ 1859.750145][ T4674] loop2: unable to read partition table [ 1860.016948][ T4674] loop2: partition table beyond EOD, truncated [ 1861.208270][T19309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1861.325684][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'. [ 1861.880053][T19319] netlink: 'syz.4.1997': attribute type 12 has an invalid length. [ 1861.888239][T19319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1861.940992][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1861.953778][T19319] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1862.952571][T19324] vivid-001: disconnect [ 1863.347268][T19330] 9pnet_fd: Insufficient options for proto=fd [ 1863.532421][T19313] vivid-001: reconnect [ 1863.665526][T19337] loop2: detected capacity change from 0 to 7 [ 1863.677508][T19337] Dev loop2: unable to read RDB block 7 [ 1863.683708][T19337] loop2: unable to read partition table [ 1863.691538][T19337] loop2: partition table beyond EOD, truncated [ 1863.697865][T19337] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1864.211229][ T5278] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1864.412026][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 1864.593181][ T5278] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1864.651791][T19338] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 1864.663372][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.687078][ T5278] usb 2-1: Product: syz [ 1864.696042][T19338] bridge0: port 3(team0) entered disabled state [ 1864.750752][ T5278] usb 2-1: Manufacturer: syz [ 1864.770447][T19338] team0: left allmulticast mode [ 1864.776099][T19338] team_slave_0: left allmulticast mode [ 1864.781745][T11772] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1864.793528][T19338] team_slave_1: left allmulticast mode [ 1864.799408][T19338] team0: left promiscuous mode [ 1864.807879][T19338] team_slave_0: left promiscuous mode [ 1864.820357][T19338] team_slave_1: left promiscuous mode [ 1864.828978][ T5278] usb 2-1: SerialNumber: syz [ 1864.856019][T19338] bridge0: port 3(team0) entered disabled state [ 1864.877306][ T5278] usb 2-1: config 0 descriptor?? [ 1865.475041][ T5278] ax88179_178a 2-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1865.522250][T19338] batman_adv: batadv0: Adding interface: team0 [ 1865.540773][T19338] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1865.785275][T19338] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1865.812121][T19339] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 1865.845961][T19339] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2002'. [ 1865.899529][T19339] team0: entered promiscuous mode [ 1865.923664][T11772] block nbd0: Receive control failed (result -32) [ 1865.936568][T19351] block nbd0: shutting down sockets [ 1865.969501][T19339] team_slave_0: entered promiscuous mode [ 1866.038483][T19339] team_slave_1: entered promiscuous mode [ 1866.146879][T19339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1866.199282][T19339] batman_adv: batadv0: Interface activated: team0 [ 1866.232755][T19339] batman_adv: batadv0: Interface deactivated: team0 [ 1866.264595][T19339] batman_adv: batadv0: Removing interface: team0 [ 1866.300181][T19339] bridge0: port 3(team0) entered blocking state [ 1866.313956][T19339] bridge0: port 3(team0) entered disabled state [ 1866.339917][T19339] team0: entered allmulticast mode [ 1866.355482][T19339] team_slave_0: entered allmulticast mode [ 1866.387092][T19339] team_slave_1: entered allmulticast mode [ 1866.464301][ T5278] usb 2-1: USB disconnect, device number 32 [ 1866.509791][T19339] bridge0: port 3(team0) entered blocking state [ 1866.516382][T19339] bridge0: port 3(team0) entered forwarding state [ 1866.655079][T19360] batadv_slave_0: mtu less than device minimum [ 1867.601671][T19365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1868.290360][T19368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1870.648984][T19383] netlink: 'syz.2.2012': attribute type 14 has an invalid length. [ 1870.659088][T19383] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204) [ 1872.034413][T19392] erofs: Unknown parameter '/dev/vga_arbiter' [ 1872.631573][ T9509] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1872.841323][ T9509] usb 3-1: Using ep0 maxpacket: 8 [ 1872.920574][ T9509] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1872.930038][ T9509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.938331][ T9509] usb 3-1: Product: syz [ 1872.947638][ T9509] usb 3-1: Manufacturer: syz [ 1872.952564][ T9509] usb 3-1: SerialNumber: syz [ 1873.279709][T19390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.290438][T19390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.309792][ T9509] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1873.328909][T19404] block nbd0: shutting down sockets [ 1873.346363][T19407] netlink: 'syz.1.2018': attribute type 10 has an invalid length. [ 1873.396743][T19407] bridge0: port 3(team0) entered disabled state [ 1873.446470][T19407] team0: left allmulticast mode [ 1873.457158][T19407] team_slave_0: left allmulticast mode [ 1873.463939][T19407] team_slave_1: left allmulticast mode [ 1873.469560][T19407] team0: left promiscuous mode [ 1873.475583][T19407] team_slave_0: left promiscuous mode [ 1873.483068][T19407] team_slave_1: left promiscuous mode [ 1873.496377][T19407] bridge0: port 3(team0) entered disabled state [ 1873.576923][T19407] batman_adv: batadv0: Adding interface: team0 [ 1873.583349][T19407] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.609668][T19407] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1873.620888][T19390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.635701][T19408] netlink: 'syz.1.2018': attribute type 10 has an invalid length. [ 1873.646463][T19408] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2018'. [ 1873.656054][T19408] team0: entered promiscuous mode [ 1873.662347][T19408] team_slave_0: entered promiscuous mode [ 1873.668490][T19408] team_slave_1: entered promiscuous mode [ 1873.678334][T19408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.685350][T19390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.693647][T19408] batman_adv: batadv0: Interface activated: team0 [ 1873.705003][T19408] batman_adv: batadv0: Interface deactivated: team0 [ 1873.712142][T19408] batman_adv: batadv0: Removing interface: team0 [ 1873.741908][T19408] bridge0: port 3(team0) entered blocking state [ 1873.750368][T19408] bridge0: port 3(team0) entered disabled state [ 1873.757532][T19408] team0: entered allmulticast mode [ 1873.763219][T19408] team_slave_0: entered allmulticast mode [ 1873.769096][T19408] team_slave_1: entered allmulticast mode [ 1873.789575][T17380] usb 3-1: USB disconnect, device number 46 [ 1873.805812][T19408] bridge0: port 3(team0) entered blocking state [ 1873.814134][T19408] bridge0: port 3(team0) entered forwarding state [ 1873.889592][T17380] usblp0: removed [ 1874.683547][ T5278] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1874.801563][T19427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2021'. [ 1875.833909][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.854589][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.925498][ T5278] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1875.953296][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.983742][ T5278] usb 4-1: config 0 descriptor?? [ 1876.343966][T12004] libceph: connect (1)[c::]:6789 error -101 [ 1876.353908][T12004] libceph: mon0 (1)[c::]:6789 connect error [ 1876.611280][T12004] libceph: connect (1)[c::]:6789 error -101 [ 1876.630689][ T5278] usbhid 4-1:0.0: can't add hid device: -71 [ 1876.647746][ T5278] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1876.687124][T12004] libceph: mon0 (1)[c::]:6789 connect error [ 1876.808029][ T5278] usb 4-1: USB disconnect, device number 27 [ 1876.947155][T19441] ceph: No mds server is up or the cluster is laggy [ 1877.344531][T19455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1878.735919][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1879.567275][T19470] netlink: 'syz.2.2031': attribute type 10 has an invalid length. [ 1879.645496][T19470] bridge0: port 3(team0) entered disabled state [ 1879.675076][T19470] team0: left allmulticast mode [ 1879.699141][T19470] team_slave_0: left allmulticast mode [ 1879.704972][T19470] team_slave_1: left allmulticast mode [ 1879.710849][T19470] team0: left promiscuous mode [ 1879.715703][T19470] team_slave_0: left promiscuous mode [ 1879.721587][T19470] team_slave_1: left promiscuous mode [ 1879.727704][T19470] bridge0: port 3(team0) entered disabled state [ 1879.818798][T19470] batman_adv: batadv0: Adding interface: team0 [ 1879.825650][T19470] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1879.856255][T19470] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1879.957352][T19473] netlink: 'syz.2.2031': attribute type 10 has an invalid length. [ 1880.000034][T19473] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2031'. [ 1880.010516][T19473] team0: entered promiscuous mode [ 1880.025816][T19473] team_slave_0: entered promiscuous mode [ 1880.059460][T19473] team_slave_1: entered promiscuous mode [ 1880.072426][T19473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1880.079769][T19473] batman_adv: batadv0: Interface activated: team0 [ 1880.087223][T19473] batman_adv: batadv0: Interface deactivated: team0 [ 1880.095286][T19473] batman_adv: batadv0: Removing interface: team0 [ 1880.433745][T19489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2034'. [ 1881.505924][T19473] bridge0: port 3(team0) entered blocking state [ 1881.528860][T19473] bridge0: port 3(team0) entered disabled state [ 1881.559530][T19473] team0: entered allmulticast mode [ 1881.576348][T19473] team_slave_0: entered allmulticast mode [ 1881.586035][T19473] team_slave_1: entered allmulticast mode [ 1881.785971][T19473] bridge0: port 3(team0) entered blocking state [ 1881.792354][T19473] bridge0: port 3(team0) entered forwarding state [ 1881.800817][T19480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2032'. [ 1881.909868][T19495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1883.546665][T19504] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1885.749227][T13516] Bluetooth: hci7: command 0x0406 tx timeout [ 1886.694437][T11772] block nbd3: Receive control failed (result -32) [ 1886.720710][T19519] block nbd3: shutting down sockets [ 1888.038875][T19533] IPv6: Can't replace route, no match found [ 1888.260390][T19538] netlink: 'syz.4.2047': attribute type 10 has an invalid length. [ 1888.278657][T19538] bridge0: port 3(team0) entered disabled state [ 1888.304172][T19538] team0: left allmulticast mode [ 1888.335222][T19538] team_slave_1: left allmulticast mode [ 1888.347705][T19538] team0: left promiscuous mode [ 1888.355782][T19538] team_slave_1: left promiscuous mode [ 1888.361998][T19538] bridge0: port 3(team0) entered disabled state [ 1888.575323][T19540] netlink: 'syz.4.2047': attribute type 10 has an invalid length. [ 1888.586077][T19540] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2047'. [ 1888.622545][T19540] team0: entered promiscuous mode [ 1888.667918][T19540] team_slave_1: entered promiscuous mode [ 1888.689500][T19540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1888.707326][T19540] bridge0: port 3(team0) entered blocking state [ 1888.742260][T19540] bridge0: port 3(team0) entered disabled state [ 1888.755231][T19540] team0: entered allmulticast mode [ 1888.762115][T19540] team_slave_1: entered allmulticast mode [ 1888.791831][T19540] bridge0: port 3(team0) entered blocking state [ 1888.798366][T19540] bridge0: port 3(team0) entered forwarding state [ 1889.286286][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1889.396685][ T5320] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1889.561643][T13516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1889.579090][T13516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1889.589448][T13516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1889.605639][T13516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1889.614739][T13516] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1889.624544][T13516] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1889.653971][ T5320] usb 3-1: Using ep0 maxpacket: 16 [ 1889.664596][ T5320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1889.795727][ T5320] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1889.875629][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.934019][ T5320] usb 3-1: Product: syz [ 1889.961435][ T5320] usb 3-1: Manufacturer: syz [ 1889.987348][ T5320] usb 3-1: SerialNumber: syz [ 1890.059055][ T5320] usb 3-1: config 0 descriptor?? [ 1890.113773][ T5320] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1890.193964][ T5320] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1890.279674][ T5778] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.631092][T11772] Bluetooth: hci4: command tx timeout [ 1892.001568][ T5320] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1892.678956][ T5320] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1892.694347][ T5320] em28xx 3-1:0.0: board has no eeprom [ 1892.789454][ T5320] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1892.808742][ T5778] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.829463][ T5320] em28xx 3-1:0.0: dvb set to bulk mode. [ 1892.870766][T13978] em28xx 3-1:0.0: Binding DVB extension [ 1892.933635][ T5320] usb 3-1: USB disconnect, device number 47 [ 1892.994267][ T5320] em28xx 3-1:0.0: Disconnecting em28xx [ 1893.504918][T13978] em28xx 3-1:0.0: Registering input extension [ 1893.582235][ T5320] em28xx 3-1:0.0: Closing input extension [ 1893.587912][T11772] Bluetooth: hci4: command tx timeout [ 1893.654280][ T5778] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.700242][T19568] block nbd3: shutting down sockets [ 1893.838370][ T5320] em28xx 3-1:0.0: Freeing device [ 1895.273156][ T5778] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.443463][T19598] netlink: 'syz.3.2057': attribute type 10 has an invalid length. [ 1895.509260][T19598] batman_adv: batadv0: Adding interface: team0 [ 1895.567310][T19598] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1895.592720][T11772] Bluetooth: hci4: command tx timeout [ 1895.653194][T19598] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1895.884999][T19600] netlink: 'syz.3.2057': attribute type 10 has an invalid length. [ 1895.893873][T19600] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2057'. [ 1895.907359][T19600] team0: entered promiscuous mode [ 1895.917884][T19600] team_slave_0: entered promiscuous mode [ 1895.924406][T19600] team_slave_1: entered promiscuous mode [ 1895.936760][T19600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.944213][T19600] batman_adv: batadv0: Interface activated: team0 [ 1895.952626][T19600] batman_adv: batadv0: Interface deactivated: team0 [ 1895.959920][T19600] batman_adv: batadv0: Removing interface: team0 [ 1895.977736][T19600] bridge0: port 3(team0) entered blocking state [ 1896.013166][T19600] bridge0: port 3(team0) entered disabled state [ 1896.040575][T19600] team0: entered allmulticast mode [ 1896.049442][T19600] team_slave_0: entered allmulticast mode [ 1896.061814][T19600] team_slave_1: entered allmulticast mode [ 1896.104372][T19600] bridge0: port 3(team0) entered blocking state [ 1896.110935][T19600] bridge0: port 3(team0) entered forwarding state [ 1896.619792][T19615] kAFS: unable to lookup cell '׭6W6߾%$ɆJJ=1 Ux' [ 1896.869805][ T5778] team0: left allmulticast mode [ 1896.991544][ T5778] team_slave_0: left allmulticast mode [ 1897.119617][ T5778] team_slave_1: left allmulticast mode [ 1897.237908][ T5778] bridge0: port 3(team0) entered disabled state [ 1897.275199][ T5778] bridge_slave_1: left allmulticast mode [ 1897.288447][T19614] block nbd3: shutting down sockets [ 1897.304742][ T5778] bridge_slave_1: left promiscuous mode [ 1897.371072][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.475815][ T5778] bridge_slave_0: left allmulticast mode [ 1897.506764][ T5778] bridge_slave_0: left promiscuous mode [ 1897.540956][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.560309][T11772] Bluetooth: hci4: command tx timeout [ 1897.855258][T19629] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 1897.871371][T19629] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2063'. [ 1897.898014][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 1898.394977][T11772] block nbd3: Receive control failed (result -32) [ 1898.424390][T19628] block nbd3: shutting down sockets [ 1899.386401][T11772] block nbd2: Receive control failed (result -32) [ 1899.400122][T19638] block nbd2: shutting down sockets [ 1904.719825][ T5778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1904.746609][ T5778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1904.766656][ T5778] bond0 (unregistering): Released all slaves [ 1904.808507][T19646] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 1904.872751][T19646] bridge0: port 3(team0) entered disabled state [ 1904.923803][T19646] team0: left allmulticast mode [ 1904.928726][T19646] team_slave_0: left allmulticast mode [ 1904.951910][T19646] team_slave_1: left allmulticast mode [ 1904.957433][T19646] team0: left promiscuous mode [ 1904.973753][T19646] team_slave_0: left promiscuous mode [ 1904.979418][T19646] team_slave_1: left promiscuous mode [ 1904.988253][T19646] bridge0: port 3(team0) entered disabled state [ 1905.016572][T19646] batman_adv: batadv0: Adding interface: team0 [ 1905.042763][T19646] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1905.080202][T19646] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1905.095246][T19649] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 1905.103255][T19649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1905.115581][T19649] team0: entered promiscuous mode [ 1905.120704][T19649] team_slave_0: entered promiscuous mode [ 1905.139049][T19649] team_slave_1: entered promiscuous mode [ 1905.162563][T19665] ieee802154 phy0 wpan0: encryption failed: -22 [ 1905.174200][T19649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1905.189529][T19649] batman_adv: batadv0: Interface activated: team0 [ 1905.207634][T19649] batman_adv: batadv0: Interface deactivated: team0 [ 1905.247750][T19649] batman_adv: batadv0: Removing interface: team0 [ 1905.319953][T19649] bridge0: port 3(team0) entered blocking state [ 1905.331472][T19649] bridge0: port 3(team0) entered disabled state [ 1905.386328][T19649] team0: entered allmulticast mode [ 1905.391989][T19649] team_slave_0: entered allmulticast mode [ 1905.397872][T19649] team_slave_1: entered allmulticast mode [ 1905.406112][T19649] bridge0: port 3(team0) entered blocking state [ 1905.412591][T19649] bridge0: port 3(team0) entered forwarding state [ 1905.536983][T19555] chnl_net:caif_netlink_parms(): no params data found [ 1906.648406][T11772] block nbd0: Receive control failed (result -32) [ 1906.658704][T19674] block nbd0: shutting down sockets [ 1906.914841][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 1907.212953][ T5778] hsr_slave_0: left promiscuous mode [ 1907.418314][ T5778] hsr_slave_1: left promiscuous mode [ 1907.500275][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1907.629937][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1907.662770][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1907.673840][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1907.760557][ T5778] veth1_macvtap: left promiscuous mode [ 1907.775946][ T5778] veth0_macvtap: left promiscuous mode [ 1907.790228][ T5778] veth1_vlan: left promiscuous mode [ 1907.802381][ T5778] veth0_vlan: left promiscuous mode [ 1908.932107][ T5778] team_slave_1 (unregistering): left promiscuous mode [ 1908.951422][ T5778] team0 (unregistering): Port device team_slave_1 removed [ 1909.028743][ T5778] team_slave_0 (unregistering): left promiscuous mode [ 1909.043821][ T5778] team0 (unregistering): Port device team_slave_0 removed [ 1909.904873][T19694] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2079'. [ 1910.017862][T19708] pim6reg: entered allmulticast mode [ 1910.255929][T19555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.544415][T19555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.624324][T19555] bridge_slave_0: entered allmulticast mode [ 1911.290784][T19555] bridge_slave_0: entered promiscuous mode [ 1911.578090][T19555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.630876][T19555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.659266][T19555] bridge_slave_1: entered allmulticast mode [ 1911.695854][T19555] bridge_slave_1: entered promiscuous mode [ 1911.708705][T19720] block nbd4: shutting down sockets [ 1912.125661][T19733] loop2: detected capacity change from 0 to 7 [ 1912.132628][T19733] Dev loop2: unable to read RDB block 7 [ 1912.138907][T19733] loop2: unable to read partition table [ 1912.144931][T19733] loop2: partition table beyond EOD, truncated [ 1912.151127][T19733] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1912.238834][ T4674] Dev loop2: unable to read RDB block 7 [ 1912.246111][T19555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.294930][ T4674] loop2: unable to read partition table [ 1912.311459][T19555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.333495][ T4674] loop2: partition table beyond EOD, truncated [ 1912.673345][T19555] team0: Port device team_slave_0 added [ 1912.793182][T19555] team0: Port device team_slave_1 added [ 1913.649001][T19555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1913.659264][T19555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.696000][T19555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.697794][T13516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1913.722255][T13516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1913.731667][T13516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1913.753994][T13516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1913.766211][T13516] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1913.775303][T13516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1913.865284][T19555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.936669][T19555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1914.160441][T19555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1914.269600][T19555] hsr_slave_0: entered promiscuous mode [ 1914.291432][T19555] hsr_slave_1: entered promiscuous mode [ 1914.331086][T19555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1914.340415][T19555] Cannot create hsr debugfs directory [ 1914.957794][ T5778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.154539][ T4674] Dev loop2: unable to read RDB block 7 [ 1915.160204][ T4674] loop2: unable to read partition table [ 1915.229308][ T4674] loop2: partition table beyond EOD, truncated [ 1915.700557][ T5778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.768455][T13516] Bluetooth: hci0: command tx timeout [ 1916.595074][T11772] block nbd2: Receive control failed (result -32) [ 1916.606324][T19763] block nbd2: shutting down sockets [ 1916.892382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.658676][ T5778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.748382][T11772] Bluetooth: hci0: command tx timeout [ 1918.840643][ T5778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.043757][T19800] input: syz1 as /devices/virtual/input/input28 [ 1919.722660][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2093'. [ 1919.737060][T11772] Bluetooth: hci0: command tx timeout [ 1920.199558][T19819] loop2: detected capacity change from 0 to 7 [ 1920.762282][T19819] Dev loop2: unable to read RDB block 7 [ 1920.768552][T19819] loop2: unable to read partition table [ 1920.774714][T19819] loop2: partition table beyond EOD, truncated [ 1920.780883][T19819] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1921.124407][T19754] chnl_net:caif_netlink_parms(): no params data found [ 1921.707542][T11772] Bluetooth: hci0: command tx timeout [ 1921.728499][ T5778] team0: left allmulticast mode [ 1921.733420][ T5778] team_slave_0: left allmulticast mode [ 1921.745812][T17453] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1921.753507][ T5778] team_slave_1: left allmulticast mode [ 1921.759769][ T5778] bridge0: port 3(team0) entered disabled state [ 1921.771121][ T5778] bridge_slave_1: left allmulticast mode [ 1921.778834][ T5778] bridge_slave_1: left promiscuous mode [ 1921.804197][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.818240][ T5778] bridge_slave_0: left allmulticast mode [ 1921.824477][ T5778] bridge_slave_0: left promiscuous mode [ 1921.831421][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.926949][T17453] usb 3-1: Using ep0 maxpacket: 16 [ 1921.946025][T17453] usb 3-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1921.956068][T17453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.964765][T17453] usb 3-1: Product: syz [ 1921.969758][T17453] usb 3-1: Manufacturer: syz [ 1921.974548][T17453] usb 3-1: SerialNumber: syz [ 1921.989961][T17453] usb 3-1: config 0 descriptor?? [ 1922.000170][T17453] ax88179_178a 3-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1922.201848][T19817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1922.495915][T11772] block nbd0: Receive control failed (result -32) [ 1922.520477][T19828] block nbd0: shutting down sockets [ 1922.709783][ T5778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1922.738015][ T5778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1922.771034][ T5778] bond0 (unregistering): Released all slaves [ 1923.531765][T13978] usb 3-1: USB disconnect, device number 48 [ 1924.331008][T19851] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2103'. [ 1924.340765][T19851] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 1925.475648][T19854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1927.270807][T19754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.325334][T19754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.347517][T19754] bridge_slave_0: entered allmulticast mode [ 1928.536064][T19754] bridge_slave_0: entered promiscuous mode [ 1928.706150][T19754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.713624][T19754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.785442][T19754] bridge_slave_1: entered allmulticast mode [ 1928.836559][T19754] bridge_slave_1: entered promiscuous mode [ 1929.256038][ T5778] hsr_slave_0: left promiscuous mode [ 1929.312047][ T5778] hsr_slave_1: left promiscuous mode [ 1929.338280][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1929.345795][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1929.366977][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1929.375689][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1929.439747][ T5778] veth1_macvtap: left promiscuous mode [ 1929.447075][ T5778] veth0_macvtap: left promiscuous mode [ 1929.486146][ T5778] veth1_vlan: left promiscuous mode [ 1929.493586][ T5778] veth0_vlan: left promiscuous mode [ 1931.253585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1931.465704][ T5778] team_slave_1 (unregistering): left promiscuous mode [ 1931.492135][ T5778] team0 (unregistering): Port device team_slave_1 removed [ 1931.576107][ T5778] team_slave_0 (unregistering): left promiscuous mode [ 1931.588170][ T5778] team0 (unregistering): Port device team_slave_0 removed [ 1932.473376][T19754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1932.554164][T19555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1932.571983][T19889] bond0: entered promiscuous mode [ 1932.580127][T19889] bond_slave_0: entered promiscuous mode [ 1932.586391][T19889] bond_slave_1: entered promiscuous mode [ 1932.652816][T19754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.671854][T19555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1932.724455][T19555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1932.908378][T19555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1932.937299][ C0] vkms_vblank_simulate: vblank timer overrun [ 1932.978168][T19754] team0: Port device team_slave_0 added [ 1933.057059][T19911] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1933.259314][T19754] team0: Port device team_slave_1 added [ 1933.824355][T19754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1933.836543][T19754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.873214][T19754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1934.007696][ T29] audit: type=1800 audit(1726425332.052:393): pid=19916 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2116" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1934.024636][T19754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1934.710478][T19754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.736403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.764862][T19754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.079815][T19922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1935.923437][T19754] hsr_slave_0: entered promiscuous mode [ 1935.959178][T19754] hsr_slave_1: entered promiscuous mode [ 1935.997856][T19754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1936.020467][T19754] Cannot create hsr debugfs directory [ 1936.169989][T19931] ieee802154 phy0 wpan0: encryption failed: -22 [ 1936.228194][T13516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1936.242716][T13516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1936.256435][T13516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1936.270465][T13516] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1936.278983][T13516] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1936.355961][T13516] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1936.496595][ T5778] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.660633][T19555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1937.237660][ T5778] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.265481][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1937.280978][T19555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1937.434100][T13148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.441336][T13148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.553526][ T5778] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.622446][T14151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.629598][T14151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.822845][ T5778] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.022662][T19953] sctp: [Deprecated]: syz.4.2120 (pid 19953) Use of int in maxseg socket option. [ 1938.022662][T19953] Use struct sctp_assoc_value instead [ 1938.320120][T13516] Bluetooth: hci5: command tx timeout [ 1938.511927][T19960] netlink: 'syz.0.2121': attribute type 10 has an invalid length. [ 1938.565223][T19960] bridge0: port 3(team0) entered disabled state [ 1938.599371][T19960] team0: left allmulticast mode [ 1938.607662][T19960] team_slave_0: left allmulticast mode [ 1938.613453][T19960] team_slave_1: left allmulticast mode [ 1938.630412][T19960] team0: left promiscuous mode [ 1938.675895][T19960] team_slave_0: left promiscuous mode [ 1938.684418][T19960] team_slave_1: left promiscuous mode [ 1938.702405][T19960] bridge0: port 3(team0) entered disabled state [ 1938.732157][T19960] batman_adv: batadv0: Adding interface: team0 [ 1938.738542][T19960] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.767720][T19960] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1938.793558][T19961] netlink: 'syz.0.2121': attribute type 10 has an invalid length. [ 1938.801963][T19961] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2121'. [ 1938.814829][T19961] team0: entered promiscuous mode [ 1938.820330][T19961] team_slave_0: entered promiscuous mode [ 1938.827821][T19961] team_slave_1: entered promiscuous mode [ 1938.852273][T19961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.892122][T19961] batman_adv: batadv0: Interface activated: team0 [ 1938.900105][T19961] batman_adv: batadv0: Interface deactivated: team0 [ 1938.968027][T19961] batman_adv: batadv0: Removing interface: team0 [ 1939.003432][T19961] bridge0: port 3(team0) entered blocking state [ 1939.030879][T19961] bridge0: port 3(team0) entered disabled state [ 1939.055560][T19961] team0: entered allmulticast mode [ 1939.076414][T19961] team_slave_0: entered allmulticast mode [ 1939.084197][T19961] team_slave_1: entered allmulticast mode [ 1939.106444][T19961] bridge0: port 3(team0) entered blocking state [ 1939.113285][T19961] bridge0: port 3(team0) entered forwarding state [ 1940.281326][T13516] block nbd4: Receive control failed (result -32) [ 1940.298770][T19973] block nbd4: shutting down sockets [ 1940.311435][T13516] Bluetooth: hci5: command tx timeout [ 1940.508687][T19984] loop2: detected capacity change from 0 to 7 [ 1941.286880][T19984] Dev loop2: unable to read RDB block 7 [ 1941.293626][T19984] loop2: unable to read partition table [ 1941.299603][T19984] loop2: partition table beyond EOD, truncated [ 1941.305959][T19984] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1941.417791][ T5778] team0: left allmulticast mode [ 1941.422765][ T5778] team_slave_0: left allmulticast mode [ 1941.445277][ T5778] team_slave_1: left allmulticast mode [ 1941.451223][ T5778] bridge0: port 3(team0) entered disabled state [ 1941.498415][ T5778] bridge_slave_1: left allmulticast mode [ 1941.506828][ T5778] bridge_slave_1: left promiscuous mode [ 1941.520364][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.548943][ T5778] bridge_slave_0: left allmulticast mode [ 1941.564547][ T5778] bridge_slave_0: left promiscuous mode [ 1941.579048][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1942.283544][T13516] Bluetooth: hci5: command tx timeout [ 1942.775278][ T5778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1942.800301][ T5778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1942.823652][ T5778] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1942.847851][ T5778] veth1_vlan: left allmulticast mode [ 1942.857936][ T5778] bond0 (unregistering): Released all slaves [ 1943.407136][T19933] chnl_net:caif_netlink_parms(): no params data found [ 1943.735944][T19754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1943.786063][T19754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1943.850548][ T5778] hsr_slave_0: left promiscuous mode [ 1943.881043][ T5778] hsr_slave_1: left promiscuous mode [ 1943.897156][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1943.905149][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1943.919763][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1943.927541][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1944.019676][ T5778] veth1_macvtap: left promiscuous mode [ 1944.048717][ T5778] veth0_macvtap: left promiscuous mode [ 1944.072350][ T5778] veth1_vlan: left promiscuous mode [ 1944.082546][ T5778] veth0_vlan: left promiscuous mode [ 1944.264818][T13516] Bluetooth: hci5: command tx timeout [ 1944.498010][ T5778] pim6reg (unregistering): left allmulticast mode [ 1944.774989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1944.828789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1945.520525][ T5778] team_slave_1 (unregistering): left promiscuous mode [ 1945.554869][ T5778] team0 (unregistering): Port device team_slave_1 removed [ 1945.755411][ T5778] team_slave_0 (unregistering): left promiscuous mode [ 1945.766618][ T5778] team0 (unregistering): Port device team_slave_0 removed [ 1946.310652][T11772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1946.349330][T11772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1946.363533][T11772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1946.375100][T11772] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1946.392629][T11772] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1946.421839][T11772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1947.201379][T19754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1947.219799][T19754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1947.353637][T19933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.370328][T19933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1947.381928][T19933] bridge_slave_0: entered allmulticast mode [ 1947.423224][T19933] bridge_slave_0: entered promiscuous mode [ 1947.517306][T19933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1947.562170][T19933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.591738][T19933] bridge_slave_1: entered allmulticast mode [ 1947.600218][T19933] bridge_slave_1: entered promiscuous mode [ 1947.672665][T20082] netlink: 'syz.0.2130': attribute type 10 has an invalid length. [ 1947.715802][T20082] bridge0: port 3(team0) entered disabled state [ 1947.727643][T20082] team0: left allmulticast mode [ 1947.733912][T20082] team_slave_0: left allmulticast mode [ 1947.739567][T20082] team_slave_1: left allmulticast mode [ 1947.745273][T20082] team0: left promiscuous mode [ 1947.751104][T20082] team_slave_0: left promiscuous mode [ 1947.756865][T20082] team_slave_1: left promiscuous mode [ 1947.767697][T20082] bridge0: port 3(team0) entered disabled state [ 1947.827793][T20082] batman_adv: batadv0: Adding interface: team0 [ 1947.835454][T20082] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1947.860971][T20082] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1947.984822][T19933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1948.136809][T19933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1948.368326][T20088] netlink: 'syz.4.2131': attribute type 21 has an invalid length. [ 1948.406448][T20088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2131'. [ 1948.456312][T13516] Bluetooth: hci7: command tx timeout [ 1948.507849][T19933] team0: Port device team_slave_0 added [ 1948.562584][T19933] team0: Port device team_slave_1 added [ 1948.814389][T19933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1948.826292][T19933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1948.876585][T19933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1948.943260][T19933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1948.952029][T19933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1948.992600][T19933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.220447][T13516] block nbd0: Receive control failed (result -32) [ 1949.230690][T20098] block nbd0: shutting down sockets [ 1949.956442][T19933] hsr_slave_0: entered promiscuous mode [ 1950.030173][T19933] hsr_slave_1: entered promiscuous mode [ 1950.057297][T19933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1950.082002][T19933] Cannot create hsr debugfs directory [ 1950.446154][T13516] Bluetooth: hci7: command tx timeout [ 1951.420130][T19754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.753066][T19754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1951.843007][T20072] chnl_net:caif_netlink_parms(): no params data found [ 1951.949983][T14166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.957265][T14166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1952.204406][T14166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.211696][T14166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1952.432750][T13516] Bluetooth: hci7: command tx timeout [ 1952.593643][ T5778] bridge_slave_1: left allmulticast mode [ 1952.617946][ T5778] bridge_slave_1: left promiscuous mode [ 1952.634808][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.684235][ T5778] bridge_slave_0: left allmulticast mode [ 1952.716978][ T5778] bridge_slave_0: left promiscuous mode [ 1952.750921][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.279658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.394057][T20145] affs: No valid root block on device nbd0 [ 1953.782720][ T5778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.797625][ T5778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.811619][ T5778] bond0 (unregistering): Released all slaves [ 1953.961518][T20150] netlink: 'syz.0.2139': attribute type 10 has an invalid length. [ 1954.100469][ T5778] hsr_slave_0: left promiscuous mode [ 1954.119077][ T5778] hsr_slave_1: left promiscuous mode [ 1954.150796][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1954.175550][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1954.410097][T13516] Bluetooth: hci7: command tx timeout [ 1955.081464][ T5778] team0 (unregistering): Port device team_slave_1 removed [ 1955.182735][ T5778] team0 (unregistering): Port device team_slave_0 removed [ 1956.330888][T20072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.342642][T20072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1956.351197][T20072] bridge_slave_0: entered allmulticast mode [ 1956.360086][T20072] bridge_slave_0: entered promiscuous mode [ 1956.368665][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 1956.383698][T20156] team0: left allmulticast mode [ 1956.396083][T20156] team_slave_1: left allmulticast mode [ 1956.398118][T13516] block nbd0: Receive control failed (result -32) [ 1956.406829][T20156] bridge0: port 3(team0) entered disabled state [ 1956.409218][T20167] block nbd0: shutting down sockets [ 1956.431527][T20156] bridge_slave_1: left allmulticast mode [ 1956.439240][T20156] bridge_slave_1: left promiscuous mode [ 1956.445529][T20156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.476204][T20156] bridge_slave_0: left allmulticast mode [ 1956.481914][T20156] bridge_slave_0: left promiscuous mode [ 1956.490025][T20156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1956.937827][T19754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1956.968829][T19754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1957.438908][T20072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.486323][T20072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.493738][T20072] bridge_slave_1: entered allmulticast mode [ 1957.540030][T20072] bridge_slave_1: entered promiscuous mode [ 1957.632883][T20176] loop2: detected capacity change from 0 to 7 [ 1957.652308][T20176] Dev loop2: unable to read RDB block 7 [ 1957.658041][T20176] loop2: unable to read partition table [ 1957.663927][T20176] loop2: partition table beyond EOD, truncated [ 1957.670601][T20176] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1957.932752][T20072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1957.984008][T20072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.170238][T20072] team0: Port device team_slave_0 added [ 1958.213990][T19933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1958.262676][T19933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1958.331751][T20072] team0: Port device team_slave_1 added [ 1958.367815][T19933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1958.403869][T19933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1958.540128][T19754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.643909][T20072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1958.672949][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1958.762576][T20072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1958.844569][T20072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1958.861494][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1958.924851][T20072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1959.135559][T20072] hsr_slave_0: entered promiscuous mode [ 1959.158268][T20072] hsr_slave_1: entered promiscuous mode [ 1959.183101][T20072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1959.201265][T20072] Cannot create hsr debugfs directory [ 1960.114113][T20201] hub 9-0:1.0: USB hub found [ 1960.121688][T20201] hub 9-0:1.0: 8 ports detected [ 1960.253368][T19754] veth0_vlan: entered promiscuous mode [ 1960.447639][T19754] veth1_vlan: entered promiscuous mode [ 1960.608407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1960.864820][T20217] netlink: 'syz.0.2148': attribute type 10 has an invalid length. [ 1960.926393][T19754] veth0_macvtap: entered promiscuous mode [ 1961.269034][T19933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1961.328174][T19754] veth1_macvtap: entered promiscuous mode [ 1961.514031][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.553952][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.599698][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.626010][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.637042][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.649487][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.660767][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.672648][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.697014][T19754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1961.772913][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.797898][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.826372][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.841283][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.853656][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.867348][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.888866][T19754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.942251][T19754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.968262][T19754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1962.002611][T19754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.012149][T19754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.021176][T19754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.032552][T19754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.068706][T19933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1962.293030][T13148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.300389][T13148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1962.329139][T13148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.336388][T13148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1963.409292][T13516] block nbd0: Receive control failed (result -32) [ 1963.421359][T20231] block nbd0: shutting down sockets [ 1963.603654][T20072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1963.661540][T20072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1963.726920][T20072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1963.779729][T20072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1964.007366][ T5778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1964.072460][ T5778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1964.256132][ T5778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1964.302964][ T5778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1964.731868][T20072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1964.813658][T20265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1964.925990][T20072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1965.047868][T13148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1965.056242][T13148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1965.227557][T13148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1965.235156][T13148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1965.519534][T19933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1966.016738][T19933] veth0_vlan: entered promiscuous mode [ 1966.072189][T20291] loop2: detected capacity change from 0 to 7 [ 1966.618587][T20291] Dev loop2: unable to read RDB block 7 [ 1966.628020][T20291] loop2: unable to read partition table [ 1966.636931][T20291] loop2: partition table beyond EOD, truncated [ 1966.643975][T20291] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 1966.888077][T10590] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1966.931914][T19933] veth1_vlan: entered promiscuous mode [ 1967.133431][T10590] usb 4-1: Using ep0 maxpacket: 16 [ 1967.302547][T19933] veth0_macvtap: entered promiscuous mode [ 1967.342492][T10590] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 1967.373635][T10590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.384322][T10590] usb 4-1: Product: syz [ 1967.388532][T10590] usb 4-1: Manufacturer: syz [ 1967.399099][T10590] usb 4-1: SerialNumber: syz [ 1967.461921][T19933] veth1_macvtap: entered promiscuous mode [ 1967.476493][T10590] usb 4-1: config 0 descriptor?? [ 1967.503960][T10590] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 1967.690165][T20291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1967.745646][T20072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1967.793675][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1967.809553][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1967.871160][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1967.932333][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.148167][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.315539][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.334355][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.353930][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.450977][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.463490][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.478874][T19933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1968.598832][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.622557][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.636222][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.649415][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.664770][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.696476][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.725006][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.749743][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.777590][T19933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.842837][ T9] usb 4-1: USB disconnect, device number 28 [ 1968.861316][T19933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.914239][T19933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1969.074090][T19933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.101731][T19933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.123221][T19933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.149384][T19933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.609137][T13148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1969.666977][T13148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1969.734474][T20072] veth0_vlan: entered promiscuous mode [ 1969.780246][ T5778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1969.832214][ T5778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1969.842360][T20072] veth1_vlan: entered promiscuous mode [ 1969.851539][T13516] block nbd3: Receive control failed (result -32) [ 1969.876220][T20327] block nbd3: shutting down sockets [ 1970.091247][T20072] veth0_macvtap: entered promiscuous mode [ 1970.124956][T13516] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1970.167115][T20072] veth1_macvtap: entered promiscuous mode [ 1970.231178][T20344] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.304741][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1970.368310][ T29] audit: type=1326 audit(1726425370.265:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1970.397786][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.477310][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1970.486834][ T29] audit: type=1326 audit(1726425370.265:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1970.554556][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.592563][ T29] audit: type=1326 audit(1726425370.265:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1970.614264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1970.621266][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1970.647409][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.662316][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1970.677588][ T29] audit: type=1326 audit(1726425370.265:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1970.772644][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.794776][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1970.813695][ T29] audit: type=1326 audit(1726425370.265:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1970.846118][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.916107][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1970.926396][ T29] audit: type=1326 audit(1726425370.275:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1970.952408][ C0] vkms_vblank_simulate: vblank timer overrun [ 1970.983055][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1971.099158][ T29] audit: type=1326 audit(1726425370.275:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1971.122488][ C0] vkms_vblank_simulate: vblank timer overrun [ 1971.134711][T20072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1971.204351][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1971.293676][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1971.323757][ T29] audit: type=1326 audit(1726425370.275:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1971.334177][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1971.346981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1971.430715][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1971.454313][ T29] audit: type=1326 audit(1726425370.275:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1971.476431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1971.518948][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1971.519049][ T29] audit: type=1326 audit(1726425370.275:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20341 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x7ffc0000 [ 1971.552226][ C0] vkms_vblank_simulate: vblank timer overrun [ 1971.755110][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1971.787951][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1971.828365][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1971.888455][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1971.903116][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1971.938474][T20072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1971.964349][T20072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.105632][T20072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1972.408316][T20072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.482417][T20072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.502708][T20072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.513466][T20072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.994922][ T5778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.017345][ T5778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1973.099791][ T5403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.181911][ T5403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1974.969375][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.000177][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.068511][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.109717][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.135811][T20397] overlayfs: conflicting lowerdir path [ 1975.142684][T20398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2170'. [ 1975.166334][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.220943][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1975.220970][ T29] audit: type=1107 audit(1726425375.335:432): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='H=+,kce*MM;_)J~$C߾ fXHuAg,8XٯmHz|/?՟SZkQK(~IA(#ZRb' [ 1975.271355][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.297499][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.307400][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.307659][T20400] (syz.2.2170,20400,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1975.324637][T20400] (syz.2.2170,20400,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1975.354181][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.416782][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.433890][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.485717][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.517360][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.561419][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.622935][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.674365][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.706777][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.734971][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.762525][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.808936][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.831226][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.855128][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.892295][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.924615][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.945751][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.964546][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1975.991221][T20409] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.998162][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.048810][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.079666][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.107530][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.157620][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.185105][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.207634][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.224044][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.241619][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.260468][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.330772][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.375599][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.407694][T20414] input: syz1 as /devices/virtual/input/input29 [ 1976.435330][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.464140][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.508228][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.538748][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.582428][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.597306][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.617990][ T5320] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1976.645621][ T5320] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1978.357040][ T29] audit: type=1326 audit(1726425378.632:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20424 comm="syz.4.2178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f279477def9 code=0x0 [ 1979.674456][T20445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.987048][T20445] syz.2.2181: attempt to access beyond end of device [ 1979.987048][T20445] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1980.000328][T20445] SQUASHFS error: Failed to read block 0x0: -5 [ 1980.008036][T20445] unable to read squashfs_super_block [ 1980.405037][ T5320] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1981.701616][ T29] audit: type=1326 audit(1726425382.149:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20460 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7fc00000 [ 1981.838625][ T5320] usb 2-1: Using ep0 maxpacket: 32 [ 1981.980455][ T5320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1981.995563][ T5320] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1982.011171][ T5320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1982.024508][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.034294][ T5320] usb 2-1: Product: syz [ 1982.038861][ T5320] usb 2-1: Manufacturer: syz [ 1982.045376][ T5320] usb 2-1: SerialNumber: syz [ 1982.141641][T13516] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 1982.177281][ T29] audit: type=1326 audit(1726425382.663:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20460 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1533d7def9 code=0x7fc00000 [ 1982.284906][ T5320] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1982.384525][T20476] ieee802154 phy0 wpan0: encryption failed: -22 [ 1983.499903][ T29] audit: type=1326 audit(1726425384.038:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20482 comm="syz.2.2188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x0 [ 1983.630966][T20494] ieee802154 phy0 wpan0: encryption failed: -22 [ 1984.084462][ T5320] usb 2-1: USB disconnect, device number 33 [ 1984.131393][ T5320] usblp0: removed [ 1986.470358][T20528] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.921762][T20523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1986.928489][T20523] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1989.944918][T20549] ieee802154 phy0 wpan0: encryption failed: -22 [ 1990.106871][T20556] ieee802154 phy0 wpan0: encryption failed: -22 [ 1990.130815][T20523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1990.155730][T20523] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1990.215327][T20523] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1990.254232][T20523] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1990.973967][T20570] input: syz1 as /devices/virtual/input/input30 [ 1991.134961][T20570] bond_slave_0: entered promiscuous mode [ 1991.148249][T20570] bond_slave_0: entered allmulticast mode [ 1991.166075][T20570] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1991.215915][T11772] Bluetooth: hci7: command 0x0405 tx timeout [ 1991.644454][T20565] bond_slave_0: left allmulticast mode [ 1991.654577][T20565] bond_slave_0: left promiscuous mode [ 1991.926748][T20523] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1992.090979][T20523] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1992.126281][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 1993.211694][T20596] ieee802154 phy0 wpan0: encryption failed: -22 [ 1993.743776][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'. [ 1993.879781][T20595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2211'. [ 1993.909661][T20595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2211'. [ 1997.513225][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2000.405236][T20660] ieee802154 phy0 wpan0: encryption failed: -22 [ 2000.550101][T20662] x_tables: duplicate underflow at hook 1 [ 2002.286982][T20687] ieee802154 phy0 wpan0: encryption failed: -22 [ 2002.837349][ T5275] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2003.104667][T20693] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2003.113757][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 2003.130774][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2003.416976][ T5275] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2003.431644][ T5275] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2003.474250][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.496912][ T5275] usb 2-1: Product: syz [ 2003.517873][ T5275] usb 2-1: Manufacturer: syz [ 2003.522527][ T5275] usb 2-1: SerialNumber: syz [ 2005.784170][ T5275] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2006.104859][ T5275] usb 2-1: USB disconnect, device number 34 [ 2006.156142][ T5275] usblp0: removed [ 2006.500384][T20721] loop2: detected capacity change from 0 to 7 [ 2006.507277][T20721] Dev loop2: unable to read RDB block 7 [ 2006.513105][T20721] loop2: unable to read partition table [ 2006.519061][T20721] loop2: partition table beyond EOD, truncated [ 2006.525792][T20721] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 2007.190619][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2007.278420][T20729] ieee802154 phy0 wpan0: encryption failed: -22 [ 2007.400274][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2007.478176][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 2007.536653][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.551435][ T9] usb 4-1: Product: syz [ 2007.559352][ T4674] Dev loop2: unable to read RDB block 7 [ 2007.565985][ T9] usb 4-1: Manufacturer: syz [ 2007.579718][ T9] usb 4-1: SerialNumber: syz [ 2007.586684][ T4674] loop2: unable to read partition table [ 2007.605090][ T4674] loop2: partition table beyond EOD, truncated [ 2007.651515][ T9] usb 4-1: config 0 descriptor?? [ 2007.680910][ T9] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 2007.736627][ T29] audit: type=1326 audit(1726425409.496:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2007.940469][ T29] audit: type=1326 audit(1726425409.496:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2007.970832][T20721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2008.131212][T20740] No such timeout policy "syz0" [ 2009.777753][ T29] audit: type=1326 audit(1726425409.496:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2009.983696][ T29] audit: type=1326 audit(1726425409.496:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2011.603339][ T29] audit: type=1326 audit(1726425409.496:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2011.639724][ T9] usb 4-1: USB disconnect, device number 29 [ 2011.746519][ T29] audit: type=1326 audit(1726425409.496:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2011.957058][ T29] audit: type=1326 audit(1726425409.496:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2012.021437][T20748] xt_SECMARK: invalid mode: 0 [ 2012.283326][ T29] audit: type=1326 audit(1726425409.496:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2012.305459][ T29] audit: type=1326 audit(1726425409.496:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2012.327757][ T29] audit: type=1326 audit(1726425409.506:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2013.203158][ T29] audit: type=1326 audit(1726425409.506:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2014.942272][ T29] audit: type=1326 audit(1726425409.506:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2015.193989][ T29] audit: type=1326 audit(1726425409.506:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2015.278774][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'. [ 2015.289663][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'. [ 2015.754103][ T29] audit: type=1326 audit(1726425409.506:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2015.840555][ T29] audit: type=1326 audit(1726425411.732:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2016.049054][ T29] audit: type=1326 audit(1726425411.732:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2016.276171][ T29] audit: type=1326 audit(1726425411.732:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20730 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x7ffc0000 [ 2016.380541][ T29] audit: type=1326 audit(1726425415.385:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20750 comm="syz.1.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98917def9 code=0x7ffc0000 [ 2016.642076][ T29] audit: type=1326 audit(1726425415.385:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20750 comm="syz.1.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98917def9 code=0x7ffc0000 [ 2016.700682][ T29] audit: type=1326 audit(1726425415.396:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20750 comm="syz.1.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb98917def9 code=0x7ffc0000 [ 2016.722487][ C0] vkms_vblank_simulate: vblank timer overrun [ 2017.037326][T20779] loop2: detected capacity change from 0 to 7 [ 2017.047821][T20779] Dev loop2: unable to read RDB block 7 [ 2017.053934][T20779] loop2: unable to read partition table [ 2017.060973][T20779] loop2: partition table beyond EOD, truncated [ 2017.067224][T20779] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 2017.355077][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2017.754406][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2017.898691][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 2017.955037][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.963345][ T9] usb 2-1: Product: syz [ 2018.005795][ T9] usb 2-1: Manufacturer: syz [ 2018.080747][ T9] usb 2-1: SerialNumber: syz [ 2018.112429][ T9] usb 2-1: config 0 descriptor?? [ 2018.150248][ T9] ax88179_178a 2-1:0.0: probe with driver ax88179_178a failed with error -22 [ 2018.189326][T11772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2018.212326][T11772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2018.220354][T20784] netlink: 'syz.0.2250': attribute type 12 has an invalid length. [ 2018.238531][T20784] bond0: option primary_reselect: invalid value (255) [ 2018.276837][T11772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2018.301237][T11772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2018.326597][T11772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2018.348574][T20778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2018.358177][T11772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2018.423513][ T4674] Dev loop2: unable to read RDB block 7 [ 2018.435106][T13516] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2018.448450][T13516] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2018.458052][T13516] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2018.458220][ T4674] loop2: unable to read partition table [ 2018.467023][T13516] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2018.479645][T13516] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2018.487344][T13516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2018.491336][ T4674] loop2: partition table beyond EOD, [ 2018.517610][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 2018.517645][ T29] audit: type=1800 audit(1726425420.792:476): pid=20800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2252" name="bus" dev="overlay" ino=157 res=0 errno=0 [ 2018.523114][ T4674] truncated [ 2018.541677][ T29] audit: type=1800 audit(1726425420.834:477): pid=20800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2252" name="bus" dev="overlay" ino=157 res=0 errno=0 [ 2018.549366][ C0] vkms_vblank_simulate: vblank timer overrun [ 2018.589312][T20802] ieee802154 phy0 wpan0: encryption failed: -22 [ 2018.967031][T20807] [U] [ 2018.971584][T20807] [U] [ 2018.974360][T20807] [U] [ 2018.977136][T20807] [U] [ 2018.980551][T20807] [U] [ 2018.983391][T20807] [U] [ 2018.986120][T20807] [U] [ 2018.988844][T20807] [U] [ 2018.992075][T20807] [U] [ 2018.995189][T20807] [U] [ 2018.998053][T20807] [U] [ 2019.000899][T20807] [U] [ 2019.004141][T20807] [U] [ 2019.006913][T20807] [U] [ 2019.009740][T20807] [U] [ 2019.012497][T20807] [U] [ 2019.015938][T20807] [U] [ 2019.018699][T20807] [U] [ 2019.021449][T20807] [U] [ 2019.024602][T20807] [U] [ 2019.028160][T20807] [U] [ 2019.030927][T20807] [U] [ 2019.033672][T20807] [U] [ 2019.036425][T20807] [U] [ 2019.039766][T20807] [U] [ 2019.042702][T20807] [U] [ 2019.045534][T20807] [U] [ 2019.048280][T20807] [U] [ 2019.051536][T20807] [U] [ 2019.055174][T20807] [U] [ 2019.058195][T20807] [U] [ 2019.061313][T20807] [U] [ 2019.065697][T20807] [U] [ 2019.068485][T20807] [U] [ 2019.072634][T20807] [U] [ 2019.075555][T20807] [U] [ 2019.078828][T20807] [U] [ 2019.081586][T20807] [U] [ 2019.084440][T20807] [U] [ 2019.087195][T20807] [U] [ 2019.109172][T20807] [U] [ 2019.112070][T20807] [U] [ 2019.114842][T20807] [U] [ 2019.117605][T20807] [U] [ 2019.120920][T20807] [U] [ 2019.123701][T20807] [U] [ 2019.126470][T20807] [U] [ 2019.129221][T20807] [U] [ 2019.132520][T20807] [U] [ 2019.135272][T20807] [U] [ 2019.138018][T20807] [U] [ 2019.140758][T20807] [U] [ 2019.144040][T20807] [U] [ 2019.146796][T20807] [U] [ 2019.149538][T20807] [U] [ 2019.152295][T20807] [U] [ 2019.155712][T20807] [U] [ 2019.158464][T20807] [U] [ 2019.161209][T20807] [U] [ 2019.164039][T20807] [U] [ 2019.169229][T20807] [U] [ 2019.172023][T20807] [U] [ 2019.174777][T20807] [U] [ 2019.177563][T20807] [U] [ 2019.181059][T20807] [U] [ 2019.184079][T20807] [U] [ 2019.187437][T20807] [U] [ 2019.190262][T20807] [U] [ 2019.193729][T20807] [U] [ 2019.196857][T20807] [U] [ 2019.199985][T20807] [U] [ 2019.203284][T20807] [U] [ 2019.207244][T20807] [U] [ 2019.210117][T20807] [U] [ 2019.212928][T20807] [U] [ 2019.216204][T20807] [U] [ 2019.220164][T20807] [U] [ 2019.223316][T20807] [U] [ 2019.226055][T20807] [U] [ 2019.228852][T20807] [U] [ 2019.234007][T20807] [U] [ 2019.236787][T20807] [U] [ 2019.239532][T20807] [U] [ 2019.242278][T20807] [U] [ 2019.245562][T20807] [U] [ 2019.248307][T20807] [U] [ 2019.251047][T20807] [U] [ 2019.253784][T20807] [U] [ 2019.257387][T20807] [U] [ 2019.260234][T20807] [U] [ 2019.262986][T20807] [U] [ 2019.265732][T20807] [U] [ 2019.268843][T20807] [U] [ 2019.271603][T20807] [U] [ 2019.274340][T20807] [U] [ 2019.277079][T20807] [U] [ 2019.280348][T20807] [U] [ 2019.283094][T20807] [U] [ 2019.285829][T20807] [U] [ 2019.288577][T20807] [U] [ 2019.291932][T20807] [U] [ 2019.294909][T20807] [U] [ 2019.298546][T20807] [U] [ 2019.301286][T20807] [U] [ 2019.304657][T20807] [U] [ 2019.307412][T20807] [U] [ 2019.310154][T20807] [U] [ 2019.312893][T20807] [U] [ 2019.316290][T20807] [U] [ 2019.319041][T20807] [U] [ 2019.321783][T20807] [U] [ 2019.324704][T20807] [U] [ 2019.328069][T20807] [U] [ 2019.330825][T20807] [U] [ 2019.333570][T20807] [U] [ 2019.336309][T20807] [U] [ 2019.343328][T20807] [U] [ 2019.346435][T20807] [U] [ 2019.349171][T20807] [U] [ 2019.351903][T20807] [U] [ 2019.355373][T20807] [U] [ 2019.358132][T20807] [U] [ 2019.360878][T20807] [U] [ 2019.364061][T20807] [U] [ 2019.367416][T20807] [U] [ 2019.370174][T20807] [U] [ 2019.372921][T20807] [U] [ 2019.726909][T20801] [U] [ 2019.779827][ T5306] usb 2-1: USB disconnect, device number 35 [ 2020.908208][T11772] Bluetooth: hci1: command tx timeout [ 2022.533830][T20792] chnl_net:caif_netlink_parms(): no params data found [ 2022.924789][T20835] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2258'. [ 2022.938541][T11772] Bluetooth: hci1: command tx timeout [ 2024.481922][T20792] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.636042][T20792] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.663683][T20792] bridge_slave_0: entered allmulticast mode [ 2024.783750][T20792] bridge_slave_0: entered promiscuous mode [ 2024.794504][T20792] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.810107][T20792] bridge0: port 2(bridge_slave_1) entered disabled state [ 2024.818210][T20792] bridge_slave_1: entered allmulticast mode [ 2024.830584][T20792] bridge_slave_1: entered promiscuous mode [ 2024.847131][T20851] x_tables: duplicate entry at hook 2 [ 2024.889300][T11772] Bluetooth: hci1: command tx timeout [ 2025.403892][T20859] openvswitch: netlink: Unknown nsh attribute 0 [ 2026.131485][T20792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2026.173328][T20792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2026.421011][T20867] loop2: detected capacity change from 0 to 7 [ 2026.430235][T20867] Dev loop2: unable to read RDB block 7 [ 2026.436176][T20867] loop2: unable to read partition table [ 2026.442975][T20867] loop2: partition table beyond EOD, truncated [ 2026.449585][T20867] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 2026.873461][T11772] Bluetooth: hci1: command tx timeout [ 2027.412513][T20792] team0: Port device team_slave_0 added [ 2027.665037][T20792] team0: Port device team_slave_1 added [ 2027.750127][T20792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2027.764734][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2027.807824][T20792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2027.865598][T20792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2027.893674][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2027.955697][T20792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2028.130704][T20792] hsr_slave_0: entered promiscuous mode [ 2028.153915][T20792] hsr_slave_1: entered promiscuous mode [ 2028.172026][T20792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2028.203929][T20792] Cannot create hsr debugfs directory [ 2028.410947][T20882] ieee802154 phy0 wpan0: encryption failed: -22 [ 2029.106793][ T4674] Dev loop2: unable to read RDB block 7 [ 2029.147186][ T4674] loop2: unable to read partition table [ 2029.153163][ T4674] loop2: partition table beyond EOD, truncated [ 2036.085448][T20892] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2036.768349][ T29] audit: type=1326 audit(1726425439.961:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20898 comm="syz.1.2273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98917def9 code=0x0 [ 2036.850376][T20792] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.456630][T20792] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.775932][T20792] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.862390][T20928] pim6reg1: entered promiscuous mode [ 2037.868226][T20928] pim6reg1: entered allmulticast mode [ 2038.001679][T20792] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.121915][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2272'. [ 2039.105408][T20941] loop2: detected capacity change from 0 to 7 [ 2039.119049][T20941] Dev loop2: unable to read RDB block 7 [ 2039.125267][T20941] loop2: unable to read partition table [ 2039.131300][T20941] loop2: partition table beyond EOD, truncated [ 2039.137511][T20941] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 2039.454358][T10590] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2039.685205][T10590] usb 3-1: Using ep0 maxpacket: 16 [ 2039.799315][T10590] usb 3-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 2039.895144][T10590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.920579][T10590] usb 3-1: Product: syz [ 2039.943252][T10590] usb 3-1: Manufacturer: syz [ 2039.963852][T10590] usb 3-1: SerialNumber: syz [ 2039.976349][T20792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2039.985887][T20947] ieee802154 phy0 wpan0: encryption failed: -22 [ 2040.004801][T10590] usb 3-1: config 0 descriptor?? [ 2040.013879][T20792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2040.046084][T20792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2040.059797][T10590] ax88179_178a 3-1:0.0: probe with driver ax88179_178a failed with error -22 [ 2040.123497][T20792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2040.255354][T20940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2041.327615][T20792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2041.426053][T20957] bad cache= option: none [ 2041.426053][T20957] [ 2042.021272][T20957] CIFS: VFS: bad cache= option: none [ 2042.080251][ T5320] usb 3-1: USB disconnect, device number 49 [ 2042.086212][T20792] 8021q: adding VLAN 0 to HW filter on device team0 [ 2042.384342][T14166] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.391636][T14166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2042.470536][T18069] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.477790][T18069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2042.503338][T20964] syz.0.2287[20964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2042.503489][T20964] syz.0.2287[20964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2042.532150][ T29] audit: type=1326 audit(1726425446.029:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.0.2287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1533d7def9 code=0x0 [ 2042.651323][T20966] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2286'. [ 2042.671269][T20966] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2286'. [ 2042.694407][T20966] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2286'. [ 2042.750751][T20971] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 2042.769268][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 2042.799930][T20971] syz.0.2287[20971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2042.800135][T20971] syz.0.2287[20971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2042.880565][T20973] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 2044.795690][T20792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2044.962158][T20996] ieee802154 phy0 wpan0: encryption failed: -22 [ 2045.234360][T21004] loop2: detected capacity change from 0 to 7 [ 2045.283516][T21004] Dev loop2: unable to read RDB block 7 [ 2045.289257][T21004] loop2: unable to read partition table [ 2045.295225][T21004] loop2: partition table beyond EOD, truncated [ 2045.302444][T21004] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 2046.188318][ T5306] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2046.426419][ T5306] usb 4-1: Using ep0 maxpacket: 16 [ 2046.487423][ T5306] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 2046.521142][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.561304][ T5306] usb 4-1: Product: syz [ 2046.583248][ T5306] usb 4-1: Manufacturer: syz [ 2046.588201][ T5306] usb 4-1: SerialNumber: syz [ 2046.642058][ T5306] usb 4-1: config 0 descriptor?? [ 2046.682094][ T5306] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 2046.877001][T21003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2046.946729][T21018] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 2046.953905][T21018] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2046.964040][T21018] vhci_hcd vhci_hcd.0: Device attached [ 2047.649886][T21019] vhci_hcd: connection closed [ 2048.443212][T12004] usb 4-1: USB disconnect, device number 30 [ 2048.462102][T14166] vhci_hcd: stop threads [ 2048.468077][T14166] vhci_hcd: release socket [ 2048.488965][T14166] vhci_hcd: disconnect device [ 2048.817766][T20792] veth0_vlan: entered promiscuous mode [ 2048.838755][T21026] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 2048.885495][T20792] veth1_vlan: entered promiscuous mode [ 2048.966001][T20792] veth0_macvtap: entered promiscuous mode [ 2049.059322][T20792] veth1_macvtap: entered promiscuous mode [ 2049.161205][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2049.456100][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2049.493757][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2049.705436][ T29] audit: type=1326 audit(1726425453.556:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.2.2300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb94257def9 code=0x0 [ 2050.104139][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.153452][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.213871][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.251892][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.304091][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.345274][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.372784][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.466024][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.522467][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.566343][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.588096][T21046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'. [ 2050.644429][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.141399][T20792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.276636][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.372765][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.407022][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.428745][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.456344][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.513105][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.535080][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.579999][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.624231][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.662851][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.704011][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.731390][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.021850][T20792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.033853][T20792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.056884][T20792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.659205][T20792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.708043][T20792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.760964][T20792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.833341][T20792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.314311][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2054.527738][T21067] ieee802154 phy0 wpan0: encryption failed: -22 [ 2054.557935][ T5403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.598057][ T5403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.732808][T13148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.764982][T13148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.976155][T21077] loop2: detected capacity change from 0 to 7 [ 2054.995645][T21077] Dev loop2: unable to read RDB block 7 [ 2055.001453][T21077] loop2: unable to read partition table [ 2055.007506][T21077] loop2: partition table beyond EOD, truncated [ 2055.014378][T21077] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 2055.847393][T10590] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2056.038043][T10590] usb 4-1: Using ep0 maxpacket: 16 [ 2056.059601][T10590] usb 4-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 2056.082139][T10590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.094046][T10590] usb 4-1: Product: syz [ 2056.099282][T10590] usb 4-1: Manufacturer: syz [ 2056.105421][T10590] usb 4-1: SerialNumber: syz [ 2056.370956][T10590] usb 4-1: config 0 descriptor?? [ 2056.680064][T21076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2056.740086][T10590] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 2056.806313][T21084] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 2057.152171][T21092] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 2057.152171][T21092] program syz.4.2312 not setting count and/or reply_len properly [ 2057.218350][T21092] netlink: 'syz.4.2312': attribute type 10 has an invalid length. [ 2057.227516][T21092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2312'. [ 2057.244505][T21092] bridge0: port 3(gretap0) entered blocking state [ 2057.253026][T21092] bridge0: port 3(gretap0) entered disabled state [ 2057.263179][T21092] gretap0: entered allmulticast mode [ 2057.284143][T21092] gretap0: entered promiscuous mode [ 2057.328921][T21092] bridge0: port 3(gretap0) entered blocking state [ 2057.335847][T21092] bridge0: port 3(gretap0) entered forwarding state [ 2059.315761][T17453] usb 4-1: USB disconnect, device number 31 [ 2059.538937][T21103] loop2: detected capacity change from 0 to 7 [ 2059.586977][T21103] Dev loop2: unable to read RDB block 7 [ 2059.595691][T21103] loop2: unable to read partition table [ 2059.601746][T21103] loop2: partition table beyond EOD, truncated [ 2059.608036][T21103] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 2060.490487][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2316'. [ 2060.699371][ T4674] Dev loop2: unable to read RDB block 7 [ 2060.707952][ T4674] loop2: unable to read partition table [ 2060.713821][ T4674] loop2: partition table beyond EOD, truncated [ 2061.618100][ T4674] Dev loop2: unable to read RDB block 7 [ 2061.629535][ T4674] loop2: unable to read partition table [ 2061.642334][ T4674] loop2: partition table beyond EOD, truncated [ 2061.692985][T21128] ieee802154 phy0 wpan0: encryption failed: -22 [ 2061.824147][ T4674] Dev loop2: unable to read RDB block 7 [ 2061.842401][ T4674] loop2: unable to read partition table [ 2061.865586][ T4674] loop2: partition table beyond EOD, truncated [ 2062.555371][T21134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2067.526199][ T37] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000084: 0000 [#1] PREEMPT SMP KASAN PTI [ 2067.538816][ T37] KASAN: null-ptr-deref in range [0x0000000000000420-0x0000000000000427] [ 2067.547243][ T37] CPU: 1 UID: 0 PID: 37 Comm: khugepaged Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 2067.557744][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2067.568078][ T37] RIP: 0010:khugepaged+0x76d/0x1dc0 [ 2067.573286][ T37] Code: 8b 1b be 00 00 00 01 48 21 de 31 ff e8 0c a6 95 ff b8 00 00 00 01 48 21 c3 0f 85 4d 0d 00 00 49 8d 7d 20 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 b7 c4 f9 ff 4d 8b 75 20 49 8d 5d 70 48 89 [ 2067.592990][ T37] RSP: 0000:ffffc90000ad7be0 EFLAGS: 00010207 [ 2067.599088][ T37] RAX: 0000000000000084 RBX: 0000000000000000 RCX: ffff888020ab0000 [ 2067.607181][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000426 [ 2067.615167][ T37] RBP: ffffc90000ad7ed0 R08: ffffffff81fdeb34 R09: 1ffff110023bb5b0 [ 2067.623253][ T37] R10: dffffc0000000000 R11: ffffed10023bb5b1 R12: ffff888011dda600 [ 2067.631249][ T37] R13: 0000000000000406 R14: 0000000020400000 R15: dffffc0000000000 [ 2067.639238][ T37] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 2067.648221][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2067.654816][ T37] CR2: 0000000020000100 CR3: 0000000068db2000 CR4: 00000000003526f0 [ 2067.662900][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2067.670883][ T37] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2067.678865][ T37] Call Trace: [ 2067.682147][ T37] [ 2067.685089][ T37] ? __die_body+0x88/0xe0 [ 2067.689439][ T37] ? die_addr+0x108/0x140 [ 2067.693968][ T37] ? exc_general_protection+0x3dd/0x5d0 [ 2067.699539][ T37] ? asm_exc_general_protection+0x26/0x30 [ 2067.705290][ T37] ? khugepaged+0x754/0x1dc0 [ 2067.709946][ T37] ? khugepaged+0x76d/0x1dc0 [ 2067.714602][ T37] ? __pfx_khugepaged+0x10/0x10 [ 2067.719530][ T37] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2067.726071][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2067.732213][ T37] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2067.738754][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2067.744848][ T37] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 2067.750796][ T37] ? lockdep_hardirqs_on+0x99/0x150 [ 2067.756011][ T37] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2067.761937][ T37] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2067.768296][ T37] ? __kthread_parkme+0x169/0x1d0 [ 2067.773342][ T37] ? __pfx_khugepaged+0x10/0x10 [ 2067.778221][ T37] kthread+0x2f0/0x390 [ 2067.782309][ T37] ? __pfx_khugepaged+0x10/0x10 [ 2067.787189][ T37] ? __pfx_kthread+0x10/0x10 [ 2067.791786][ T37] ret_from_fork+0x4b/0x80 [ 2067.796211][ T37] ? __pfx_kthread+0x10/0x10 [ 2067.800827][ T37] ret_from_fork_asm+0x1a/0x30 [ 2067.805615][ T37] [ 2067.808633][ T37] Modules linked in: [ 2067.890911][ T37] ---[ end trace 0000000000000000 ]--- [ 2067.896504][ T37] RIP: 0010:khugepaged+0x76d/0x1dc0 [ 2067.904945][ T37] Code: 8b 1b be 00 00 00 01 48 21 de 31 ff e8 0c a6 95 ff b8 00 00 00 01 48 21 c3 0f 85 4d 0d 00 00 49 8d 7d 20 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 b7 c4 f9 ff 4d 8b 75 20 49 8d 5d 70 48 89 [ 2068.363319][ T37] RSP: 0000:ffffc90000ad7be0 EFLAGS: 00010207 [ 2068.371023][ T37] RAX: 0000000000000084 RBX: 0000000000000000 RCX: ffff888020ab0000 [ 2068.379949][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000426 [ 2068.388301][ T37] RBP: ffffc90000ad7ed0 R08: ffffffff81fdeb34 R09: 1ffff110023bb5b0 [ 2068.396442][ T37] R10: dffffc0000000000 R11: ffffed10023bb5b1 R12: ffff888011dda600 [ 2068.405791][ T37] R13: 0000000000000406 R14: 0000000020400000 R15: dffffc0000000000 [ 2068.414712][ T37] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 2068.424150][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2068.431885][ T37] CR2: 00007faa00d07ab8 CR3: 0000000079e14000 CR4: 00000000003526f0 [ 2068.441589][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2068.451514][ T37] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2068.460450][ T37] Kernel panic - not syncing: Fatal exception [ 2068.466880][ T37] Kernel Offset: disabled [ 2068.471229][ T37] Rebooting in 86400 seconds..