last executing test programs:

22m20.037890164s ago: executing program 0 (id=161):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x809268, 0x400}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

22m19.806912817s ago: executing program 0 (id=165):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0)

22m13.345803002s ago: executing program 3 (id=177):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r2, 0x300000b, 0x11, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x3, 0x0, [{0x6, 0x4, 0x8000, 0xc7da, 0x9}, {0x40000000, 0x8, 0x4772, 0x8, 0x4}, {0x0, 0xa, 0x3ff, 0xc0000004, 0x5}]})

22m12.266404208s ago: executing program 3 (id=180):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1, 0x25, 0x4, @val=@netkit={@void, @value=r4}}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0)

22m12.07435334s ago: executing program 3 (id=181):
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x541802, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x604080)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1040000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
flock(r3, 0x8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x8000, 0x8, 0x0, 0x806b})

22m11.730670455s ago: executing program 3 (id=182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)

22m9.957509591s ago: executing program 3 (id=185):
ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, &(0x7f00000016c0), 0x0, 0x10, 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0xd)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001030000000000f20000020000040000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x4, 0xa1, 0x46}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="5f476cf53f84ffffffffffff08060001080006040002aaaaaaaaaa3b7f00000caaaaaaaaaaaaac1414bb1504d06d76dad98a2bfd8ca2b928cabc10381fe9b9429ffac44d7c05d2df82a2a4fcece79dcf7abf258b6b3954722fc5403c7cb42a485c93c2"], 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080))

22m9.839509093s ago: executing program 0 (id=186):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r1, 0x7, &(0x7f0000000300)=0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r6)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r7, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)

22m9.493841668s ago: executing program 3 (id=188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000340)=0xffffffffffff0001, 0xd, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0x2}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}}, 0x0)

22m8.749123909s ago: executing program 32 (id=188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000340)=0xffffffffffff0001, 0xd, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0x2}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}}, 0x0)

22m6.940637635s ago: executing program 0 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)

22m4.324772094s ago: executing program 0 (id=200):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1e, 0x4, 0x20, 0x800041}, 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87)
syz_open_dev$evdev(0x0, 0x0, 0x60000)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
io_setup(0x6, &(0x7f0000001380)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x21, 0x2, 0x2)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117)

22m3.781617732s ago: executing program 0 (id=201):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$TCFLSH(r0, 0x5608, 0x1)

22m3.456286746s ago: executing program 33 (id=201):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$TCFLSH(r0, 0x5608, 0x1)

16m40.163656439s ago: executing program 4 (id=942):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0)

16m39.895077263s ago: executing program 4 (id=944):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000800)=ANY=[], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

16m39.717634845s ago: executing program 4 (id=947):
write$usbip_server(0xffffffffffffffff, 0x0, 0xfffffffffffffd8e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'})
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)

16m33.507578965s ago: executing program 4 (id=949):
syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10)
close(r3)
setregid(0xffffffffffffffff, 0x0)
setuid(0xee01)
syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r5, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

16m31.972170657s ago: executing program 4 (id=957):
write$usbip_server(0xffffffffffffffff, 0x0, 0xfffffffffffffd8e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'})
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)

16m26.206588613s ago: executing program 4 (id=960):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0xcd, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0xd}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x9, 0x6}}}, 0xfffffffffffffdb3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x300)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000600)=@other={'unlock', ' ', 'none'}, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r6 = socket$kcm(0x2d, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x34, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}]}, 0x34}}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r9, 0x0, 0x480, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCOUTQ(r12, 0x5411, &(0x7f0000000000))
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r13, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

16m10.576808521s ago: executing program 34 (id=960):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0xcd, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0xd}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x9, 0x6}}}, 0xfffffffffffffdb3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x300)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000600)=@other={'unlock', ' ', 'none'}, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r6 = socket$kcm(0x2d, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x34, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}]}, 0x34}}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r9, 0x0, 0x480, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCOUTQ(r12, 0x5411, &(0x7f0000000000))
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r13, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

19.428711235s ago: executing program 2 (id=4592):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
pwrite64(r0, 0x0, 0x0, 0xd084)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = creat(0x0, 0x0)
r2 = open$dir(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000540)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730", 0x2f)
write$qrtrtun(r1, &(0x7f0000000780), 0x0)
write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

14.704551796s ago: executing program 2 (id=4606):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
semget$private(0x0, 0x1, 0x81)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

11.786769161s ago: executing program 2 (id=4614):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
pwrite64(r0, 0x0, 0x0, 0xd084)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = creat(0x0, 0x0)
r2 = open$dir(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000540)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730", 0x2f)
write$qrtrtun(r1, &(0x7f0000000780), 0x0)
write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

7.977200639s ago: executing program 5 (id=4623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x104, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xc0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x12c}}, 0x0)

7.690314443s ago: executing program 5 (id=4626):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
r2 = syz_io_uring_setup(0x800017b3, &(0x7f0000000500)={0x0, 0x18f6, 0x10, 0x0, 0x314}, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000003680), r4)
sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00 \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7001fcd9df25150000005b000100", @ANYRES32=0x0, @ANYBLOB="000014005b402400"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x40044)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20000180)
inotify_rm_watch(0xffffffffffffffff, r6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r7, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x7, 0x7, 0x30100, r7, 0x811, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0xc}, 0x50)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x2)
io_uring_enter(r2, 0x1, 0x2, 0x1, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000)

6.778673548s ago: executing program 5 (id=4627):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f00000001c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14)
socket$packet(0x11, 0x1, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a182"], 0x50}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

6.776273717s ago: executing program 6 (id=4628):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')

6.450428762s ago: executing program 2 (id=4629):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$TCFLSH(r0, 0x5608, 0x1)

6.332264014s ago: executing program 6 (id=4630):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
unlink(0x0)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

4.693140929s ago: executing program 1 (id=4631):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)

4.227151136s ago: executing program 1 (id=4632):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x3}, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0)
close(r2)
r3 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x123100)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305720, &(0x7f00000004c0)={0x1})
io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000180)=<r9=>0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18)
socket$inet6(0xa, 0x80002, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r12 = socket$xdp(0x2c, 0x3, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}})
io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0)

3.96160673s ago: executing program 6 (id=4633):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
flock(r1, 0x1)

3.933515891s ago: executing program 2 (id=4634):
socket$alg(0x26, 0x5, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x1b3, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x7, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xffffffff, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x0, 0x3, 0x5, 0x4, 0x8, 0x0, 0x1, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x9, 0xa, 0x0, 0x9, 0x9, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x2, 0x3b, 0x3, 0x2, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x2, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x4, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x28, 0x1, 0x0)
r4 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900", 0x2a)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240), &(0x7f0000000280))
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)

3.548678636s ago: executing program 5 (id=4635):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, 0x0, 0x0)
connect$pptp(r3, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$inet6(0xa, 0x80002, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}})
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

3.223190121s ago: executing program 1 (id=4636):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0xfffffffffffffffe)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x1, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
unshare(0x22020600)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x0, 0x2})

2.67260795s ago: executing program 6 (id=4637):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
pwrite64(r0, 0x0, 0x0, 0xd084)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = creat(0x0, 0x0)
r2 = open$dir(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000540)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730", 0x2f)
write$qrtrtun(r1, &(0x7f0000000780), 0x0)
write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

2.199070977s ago: executing program 1 (id=4638):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')

1.785056293s ago: executing program 6 (id=4639):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$TCFLSH(r0, 0x5608, 0x1)

1.497205378s ago: executing program 1 (id=4640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

778.983958ms ago: executing program 1 (id=4641):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
unlink(0x0)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

545.572812ms ago: executing program 2 (id=4642):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$TCFLSH(r0, 0x5608, 0x1)

517.240903ms ago: executing program 5 (id=4643):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
io_submit(r1, 0x0, 0x0)

93.005819ms ago: executing program 5 (id=4644):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x3}, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0)
close(r2)
r3 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x123100)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305720, &(0x7f00000004c0)={0x1})
io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000180)=<r9=>0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18)
socket$inet6(0xa, 0x80002, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r12 = socket$xdp(0x2c, 0x3, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}})
io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0)

0s ago: executing program 6 (id=4645):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x8, 0x2, 0x100059a, 0xbfc4bb97dfede4bd})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x60, r2, 0x4, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x60}, {0x18}, {0x49, 0x1}, {0x5}, {0x36}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x557}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x30)
fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000600000085000000530000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000460000850000007b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='virtio_transport_alloc_pkt\x00', r6}, 0x9)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000240))
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x200004}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r10, 0x0)

kernel console output (not intermixed with test programs):

und, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1245.568400][T19091] hsr_slave_1: entered promiscuous mode
[ 1245.574476][T16502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1245.584140][T19091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1245.602508][T19091] Cannot create hsr debugfs directory
[ 1245.602922][T16502] usb 3-1: config 0 descriptor??
[ 1245.655167][T16502] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1245.665825][T16502] dvb-usb: bulk message failed: -22 (3/0)
[ 1245.718338][T16502] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1245.758488][T16502] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1245.776660][T16502] usb 3-1: media controller created
[ 1245.799507][T16502] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1245.855109][T16502] dvb-usb: bulk message failed: -22 (6/0)
[ 1245.882970][T16502] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1245.945928][T16502] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55
[ 1246.064380][T16502] dvb-usb: schedule remote query interval to 150 msecs.
[ 1246.106443][T16502] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1246.217371][T19164] netlink: 'syz.1.3571': attribute type 1 has an invalid length.
[ 1246.246166][T19164] bond1: entered promiscuous mode
[ 1246.254974][T19164] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1246.263054][T16502] dvb-usb: bulk message failed: -22 (1/0)
[ 1246.268790][T16502] dvb-usb: error while querying for an remote control event.
[ 1246.343040][T19166] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1246.352379][T19166] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1246.363467][T19166] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[ 1246.376279][T19166] bond1: (slave wireguard0): making interface the new active one
[ 1246.385387][T19166] wireguard0: entered promiscuous mode
[ 1246.392837][T19166] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[ 1246.440890][T16502] dvb-usb: bulk message failed: -22 (1/0)
[ 1246.446683][T16502] dvb-usb: error while querying for an remote control event.
[ 1246.631261][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[ 1246.651950][ T5865] dvb-usb: error while querying for an remote control event.
[ 1246.820212][T16502] dvb-usb: bulk message failed: -22 (1/0)
[ 1246.827463][T16502] dvb-usb: error while querying for an remote control event.
[ 1247.010140][ T5777] Bluetooth: hci1: command tx timeout
[ 1247.012264][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[ 1247.086849][ T5865] dvb-usb: error while querying for an remote control event.
[ 1247.207484][T19184] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1247.300532][ T5865] dvb-usb: bulk message failed: -22 (1/0)
[ 1247.319687][ T5865] dvb-usb: error while querying for an remote control event.
[ 1247.496219][ T2924] hsr_slave_0: left promiscuous mode
[ 1247.502248][   T23] dvb-usb: bulk message failed: -22 (1/0)
[ 1247.539195][   T23] dvb-usb: error while querying for an remote control event.
[ 1247.597190][ T2924] hsr_slave_1: left promiscuous mode
[ 1247.608548][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1247.624032][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1247.659727][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1247.678660][T15415] usb 3-1: USB disconnect, device number 5
[ 1247.706003][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1247.753165][ T2924] bridge_slave_1: left allmulticast mode
[ 1247.758879][ T2924] bridge_slave_1: left promiscuous mode
[ 1247.885000][T15415] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1247.898364][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1247.923234][ T2924] bridge_slave_0: left allmulticast mode
[ 1247.928949][ T2924] bridge_slave_0: left promiscuous mode
[ 1247.935792][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1248.364802][ T2924] veth1_macvtap: left promiscuous mode
[ 1248.372451][ T2924] veth0_macvtap: left promiscuous mode
[ 1248.378032][ T2924] veth1_vlan: left promiscuous mode
[ 1248.425774][ T2924] veth0_vlan: left promiscuous mode
[ 1249.138750][ T2924] bond1 (unregistering): Released all slaves
[ 1249.357386][ T2924] team0 (unregistering): Port device geneve0 removed
[ 1250.368636][ T2924] team0 (unregistering): Port device team_slave_1 removed
[ 1250.428495][ T2924] team0 (unregistering): Port device team_slave_0 removed
[ 1250.490497][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1250.550650][ T5763] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1250.563255][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1250.750411][ T5763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1250.761797][ T5763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1250.786914][ T5763] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1250.796530][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1250.837576][ T5763] usb 6-1: config 0 descriptor??
[ 1250.872094][ T5763] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1250.891303][ T5763] dvb-usb: bulk message failed: -22 (3/0)
[ 1250.909004][ T5763] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1250.922008][ T5763] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1250.929140][ T5763] usb 6-1: media controller created
[ 1250.936786][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1250.965609][ T5763] dvb-usb: bulk message failed: -22 (6/0)
[ 1250.975682][ T5763] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1251.005066][ T5763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56
[ 1251.035659][ T5763] dvb-usb: schedule remote query interval to 150 msecs.
[ 1251.046137][ T5763] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1251.214369][ T5763] dvb-usb: bulk message failed: -22 (1/0)
[ 1251.250871][ T5763] dvb-usb: error while querying for an remote control event.
[ 1251.410746][ T5763] dvb-usb: bulk message failed: -22 (1/0)
[ 1251.499469][ T5763] dvb-usb: error while querying for an remote control event.
[ 1251.573922][ T2924] bond0 (unregistering): Released all slaves
[ 1251.670256][ T5763] dvb-usb: bulk message failed: -22 (1/0)
[ 1251.677554][ T5763] dvb-usb: error while querying for an remote control event.
[ 1251.689592][T19199] netlink: 'syz.1.3582': attribute type 1 has an invalid length.
[ 1251.757938][T19199] bond2: entered promiscuous mode
[ 1251.776601][T19199] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1251.805611][T19200] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1251.900385][T16502] dvb-usb: bulk message failed: -22 (1/0)
[ 1252.019878][T16502] dvb-usb: error while querying for an remote control event.
[ 1252.021813][T19091] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1252.071185][T19091] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1252.196456][T19091] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1252.256402][T19091] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1252.381114][ T5763] dvb-usb: bulk message failed: -22 (1/0)
[ 1252.404063][ T5763] dvb-usb: error while querying for an remote control event.
[ 1252.570246][ T5763] dvb-usb: bulk message failed: -22 (1/0)
[ 1252.576046][ T5763] dvb-usb: error while querying for an remote control event.
[ 1252.882476][T19091] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1252.947293][T16502] dvb-usb: bulk message failed: -22 (1/0)
[ 1252.974844][T19091] 8021q: adding VLAN 0 to HW filter on device team0
[ 1252.990780][T16502] dvb-usb: error while querying for an remote control event.
[ 1253.355427][   T23] dvb-usb: bulk message failed: -22 (1/0)
[ 1253.374916][   T23] dvb-usb: error while querying for an remote control event.
[ 1253.434696][T19091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1253.463193][T19091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1253.679774][  T786] usb 6-1: USB disconnect, device number 11
[ 1253.839451][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1253.846616][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1253.932871][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1253.940009][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1254.058667][  T786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1254.342870][T19264] netlink: 'syz.2.3596': attribute type 1 has an invalid length.
[ 1254.367781][T19264] bond3: entered promiscuous mode
[ 1254.375365][T19264] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1254.417411][T19264] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1254.425276][T19264] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[ 1254.436241][T19264] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[ 1254.449206][T19264] bond3: (slave wireguard1): making interface the new active one
[ 1254.458671][T19264] wireguard1: entered promiscuous mode
[ 1254.465524][T19264] bond3: (slave wireguard1): Enslaving as an active interface with an up link
[ 1254.482594][T19091] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1255.036659][T19287] netlink: 'syz.1.3603': attribute type 1 has an invalid length.
[ 1255.092882][T19290] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1256.186410][T15267] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1256.403803][T15267] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1256.419821][T15267] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1256.484095][T15267] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1256.555115][T15267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.625311][T19287] bond3 (unregistering): Released all slaves
[ 1256.671522][T15267] usb 6-1: config 0 descriptor??
[ 1256.818807][T15267] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1256.874614][T15267] dvb-usb: bulk message failed: -22 (3/0)
[ 1257.487952][T15267] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1257.630306][T15267] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1257.707583][T15267] usb 6-1: media controller created
[ 1257.739671][T15267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1257.763760][T19091] veth0_vlan: entered promiscuous mode
[ 1257.779142][T19091] veth1_vlan: entered promiscuous mode
[ 1257.818046][T19091] veth0_macvtap: entered promiscuous mode
[ 1257.830414][T19091] veth1_macvtap: entered promiscuous mode
[ 1257.855161][T15267] dvb-usb: bulk message failed: -22 (6/0)
[ 1257.879307][T15267] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1257.916509][T15267] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input58
[ 1257.941515][T19091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.959152][T19091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1257.979773][T19091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1257.981168][T15267] dvb-usb: schedule remote query interval to 150 msecs.
[ 1257.993058][T19091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1258.072745][T19091] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1258.074167][T15267] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1258.099101][T19298] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.149581][T19301] netlink: 'syz.1.3605': attribute type 10 has an invalid length.
[ 1258.160005][T19301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3605'.
[ 1258.197243][T19091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1258.210454][T19091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1258.210915][T15267] usb 6-1: USB disconnect, device number 12
[ 1258.220932][T19091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1258.242817][T19091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1258.257536][T19091] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1258.287899][T19298] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.295313][T15267] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1258.345511][T19091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.354573][T19091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.363542][T19091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.372440][T19091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.422589][T19298] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.501630][T19298] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.553415][T15931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1258.563656][T15931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1258.606941][T15931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1258.621567][T15931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1258.694624][T19298] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.722857][T19298] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.748544][T19298] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.784111][T19298] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1259.421378][T19321] sp0: Synchronizing with TNC
[ 1259.571866][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3612'.
[ 1259.772223][T19324] netlink: 'syz.2.3613': attribute type 1 has an invalid length.
[ 1259.929193][T19329] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1261.142124][T19331] bond4 (unregistering): Released all slaves
[ 1262.803567][T19360] siw: device registration error -23
[ 1262.977702][T19364] trusted_key: encrypted_key: master key parameter 'u000000000000' is invalid
[ 1264.332764][T19384] sp0: Synchronizing with TNC
[ 1264.468668][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3629'.
[ 1264.656975][T19393] siw: device registration error -23
[ 1265.127687][T19397] loop2: detected capacity change from 0 to 7
[ 1265.140217][T19397] Dev loop2: unable to read RDB block 7
[ 1265.171206][T19397]  loop2: unable to read partition table
[ 1265.185942][T19397] loop2: partition table beyond EOD, truncated
[ 1265.195194][T19397] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1265.471634][T19407] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1266.253476][T19418] siw: device registration error -23
[ 1266.618563][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'.
[ 1266.739582][T19432] loop2: detected capacity change from 0 to 7
[ 1266.757945][T19432] Dev loop2: unable to read RDB block 7
[ 1266.803387][T19432]  loop2: unable to read partition table
[ 1266.825489][T19432] loop2: partition table beyond EOD, truncated
[ 1266.866048][T19432] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1266.876351][T19434] sp0: Synchronizing with TNC
[ 1266.994484][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3646'.
[ 1267.723070][T19447] siw: device registration error -23
[ 1267.876782][T19453] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1269.170873][T19466] loop2: detected capacity change from 0 to 7
[ 1269.205244][T19466] Dev loop2: unable to read RDB block 7
[ 1269.329625][T19466]  loop2: unable to read partition table
[ 1270.584591][T19466] loop2: partition table beyond EOD, truncated
[ 1270.617509][T19466] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1272.253732][T19480] lo speed is unknown, defaulting to 1000
[ 1272.359542][T19485] sp0: Synchronizing with TNC
[ 1272.436838][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3661'.
[ 1272.648367][T19489] siw: device registration error -23
[ 1273.017833][T19493] 9pnet_virtio: no channels available for device syz
[ 1273.584088][T19500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3667'.
[ 1274.390314][T19503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3665'.
[ 1275.304296][T19515] siw: device registration error -23
[ 1275.484733][T19521] sp0: Synchronizing with TNC
[ 1275.577290][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'.
[ 1275.700131][T15267] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1275.922401][T15267] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1275.960782][T15267] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1276.003805][T15267] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1276.031338][T19527] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3676'.
[ 1276.042932][T15267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1276.076957][T15267] usb 2-1: SerialNumber: syz
[ 1276.215393][T19528] lo speed is unknown, defaulting to 1000
[ 1276.221745][T19528] lo speed is unknown, defaulting to 1000
[ 1276.243489][T19528] lo speed is unknown, defaulting to 1000
[ 1276.273098][T19529] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3676'.
[ 1276.379261][T19528] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1276.451649][T15267] usb 2-1: 0:2 : does not exist
[ 1276.549478][T19528] lo speed is unknown, defaulting to 1000
[ 1276.566093][T19528] lo speed is unknown, defaulting to 1000
[ 1276.575377][T19528] lo speed is unknown, defaulting to 1000
[ 1276.584361][T19528] lo speed is unknown, defaulting to 1000
[ 1276.628361][T15267] usb 2-1: USB disconnect, device number 6
[ 1276.701769][T19531] QAT: Device 7 not found
[ 1276.803174][T10115] udevd[10115]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1277.269531][T19545] random: crng reseeded on system resumption
[ 1277.453924][T19541] netlink: 'syz.6.3681': attribute type 1 has an invalid length.
[ 1278.223438][T19551] capability: warning: `syz.5.3682' uses 32-bit capabilities (legacy support in use)
[ 1279.069044][T19561] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1279.318249][T19565] sp0: Synchronizing with TNC
[ 1279.437412][T19572] siw: device registration error -23
[ 1279.465931][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3686'.
[ 1280.080320][  T786] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1280.306762][T19581] lo speed is unknown, defaulting to 1000
[ 1280.330638][T19581] lo speed is unknown, defaulting to 1000
[ 1280.783608][  T786] usb 2-1: Using ep0 maxpacket: 16
[ 1280.799533][  T786] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 1280.807894][  T786] usb 2-1: config 0 has no interface number 0
[ 1280.820162][  T786] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1280.860103][  T786] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1280.907279][  T786] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1280.930935][  T786] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1280.943157][  T786] usb 2-1: Product: syz
[ 1280.977106][  T786] usb 2-1: SerialNumber: syz
[ 1281.021328][  T786] usb 2-1: config 0 descriptor??
[ 1281.049488][T19587] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1281.064204][  T786] cm109 2-1:0.8: invalid payload size 0, expected 4
[ 1281.119695][  T786] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input64
[ 1281.139495][T19588] netlink: 'syz.6.3693': attribute type 10 has an invalid length.
[ 1281.156006][T19588] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3693'.
[ 1281.246997][T19588] team0: Failed to send port change of device geneve0 via netlink (err -105)
[ 1281.271838][T19588] team0: Failed to send options change via netlink (err -105)
[ 1281.286407][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1281.323955][T19588] team0: Port device geneve0 added
[ 1281.555105][T19587] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1281.586828][T19577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1281.594220][T19577] IPv6: NLM_F_CREATE should be set when creating new route
[ 1281.639471][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1281.649803][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1281.655041][T10837] usb 2-1: USB disconnect, device number 7
[ 1281.656784][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1281.679964][T10837] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1281.756773][T19587] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1281.779551][T19592] netlink: 'syz.2.3695': attribute type 1 has an invalid length.
[ 1281.806234][T19593] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1282.031259][T19592] bond4 (unregistering): Released all slaves
[ 1282.074636][T19587] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1282.256176][T19602] input: syz1 as /devices/virtual/input/input66
[ 1282.305217][T19587] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.378145][T19587] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.435357][T19587] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.459999][T19606] siw: device registration error -23
[ 1282.503875][T19587] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1282.627780][T19609] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1282.704171][T19611] sp0: Synchronizing with TNC
[ 1283.032634][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'.
[ 1283.437446][T19619] lo speed is unknown, defaulting to 1000
[ 1283.948793][T19619] lo speed is unknown, defaulting to 1000
[ 1284.663085][T19633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3707'.
[ 1284.834344][T19636] siw: device registration error -23
[ 1284.867408][T19637] input: syz1 as /devices/virtual/input/input67
[ 1285.169508][T19641] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.192475][T19642] netlink: 'syz.6.3711': attribute type 10 has an invalid length.
[ 1285.205288][T19642] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3711'.
[ 1285.216583][T19642] team0: Failed to send port change of device geneve0 via netlink (err -105)
[ 1285.267692][T19641] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.332139][T19641] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.403258][T19641] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.580387][   T28] audit: type=1326 audit(1750854525.133:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.2.3710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d92f8e929 code=0x0
[ 1286.616250][T19643] lo speed is unknown, defaulting to 1000
[ 1286.622938][T19643] lo speed is unknown, defaulting to 1000
[ 1287.399660][T19661] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1287.554317][T19641] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.613575][T19641] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.675249][T19641] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.716943][T19641] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.923833][T19665] siw: device registration error -23
[ 1287.973884][T19667] input: syz1 as /devices/virtual/input/input68
[ 1289.306811][T19686] netlink: 'syz.6.3724': attribute type 1 has an invalid length.
[ 1289.469205][T19692] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.516452][T19694] netlink: 'syz.6.3727': attribute type 10 has an invalid length.
[ 1289.533034][T19694] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3727'.
[ 1289.576988][T19692] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.676869][T19692] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.692947][T19701] input: syz1 as /devices/virtual/input/input69
[ 1289.702199][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3731'.
[ 1289.807292][T19692] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1290.010184][ T5812] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1290.191303][ T5812] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1290.201350][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.211244][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.222959][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.247113][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.256510][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.268815][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.277834][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.287365][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.298944][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.310291][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.319366][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.333780][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.345175][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.354715][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.366512][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.374803][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.383889][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.397261][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.431608][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.463927][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.514894][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.572493][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1290.625408][ T5812] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1290.659988][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1290.677822][ T5812] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1290.689431][ T5812] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1290.724300][ T5812] usb 6-1: Product: syz
[ 1290.743650][ T5812] usb 6-1: Manufacturer: syz
[ 1290.763245][ T5812] usb 6-1: SerialNumber: syz
[ 1290.821321][ T5812] usb 6-1: config 0 descriptor??
[ 1291.036305][ T5812] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[ 1291.422197][T19719] netlink: 'syz.1.3735': attribute type 1 has an invalid length.
[ 1291.441176][ T5812] usb 6-1: USB disconnect, device number 13
[ 1291.471642][T19719] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1291.497776][ T5812] yurex 6-1:0.0: USB YUREX #0 now disconnected
[ 1291.541876][T19722] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1291.838567][T19719] bond3 (unregistering): Released all slaves
[ 1292.052996][T19726] loop2: detected capacity change from 0 to 7
[ 1292.070528][T19726] Dev loop2: unable to read RDB block 7
[ 1292.076167][T19726]  loop2: unable to read partition table
[ 1292.112077][T19726] loop2: partition table beyond EOD, truncated
[ 1292.118513][T19726] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1292.195798][T19733] input: syz1 as /devices/virtual/input/input70
[ 1292.327874][   T28] audit: type=1326 audit(1750854530.863:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19734 comm="syz.2.3742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x0
[ 1292.973778][T19692] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.052130][T19692] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.216312][T19692] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.479551][T19692] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.587446][T19750] netlink: 'syz.5.3746': attribute type 1 has an invalid length.
[ 1293.660645][T19755] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1293.711351][T19750] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1294.304094][T19750] bond1 (unregistering): Released all slaves
[ 1295.062391][T19792] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.132221][T19796] netlink: 'syz.6.3755': attribute type 10 has an invalid length.
[ 1295.152584][T19796] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3755'.
[ 1295.186331][T19792] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.286633][T19792] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.365407][T19792] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.581557][T19801] siw: device registration error -23
[ 1295.729036][T19803] input: syz1 as /devices/virtual/input/input72
[ 1295.915205][T19808] netlink: 'syz.2.3761': attribute type 1 has an invalid length.
[ 1295.985310][T19808] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1296.168112][T19813] trusted_key: encrypted_key: insufficient parameters specified
[ 1296.180789][T19813] trusted_key: encrypted_key: insufficient parameters specified
[ 1296.236058][T19808] bond4 (unregistering): Released all slaves
[ 1296.625800][T19828] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3767'.
[ 1296.863715][T19834] input: syz1 as /devices/virtual/input/input73
[ 1298.041502][T19835] lo speed is unknown, defaulting to 1000
[ 1298.048165][T19835] lo speed is unknown, defaulting to 1000
[ 1298.147090][T19832] pim6reg: entered allmulticast mode
[ 1298.294090][T19832] pim6reg: left allmulticast mode
[ 1298.545150][T19792] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.648035][T19792] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.694268][T19792] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.795926][T19792] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.377618][T19857] netlink: 'syz.2.3774': attribute type 1 has an invalid length.
[ 1299.516129][T19857] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1299.589648][T19853] trusted_key: encrypted_key: insufficient parameters specified
[ 1299.617302][T19853] trusted_key: encrypted_key: insufficient parameters specified
[ 1299.955741][T19876] input: syz1 as /devices/virtual/input/input74
[ 1299.992325][T19857] bond4 (unregistering): Released all slaves
[ 1300.034082][T19874] netlink: 'syz.5.3778': attribute type 1 has an invalid length.
[ 1300.109914][T19874] bond1: entered promiscuous mode
[ 1300.116160][T19874] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1300.347715][T19889] siw: device registration error -23
[ 1300.457263][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.464078][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.773986][T19897] trusted_key: encrypted_key: insufficient parameters specified
[ 1300.793995][T19897] trusted_key: encrypted_key: insufficient parameters specified
[ 1300.843806][T19907] input: syz1 as /devices/virtual/input/input75
[ 1301.260209][  T786] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1301.483168][  T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1301.499532][  T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1301.529004][  T786] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1301.580511][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.636148][  T786] usb 3-1: config 0 descriptor??
[ 1301.711916][  T786] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1301.766528][  T786] dvb-usb: bulk message failed: -22 (3/0)
[ 1301.847285][  T786] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1301.896541][  T786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1301.904707][  T786] usb 3-1: media controller created
[ 1301.928176][  T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1302.042930][  T786] dvb-usb: bulk message failed: -22 (6/0)
[ 1302.129257][  T786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1302.186126][  T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input76
[ 1302.409592][  T786] dvb-usb: schedule remote query interval to 150 msecs.
[ 1302.416357][T19940] input: syz1 as /devices/virtual/input/input77
[ 1302.484092][  T786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1302.500168][T19943] sp0: Synchronizing with TNC
[ 1302.595272][  T786] usb 3-1: USB disconnect, device number 6
[ 1302.838568][  T786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1303.531516][T19957] siw: device registration error -23
[ 1304.506607][T19984] sp0: Synchronizing with TNC
[ 1304.509648][T19976] trusted_key: encrypted_key: insufficient parameters specified
[ 1304.548974][T19976] trusted_key: encrypted_key: insufficient parameters specified
[ 1304.617559][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3813'.
[ 1307.264862][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3825'.
[ 1307.369022][ T5942] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1308.722479][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1308.910127][   T23] usb 3-1: Using ep0 maxpacket: 16
[ 1308.917714][   T23] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1308.926226][   T23] usb 3-1: config 0 has no interface number 0
[ 1308.932669][   T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1308.943983][   T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1308.956628][   T23] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1308.965884][   T23] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1308.974456][   T23] usb 3-1: Product: syz
[ 1308.979238][   T23] usb 3-1: SerialNumber: syz
[ 1308.986529][   T23] usb 3-1: config 0 descriptor??
[ 1309.000722][   T23] cm109 3-1:0.8: invalid payload size 0, expected 4
[ 1309.010281][   T23] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input78
[ 1309.280768][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1309.410736][T14564] Bluetooth: hci4: command 0x1003 tx timeout
[ 1309.418479][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1309.482370][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.489551][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.496820][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.504492][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.511998][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.519484][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.526787][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.534016][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.541437][    T8] usb 3-1: USB disconnect, device number 7
[ 1309.547410][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1309.547427][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1309.650002][    T8] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1310.382817][T20098] netlink: 'syz.5.3846': attribute type 1 has an invalid length.
[ 1310.494212][T20100] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3846'.
[ 1310.646299][T20098] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1310.655957][T20102] overlayfs: failed to resolve './file0': -2
[ 1311.017686][T20105] siw: device registration error -23
[ 1311.063862][T20100] bond2 (unregistering): Released all slaves
[ 1311.746050][T20127] 9pnet_virtio: no channels available for device syz
[ 1313.441004][T20169] 9pnet_virtio: no channels available for device syz
[ 1313.832443][T20179] netlink: 'syz.1.3874': attribute type 1 has an invalid length.
[ 1313.911786][T20181] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3874'.
[ 1313.970966][T20179] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1314.019703][T20185] input: syz1 as /devices/virtual/input/input82
[ 1314.929644][T20179] bond3 (unregistering): Released all slaves
[ 1315.249898][T20203] pim6reg: entered allmulticast mode
[ 1315.533091][T20204] pim6reg: left allmulticast mode
[ 1316.157912][T20228] 9pnet_virtio: no channels available for device syz
[ 1316.463392][T20230] input: syz1 as /devices/virtual/input/input83
[ 1317.587944][T20253] overlayfs: failed to resolve './file1': -2
[ 1317.630751][T20252] input: syz1 as /devices/virtual/input/input84
[ 1317.970723][T20265] 9pnet_virtio: no channels available for device syz
[ 1318.073043][T20270] QAT: Device 7 not found
[ 1318.117401][T20270] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1318.484431][T20281] input: syz1 as /devices/virtual/input/input85
[ 1318.796674][T20287] netlink: 'syz.1.3910': attribute type 1 has an invalid length.
[ 1318.879805][T20293] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3910'.
[ 1318.922290][T20287] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1319.075975][T20300] overlayfs: failed to resolve './file1': -2
[ 1319.344379][T20287] bond3 (unregistering): Released all slaves
[ 1319.443259][T20302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3912'.
[ 1319.737946][T20304] QAT: Device 7 not found
[ 1319.905585][T20309] input: syz1 as /devices/virtual/input/input86
[ 1319.927055][T20307] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1320.449239][T20326] overlayfs: failed to resolve './file1': -2
[ 1320.579901][T20333] ptrace attach of "./syz-executor exec"[19091] was attempted by "./syz-executor exec"[20333]
[ 1320.926254][T20336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3926'.
[ 1321.334626][T20344] input: syz1 as /devices/virtual/input/input87
[ 1321.451589][T10115] udevd[10115]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 1321.497820][T20347] QAT: Device 7 not found
[ 1321.593928][T20347] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1322.148064][T20372] input: syz1 as /devices/virtual/input/input88
[ 1322.557786][T20381] QAT: Device 7 not found
[ 1322.850731][T20381] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1323.016397][T20391] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3940'.
[ 1323.406269][T20398] input: syz1 as /devices/virtual/input/input89
[ 1323.771464][ T5948] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1323.788794][   T58] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1325.517139][T20429] input: syz1 as /devices/virtual/input/input90
[ 1325.622099][T20431] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3958'.
[ 1325.810550][T14564] Bluetooth: hci4: command 0x1003 tx timeout
[ 1325.818499][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1326.617387][T20456] input: syz1 as /devices/virtual/input/input91
[ 1327.511387][T20474] ptrace attach of "./syz-executor exec"[15250] was attempted by "./syz-executor exec"[20474]
[ 1327.580854][T20476] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3975'.
[ 1328.091673][T20484] input: syz1 as /devices/virtual/input/input92
[ 1328.647683][T20494] netlink: 'syz.1.3985': attribute type 1 has an invalid length.
[ 1328.696880][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3985'.
[ 1328.713664][T20494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3985'.
[ 1328.754837][T20494] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1329.096823][T20494] bond3 (unregistering): Released all slaves
[ 1329.253517][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1329.260960][T14564] Bluetooth: hci4: command 0x1003 tx timeout
[ 1329.791586][T20514] netlink: 'syz.2.3989': attribute type 4 has an invalid length.
[ 1330.015905][T20517] netlink: 'syz.2.3989': attribute type 4 has an invalid length.
[ 1330.062185][T20519] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1330.874048][T20523] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3990'.
[ 1331.787767][   T58] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1331.800643][T20532] netlink: 'syz.1.3998': attribute type 1 has an invalid length.
[ 1331.954940][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3998'.
[ 1332.006294][T20540] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1332.413489][T20532] bond3 (unregistering): Released all slaves
[ 1332.524640][T20552] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4005'.
[ 1333.310980][T20558] trusted_key: encrypted_key: insufficient parameters specified
[ 1333.391037][T20565] trusted_key: encrypted_key: insufficient parameters specified
[ 1333.811072][T14564] Bluetooth: hci4: command 0x1003 tx timeout
[ 1333.820423][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1333.952070][T20573] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1334.368923][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4012'.
[ 1334.747918][T20589] netlink: 'syz.1.4014': attribute type 1 has an invalid length.
[ 1334.828044][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'.
[ 1334.897623][T20589] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1335.268586][ T2924] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1335.295327][T20589] bond3 (unregistering): Released all slaves
[ 1335.313621][ T2924] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1335.334900][T20595] trusted_key: encrypted_key: insufficient parameters specified
[ 1335.355093][T20595] trusted_key: encrypted_key: insufficient parameters specified
[ 1335.376638][T20602] pim6reg: entered allmulticast mode
[ 1335.679741][T20610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4023'.
[ 1336.047092][T20621] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1337.276604][T20637] netlink: 'syz.2.4029': attribute type 1 has an invalid length.
[ 1337.326590][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4029'.
[ 1337.335792][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1337.342781][T14564] Bluetooth: hci4: command 0x1003 tx timeout
[ 1337.402426][T20637] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1337.523836][T15415] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1337.732103][T15415] usb 6-1: Using ep0 maxpacket: 8
[ 1337.746753][T20640] trusted_key: encrypted_key: insufficient parameters specified
[ 1337.757303][T15415] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1337.773065][T15415] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1337.784075][T15415] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1337.784752][T20640] trusted_key: encrypted_key: insufficient parameters specified
[ 1337.802488][T15415] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1337.817405][T15415] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1337.827526][T15415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1337.857494][T15415] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1337.894617][T15415] hub: probe of 6-1:1.0 failed with error -5
[ 1337.922239][T15415] cdc_wdm 6-1:1.0: skipping garbage
[ 1337.930163][T20637] bond4 (unregistering): Released all slaves
[ 1337.940613][T15415] cdc_wdm 6-1:1.0: skipping garbage
[ 1337.966058][T15415] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1337.972425][T15415] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1338.116402][T20635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1338.127382][T20635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1338.712027][T20650] syz.5.4028: attempt to access beyond end of device
[ 1338.712027][T20650] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1338.772096][T20650] XFS (nbd5): SB validate failed with error -5.
[ 1340.565922][ T5954] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1340.912531][  T786] usb 6-1: USB disconnect, device number 14
[ 1341.478809][T20694] pim6reg: entered allmulticast mode
[ 1341.510562][T20689] trusted_key: encrypted_key: insufficient parameters specified
[ 1341.527767][T20689] trusted_key: encrypted_key: insufficient parameters specified
[ 1341.823548][T20700] overlayfs: workdir and upperdir must reside under the same mount
[ 1341.894347][   T28] audit: type=1326 audit(1750854580.443:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1341.934587][   T28] audit: type=1326 audit(1750854580.443:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1341.957757][   T28] audit: type=1326 audit(1750854580.463:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1341.982330][   T28] audit: type=1326 audit(1750854580.463:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1342.018021][   T28] audit: type=1326 audit(1750854580.463:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1342.041724][   T28] audit: type=1326 audit(1750854580.463:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1342.064462][   T28] audit: type=1326 audit(1750854580.463:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1342.109258][   T28] audit: type=1326 audit(1750854580.463:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1342.153853][   T28] audit: type=1326 audit(1750854580.463:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1342.205867][   T28] audit: type=1326 audit(1750854580.463:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.2.4047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1342.610299][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1342.616918][T14564] Bluetooth: hci4: command 0x1003 tx timeout
[ 1343.487841][ T3504] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 1343.504303][T20736] overlayfs: workdir and upperdir must reside under the same mount
[ 1344.818570][T20747] siw: device registration error -23
[ 1345.114175][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'.
[ 1345.202718][T20759] overlayfs: workdir and upperdir must reside under the same mount
[ 1345.490675][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1345.497570][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1346.097133][T20771] siw: device registration error -23
[ 1346.177198][T20772] netlink: 'syz.1.4069': attribute type 4 has an invalid length.
[ 1346.569997][ T5954] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1346.698509][   T27] lo speed is unknown, defaulting to 1000
[ 1347.248065][T20789] netlink: 'syz.1.4069': attribute type 4 has an invalid length.
[ 1347.276787][   T27] lo speed is unknown, defaulting to 1000
[ 1348.392709][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4082'.
[ 1348.402105][T20799] netlink: 'syz.5.4082': attribute type 5 has an invalid length.
[ 1348.409962][T20799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4082'.
[ 1348.549184][T20799] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0
[ 1348.568182][T20799] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0
[ 1348.576938][T20799] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0
[ 1348.585476][T20799] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0
[ 1348.594427][T20799] geneve2: entered promiscuous mode
[ 1348.600162][T20799] geneve2: entered allmulticast mode
[ 1348.610364][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1348.615348][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1348.890727][T20803] siw: device registration error -23
[ 1349.407105][T20816] input: syz1 as /devices/virtual/input/input93
[ 1349.502717][ T5954] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1349.569762][T20822] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4092'.
[ 1349.650459][T20826] siw: device registration error -23
[ 1349.720755][T20829] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1350.812457][T20852] netlink: 'syz.6.4101': attribute type 4 has an invalid length.
[ 1351.249072][T20854] siw: device registration error -23
[ 1351.505797][T20856] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1351.570735][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1351.699399][T20858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4104'.
[ 1352.935764][ T2924] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1352.952059][ T2924] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1352.989157][ T2924] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1353.333173][T20889] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[ 1353.980135][   T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[ 1354.123677][T20901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4120'.
[ 1354.389074][   T23] usb 2-1: not running at top speed; connect to a high speed hub
[ 1354.449243][   T23] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1354.462881][   T23] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1354.553849][T20908] netlink: 'syz.5.4122': attribute type 4 has an invalid length.
[ 1354.714268][   T28] kauditd_printk_skb: 60 callbacks suppressed
[ 1354.714283][   T28] audit: type=1326 audit(1750854593.173:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1354.746286][   T28] audit: type=1326 audit(1750854593.183:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1354.777800][   T28] audit: type=1326 audit(1750854593.183:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1354.809648][   T28] audit: type=1326 audit(1750854593.183:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1354.841234][   T28] audit: type=1326 audit(1750854593.183:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1354.868830][   T28] audit: type=1326 audit(1750854593.183:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1354.895569][   T28] audit: type=1326 audit(1750854593.183:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1354.930197][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1355.273630][   T28] audit: type=1326 audit(1750854593.183:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1355.297217][   T28] audit: type=1326 audit(1750854593.183:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1355.423513][   T28] audit: type=1326 audit(1750854593.183:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20909 comm="syz.2.4123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d92f8e929 code=0x7ffc0000
[ 1355.561408][   T23] usb 2-1: string descriptor 0 read error: -22
[ 1355.588231][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1355.637014][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1355.680685][T20892] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1356.624129][T20926] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4126'.
[ 1356.713283][T20929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4127'.
[ 1356.835320][T20931] netlink: 'syz.6.4129': attribute type 1 has an invalid length.
[ 1356.898502][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4129'.
[ 1356.938984][T20931] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1357.142056][T20931] bond1 (unregistering): Released all slaves
[ 1357.485900][T15415] usb 2-1: USB disconnect, device number 8
[ 1357.595318][T20940] netlink: 'syz.2.4131': attribute type 4 has an invalid length.
[ 1357.664972][T20940] netlink: 'syz.2.4131': attribute type 4 has an invalid length.
[ 1357.736362][ T3504] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1357.940309][T15267] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1358.120200][T15267] usb 7-1: Using ep0 maxpacket: 8
[ 1358.168721][T15267] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1358.198895][T15267] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1358.232054][T15267] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1358.266879][T15267] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1358.290309][T15267] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1358.299411][T15267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1358.326288][T15267] hub 7-1:1.0: bad descriptor, ignoring hub
[ 1358.332332][T15267] hub: probe of 7-1:1.0 failed with error -5
[ 1358.338959][T15267] cdc_wdm 7-1:1.0: skipping garbage
[ 1358.344705][T15267] cdc_wdm 7-1:1.0: skipping garbage
[ 1358.353715][T15267] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1358.359802][T15267] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1358.543697][T20943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1358.559336][T20943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.055002][T20958] syz.6.4132: attempt to access beyond end of device
[ 1359.055002][T20958] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1359.069838][T20958] XFS (nbd6): SB validate failed with error -5.
[ 1359.811159][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1359.819487][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1360.395719][T20975] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1360.416319][T20975] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1360.522411][T20975] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1360.650939][T20975] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1360.714897][T20975] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1360.734918][T20975] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1361.007499][T20975] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1361.017654][T20975] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1361.191930][T10837] usb 7-1: USB disconnect, device number 5
[ 1361.247233][T20975] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[ 1361.296706][T20975] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1361.335825][T20975] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[ 1361.491244][T20975] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1361.557474][T20975] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[ 1361.580434][T20975] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1361.625465][T20975] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[ 1361.633689][T20975] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1361.899576][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.906020][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.771622][ T3504] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1362.869072][T21009] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4150'.
[ 1363.505711][T21016] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1363.543730][T21018] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1363.584814][T21018] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1363.674849][T21018] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1363.694391][T21018] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1363.728647][T21022] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1363.765729][T21018] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1363.791273][T21018] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1363.867180][T21018] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1363.881724][T21018] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1363.974691][T20711] Bluetooth: hci1: command 0x0406 tx timeout
[ 1364.053726][T21031] netlink: 'syz.1.4158': attribute type 4 has an invalid length.
[ 1364.074089][T15415] lo speed is unknown, defaulting to 1000
[ 1364.082228][T21031] netlink: 'syz.1.4158': attribute type 4 has an invalid length.
[ 1364.097988][  T786] lo speed is unknown, defaulting to 1000
[ 1364.770883][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1364.777655][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1365.148080][T21053] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1365.310162][T15415] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1365.394833][T21060] netlink: 'syz.1.4167': attribute type 4 has an invalid length.
[ 1365.418525][  T786] lo speed is unknown, defaulting to 1000
[ 1365.424743][T21060] netlink: 'syz.1.4167': attribute type 4 has an invalid length.
[ 1365.435749][   T23] lo speed is unknown, defaulting to 1000
[ 1365.500150][T15415] usb 6-1: Using ep0 maxpacket: 16
[ 1365.515161][T15415] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1365.530800][T15415] usb 6-1: config 0 has no interface number 0
[ 1365.537513][T15415] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1365.548952][T15415] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1365.562646][T15415] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1365.571999][T15415] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1365.580243][T15415] usb 6-1: Product: syz
[ 1365.584488][T15415] usb 6-1: SerialNumber: syz
[ 1365.593867][T15415] usb 6-1: config 0 descriptor??
[ 1365.606940][T15415] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1365.616319][T15415] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input94
[ 1365.707570][T21067] QAT: Device 7 not found
[ 1365.794413][ T3504] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1365.822413][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1366.035913][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1366.037975][   T23] usb 6-1: USB disconnect, device number 15
[ 1366.042938][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1366.065129][   T23] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1366.601092][T21018] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[ 1366.668340][T21018] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1366.762658][T21018] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[ 1366.803684][T21018] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1366.889384][T21018] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[ 1366.907667][T21018] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1366.929453][T21079] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1366.975864][T21018] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[ 1366.994024][T21018] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1367.784011][T21094] QAT: Device 7 not found
[ 1367.810954][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1367.819800][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1368.278288][T21108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4182'.
[ 1368.307804][T21105] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1368.480991][T21111] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1368.539656][T21111] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1368.600378][T21111] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1368.667149][T21111] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1368.759004][T21111] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0
[ 1368.789564][T21111] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0
[ 1368.816211][T21111] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0
[ 1368.854105][T21111] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0
[ 1370.832880][T21143] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1371.170300][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1371.170395][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1372.576349][T21179] netlink: 'syz.5.4204': attribute type 1 has an invalid length.
[ 1372.737942][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4204'.
[ 1372.881102][T21179] bond2 (unregistering): Released all slaves
[ 1374.082726][T21210] netlink: 'syz.5.4213': attribute type 2 has an invalid length.
[ 1374.090528][T21210] netlink: 723 bytes leftover after parsing attributes in process `syz.5.4213'.
[ 1377.187405][T21240] netlink: 'syz.1.4219': attribute type 4 has an invalid length.
[ 1377.485036][T21244] netlink: 'syz.1.4219': attribute type 4 has an invalid length.
[ 1377.540632][   T23] lo speed is unknown, defaulting to 1000
[ 1377.547277][   T27] lo speed is unknown, defaulting to 1000
[ 1378.318749][T21249] 9pnet_virtio: no channels available for device syz
[ 1379.241296][T21267] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4226'.
[ 1379.543068][T21269] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1380.366997][T21285] bond1: left promiscuous mode
[ 1380.426207][T21285] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[ 1380.436706][T21285] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[ 1380.446410][T21285] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[ 1380.477606][T21285] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[ 1380.546900][T21285] geneve2: left promiscuous mode
[ 1381.482653][T21296] netlink: 'syz.1.4236': attribute type 4 has an invalid length.
[ 1381.522643][   T27] lo speed is unknown, defaulting to 1000
[ 1381.541485][T21296] netlink: 'syz.1.4236': attribute type 4 has an invalid length.
[ 1381.572212][T10837] lo speed is unknown, defaulting to 1000
[ 1383.536971][T21301] netlink: 'syz.6.4238': attribute type 4 has an invalid length.
[ 1383.547097][T21301] netlink: 'syz.6.4238': attribute type 4 has an invalid length.
[ 1383.773381][T21310] sp0: Synchronizing with TNC
[ 1383.864078][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4240'.
[ 1384.514771][T21318] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4242'.
[ 1384.818262][T21322] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4244'.
[ 1385.751913][T21340] QAT: Device 7 not found
[ 1385.859610][T21339] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1386.084305][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 1386.084524][   T28] audit: type=1400 audit(1750854624.633:267): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[ 1386.350466][T21350] sp0: Synchronizing with TNC
[ 1386.699729][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4252'.
[ 1387.265397][T21359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4254'.
[ 1387.725444][T21373] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4256'.
[ 1389.007766][T15267] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[ 1389.092222][T15267] page_pool_release_retry() stalled pool shutdown 2 inflight 60 sec
[ 1389.136875][T15267] page_pool_release_retry() stalled pool shutdown 2 inflight 60 sec
[ 1389.158133][T21377] trusted_key: encrypted_key: insufficient parameters specified
[ 1389.174843][T21377] trusted_key: encrypted_key: insufficient parameters specified
[ 1389.225559][T15267] page_pool_release_retry() stalled pool shutdown 2 inflight 60 sec
[ 1389.260245][T15267] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[ 1389.285546][T15267] page_pool_release_retry() stalled pool shutdown 2 inflight 60 sec
[ 1389.334329][T15267] page_pool_release_retry() stalled pool shutdown 2 inflight 61 sec
[ 1389.406708][T15267] page_pool_release_retry() stalled pool shutdown 2 inflight 61 sec
[ 1389.814658][T21405] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4266'.
[ 1389.842042][T21404] sp0: Synchronizing with TNC
[ 1390.107713][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'.
[ 1390.870274][   T23] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1390.930682][T10837] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1391.239852][T21429] netlink: 'syz.1.4276': attribute type 1 has an invalid length.
[ 1391.250834][T10837] usb 3-1: Using ep0 maxpacket: 8
[ 1391.258146][T10837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1391.281122][T10837] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1391.311936][T21429] bond3: entered promiscuous mode
[ 1391.317267][T10837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1391.338996][T21429] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1391.355844][T10837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1391.379204][T10837] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1391.394268][T10837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.433997][T10837] hub 3-1:1.0: bad descriptor, ignoring hub
[ 1391.467078][T10837] hub: probe of 3-1:1.0 failed with error -5
[ 1391.492909][T10837] cdc_wdm 3-1:1.0: skipping garbage
[ 1391.498398][T10837] cdc_wdm 3-1:1.0: skipping garbage
[ 1391.516258][   T23] usb 6-1: not running at top speed; connect to a high speed hub
[ 1391.538603][   T23] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1391.565836][T10837] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1391.588431][T10837] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1391.610522][   T23] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1391.632621][T21417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1391.656636][T21431] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1391.677899][T21417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1391.739659][T21431] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[ 1391.786657][T21431] bond3: (slave wireguard1): Error -95 calling set_mac_address
[ 1392.175392][   T23] usb 6-1: string descriptor 0 read error: -22
[ 1392.182242][   T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1392.192086][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.396836][T21442] syz.2.4271: attempt to access beyond end of device
[ 1392.396836][T21442] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1392.411149][T21442] XFS (nbd2): SB validate failed with error -5.
[ 1392.599312][T21414] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1393.044764][T21454] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4278'.
[ 1393.354974][   T27] usb 6-1: USB disconnect, device number 16
[ 1393.418000][T21458] sp0: Synchronizing with TNC
[ 1393.768678][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'.
[ 1394.640866][   T23] usb 3-1: USB disconnect, device number 8
[ 1394.806353][T21476] netlink: 'syz.1.4287': attribute type 1 has an invalid length.
[ 1394.866460][T21476] bond4: entered promiscuous mode
[ 1394.920381][T21476] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1395.001434][T21481] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1395.114198][T21481] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[ 1395.191487][T21481] bond4: (slave wireguard1): Error -95 calling set_mac_address
[ 1395.207983][T21488] netlink: 'syz.5.4286': attribute type 4 has an invalid length.
[ 1395.222949][T21483] netlink: 'syz.5.4286': attribute type 4 has an invalid length.
[ 1395.280702][   T27] lo speed is unknown, defaulting to 1000
[ 1395.299665][T21489] netlink: 'syz.2.4288': attribute type 4 has an invalid length.
[ 1396.480507][  T786] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[ 1396.717843][  T786] usb 2-1: not running at top speed; connect to a high speed hub
[ 1396.777381][  T786] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1396.789258][  T786] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1396.858623][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'.
[ 1396.954592][  T786] usb 2-1: string descriptor 0 read error: -22
[ 1396.969641][  T786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1397.010877][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.029417][T21499] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1397.523672][T21518] netlink: 'syz.6.4298': attribute type 1 has an invalid length.
[ 1397.647091][T21518] bond1: entered promiscuous mode
[ 1397.672694][T21518] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1397.803739][T21519] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1397.820784][T21519] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[ 1397.835089][T21519] bond1: (slave wireguard0): Error -95 calling set_mac_address
[ 1398.168977][T21532] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1398.599304][T21542] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4305'.
[ 1398.801122][T21548] sp0: Synchronizing with TNC
[ 1398.938773][T21549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4308'.
[ 1399.402849][  T786] usb 2-1: USB disconnect, device number 9
[ 1399.909833][T21566] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1399.976308][T21569] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4316'.
[ 1400.604841][T21579] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4317'.
[ 1400.827144][T21585] sp0: Synchronizing with TNC
[ 1400.962253][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4321'.
[ 1401.783645][T21599] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1402.615048][T21619] netlink: 'syz.1.4333': attribute type 1 has an invalid length.
[ 1402.715243][T21621] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4333'.
[ 1402.730801][T15415] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1402.783679][T21619] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1402.940204][T15415] usb 7-1: Using ep0 maxpacket: 16
[ 1402.991454][T15415] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[ 1403.017462][T15415] usb 7-1: config 0 has no interface number 0
[ 1403.056912][T15415] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1403.093903][T15415] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1403.138628][T15415] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1403.166300][T15415] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1403.198747][T15415] usb 7-1: Product: syz
[ 1403.203176][T15415] usb 7-1: SerialNumber: syz
[ 1403.246540][T15415] usb 7-1: config 0 descriptor??
[ 1403.271222][T15415] cm109 7-1:0.8: invalid payload size 0, expected 4
[ 1403.307848][T21621] bond5 (unregistering): Released all slaves
[ 1403.310951][T15415] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input96
[ 1403.478288][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1403.680342][T21630] sp0: Synchronizing with TNC
[ 1403.696343][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1403.696754][   T27] usb 7-1: USB disconnect, device number 6
[ 1403.703341][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1403.728693][   T27] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1403.869184][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4337'.
[ 1404.433959][T21636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1406.140262][   T27] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1406.350187][   T27] usb 6-1: Using ep0 maxpacket: 16
[ 1406.386242][   T27] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1406.405735][   T27] usb 6-1: config 0 has no interface number 0
[ 1406.429249][   T27] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1406.474089][   T27] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1406.506156][T21673] sp0: Synchronizing with TNC
[ 1406.516400][   T27] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1406.527093][   T27] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1406.535585][   T27] usb 6-1: Product: syz
[ 1406.540379][   T27] usb 6-1: SerialNumber: syz
[ 1406.559634][   T27] usb 6-1: config 0 descriptor??
[ 1406.582579][   T27] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1406.597261][   T27] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input97
[ 1406.742400][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4352'.
[ 1406.784710][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1406.928264][T21678] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1406.996085][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.003483][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.010712][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.017884][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.025339][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.033978][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.041231][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.048399][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.055849][   T27] usb 6-1: USB disconnect, device number 17
[ 1407.061870][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1407.061898][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1407.171382][   T27] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1408.024211][ T5954] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1408.961401][T21711] netlink: 'syz.6.4364': attribute type 1 has an invalid length.
[ 1409.033332][T21711] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4364'.
[ 1409.054374][T21711] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1409.625420][T21711] bond2 (unregistering): Released all slaves
[ 1409.765761][T21715] sp0: Synchronizing with TNC
[ 1409.811610][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'.
[ 1409.851776][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4365'.
[ 1410.050564][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1410.050603][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1410.376123][T21735] ksmbd: Unknown IPC event: 6, ignore.
[ 1411.633606][T21752] netlink: 'syz.2.4374': attribute type 4 has an invalid length.
[ 1411.798260][T21749] trusted_key: encrypted_key: insufficient parameters specified
[ 1411.840537][T21749] trusted_key: encrypted_key: insufficient parameters specified
[ 1412.251627][ T5954] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1412.275524][ T5954] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1412.378144][T21765] sp0: Synchronizing with TNC
[ 1412.466292][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4383'.
[ 1413.314858][T21775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4386'.
[ 1413.385518][T21780] netlink: 'syz.6.4388': attribute type 1 has an invalid length.
[ 1413.438520][T21780] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4388'.
[ 1413.463198][T21780] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1413.666793][T21784] trusted_key: encrypted_key: insufficient parameters specified
[ 1413.679741][T21784] trusted_key: encrypted_key: insufficient parameters specified
[ 1413.809373][T21780] bond2 (unregistering): Released all slaves
[ 1414.290318][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1414.290396][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1414.839905][T21807] netlink: 'syz.5.4395': attribute type 4 has an invalid length.
[ 1414.879786][   T23] lo speed is unknown, defaulting to 1000
[ 1415.002743][T21809] sp0: Synchronizing with TNC
[ 1415.231409][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4396'.
[ 1415.720404][T15267] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1415.905211][T15267] usb 7-1: Using ep0 maxpacket: 8
[ 1415.962697][T15267] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1416.007364][T15267] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1416.055715][T21824] netlink: 'syz.1.4400': attribute type 1 has an invalid length.
[ 1416.123392][T15267] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1416.180118][T15267] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1416.200000][T15267] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1416.228345][T15267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.425647][T15267] hub 7-1:1.0: bad descriptor, ignoring hub
[ 1416.427852][T21829] bond5 (unregistering): Released all slaves
[ 1416.469119][T15267] hub: probe of 7-1:1.0 failed with error -5
[ 1416.504806][T15267] cdc_wdm 7-1:1.0: skipping garbage
[ 1416.540347][T15267] cdc_wdm 7-1:1.0: skipping garbage
[ 1416.575662][T15267] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1416.587295][T15267] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1416.602245][T21826] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4400'.
[ 1416.615320][T21815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1416.676225][T21815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1417.219266][T21841] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.231235][T21834] syz.6.4398: attempt to access beyond end of device
[ 1417.231235][T21834] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1417.286531][T21834] XFS (nbd6): SB validate failed with error -5.
[ 1417.416848][T21841] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.537123][ T5948] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 1417.595693][T21841] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.768501][T21841] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.932490][T21841] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.047608][T21841] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.105197][T21841] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.162164][T21841] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.794154][T21862] sp0: Synchronizing with TNC
[ 1418.807906][T21861] netlink: 'syz.1.4409': attribute type 1 has an invalid length.
[ 1418.878746][T21864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4409'.
[ 1418.917796][T21861] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1418.927438][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4408'.
[ 1419.021611][  T786] usb 7-1: USB disconnect, device number 7
[ 1419.580395][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[ 1419.587930][T14564] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1419.868278][T21861] bond5 (unregistering): Released all slaves
[ 1420.039305][T21877] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1420.226970][T21877] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1420.532991][T21877] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1420.621224][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1420.634092][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1420.643309][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1420.689406][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1420.710160][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1420.718465][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1420.732715][T21877] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1420.851353][T21882] lo speed is unknown, defaulting to 1000
[ 1420.865786][T21882] lo speed is unknown, defaulting to 1000
[ 1421.173510][T21877] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.245993][T21877] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.273129][T21882] chnl_net:caif_netlink_parms(): no params data found
[ 1421.310992][T21877] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.345894][T21877] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.510612][   T27] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1421.588141][T21882] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1421.601709][T21882] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1421.611480][T21882] bridge_slave_0: entered allmulticast mode
[ 1421.624669][T21882] bridge_slave_0: entered promiscuous mode
[ 1421.645475][T21882] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1421.663432][T21882] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.677023][T21882] bridge_slave_1: entered allmulticast mode
[ 1421.688994][T21882] bridge_slave_1: entered promiscuous mode
[ 1421.700149][   T27] usb 6-1: Using ep0 maxpacket: 8
[ 1421.707376][T15931] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1421.719840][   T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1421.723790][T15931] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1421.747877][   T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1421.757293][   T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1421.768697][   T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1421.780396][   T27] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1421.789490][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1421.806360][   T27] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1421.814975][   T27] hub: probe of 6-1:1.0 failed with error -5
[ 1421.822934][   T27] cdc_wdm 6-1:1.0: skipping garbage
[ 1421.828333][   T27] cdc_wdm 6-1:1.0: skipping garbage
[ 1421.836489][   T27] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1421.843052][   T27] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1421.882405][T21882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1421.927441][ T2924] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1421.955496][ T2924] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1422.014947][T21891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1422.029123][T21882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1422.047400][T21891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1422.248950][ T2924] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1422.259743][ T2924] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1422.385128][T21882] team0: Port device team_slave_0 added
[ 1422.397734][ T2924] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1422.415539][T21910] syz.5.4418: attempt to access beyond end of device
[ 1422.415539][T21910] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1422.428830][ T2924] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1422.470903][T21910] XFS (nbd5): SB validate failed with error -5.
[ 1422.577897][T21882] team0: Port device team_slave_1 added
[ 1422.702311][ T2924] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[ 1422.762229][ T2924] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[ 1422.782766][T14564] Bluetooth: hci4: command tx timeout
[ 1423.011614][T21882] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1423.035028][T21882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1423.063238][T21882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1423.096194][T21882] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1423.127174][T21882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1423.337192][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.345676][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.405521][T21882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1423.740383][ T5777] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1423.747152][T14564] Bluetooth: hci0: command 0x1003 tx timeout
[ 1424.090574][T21882] hsr_slave_0: entered promiscuous mode
[ 1424.097706][T21882] hsr_slave_1: entered promiscuous mode
[ 1424.107905][T21882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1424.116222][T21882] Cannot create hsr debugfs directory
[ 1424.765106][T15267] usb 6-1: USB disconnect, device number 18
[ 1424.860253][T14564] Bluetooth: hci4: command tx timeout
[ 1425.409343][T21937] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1425.776351][T21937] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1425.970465][T21937] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1426.053313][T21937] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1426.079363][ T2924] hsr_slave_0: left promiscuous mode
[ 1426.086990][ T2924] hsr_slave_1: left promiscuous mode
[ 1426.087492][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1426.087527][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1426.115332][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1426.115357][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1426.134568][ T2924] team0: left allmulticast mode
[ 1426.134584][ T2924] team_slave_0: left allmulticast mode
[ 1426.134715][ T2924] team_slave_1: left allmulticast mode
[ 1426.134725][ T2924] geneve0: left allmulticast mode
[ 1426.134960][ T2924] bridge0: port 3(team0) entered disabled state
[ 1426.391316][ T2924] bridge_slave_1: left allmulticast mode
[ 1426.402155][ T2924] bridge_slave_1: left promiscuous mode
[ 1426.430736][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.461470][ T2924] bridge_slave_0: left allmulticast mode
[ 1426.480584][ T2924] bridge_slave_0: left promiscuous mode
[ 1426.493252][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.617698][ T2924] veth1_macvtap: left promiscuous mode
[ 1426.626972][ T2924] veth0_macvtap: left promiscuous mode
[ 1426.634916][ T2924] veth1_vlan: left promiscuous mode
[ 1426.645065][ T2924] veth0_vlan: left promiscuous mode
[ 1426.934928][ T2924] pim6reg (unregistering): left allmulticast mode
[ 1426.943122][T14564] Bluetooth: hci4: command tx timeout
[ 1426.963720][ T2924] bond3 (unregistering): (slave wireguard1): Releasing backup interface
[ 1426.979274][ T2924] wireguard1 (unregistering): left promiscuous mode
[ 1427.394137][ T2924] bond3 (unregistering): Released all slaves
[ 1427.456453][ T2924] bond2 (unregistering): (slave wireguard0): Releasing backup interface
[ 1427.470250][ T2924] wireguard0 (unregistering): left promiscuous mode
[ 1427.926492][ T2924] bond2 (unregistering): Released all slaves
[ 1427.953450][ T2924] bond1 (unregistering): Released all slaves
[ 1428.081931][ T2924] geneve0 (unregistering): left promiscuous mode
[ 1428.108937][ T2924] team0 (unregistering): Port device geneve0 removed
[ 1429.034962][T14564] Bluetooth: hci4: command tx timeout
[ 1429.290980][ T2924] team_slave_1 (unregistering): left promiscuous mode
[ 1429.299451][ T2924] team0 (unregistering): Port device team_slave_1 removed
[ 1429.398684][ T2924] team_slave_0 (unregistering): left promiscuous mode
[ 1429.425873][ T2924] team0 (unregistering): Port device team_slave_0 removed
[ 1429.505580][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1429.597747][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1431.222849][ T2924] bond0 (unregistering): Released all slaves
[ 1431.307223][T21941] netlink: 'syz.6.4426': attribute type 9 has an invalid length.
[ 1431.577540][T21937] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1431.593127][T21882] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1431.636298][T21882] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1431.713410][T21937] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1431.723758][T21882] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1431.742054][T21882] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1431.882541][T21937] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1431.952221][T21937] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.192008][T21882] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1432.254852][T21882] 8021q: adding VLAN 0 to HW filter on device team0
[ 1432.575430][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1432.582636][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1432.991597][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1432.998724][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1434.260685][T21882] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1434.477475][T21882] veth0_vlan: entered promiscuous mode
[ 1434.522620][T21882] veth1_vlan: entered promiscuous mode
[ 1434.652864][T22030] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1434.682832][T21882] veth0_macvtap: entered promiscuous mode
[ 1434.708341][T21882] veth1_macvtap: entered promiscuous mode
[ 1434.737234][T22030] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1434.785567][T21882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1434.801503][T21882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1434.817701][T21882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1434.833388][T21882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1434.848899][T21882] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1434.860831][T21882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1434.874198][T21882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1434.884217][T21882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1434.895272][T21882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1434.900310][   T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1434.914336][T21882] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1434.925687][T22030] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1434.959051][T21882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1434.967951][T21882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1434.978846][T21882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1434.989335][T21882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.006679][T22030] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1435.098036][   T27] usb 2-1: Using ep0 maxpacket: 16
[ 1435.131415][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1435.144162][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1435.157515][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1435.169815][   T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1435.176142][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1435.197663][T22030] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.210398][   T27] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1435.216698][T22030] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.219570][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1435.246147][   T27] usb 2-1: config 0 descriptor??
[ 1435.264021][T22030] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.293317][T22030] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.312966][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1435.326067][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1435.801111][   T27] HID 045e:07da: Invalid code 65791 type 1
[ 1435.826480][   T27] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input99
[ 1435.861024][T22037] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1435.901979][   T27] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1436.060381][T22037] usb 7-1: Using ep0 maxpacket: 16
[ 1436.079159][T22037] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[ 1436.098967][ T5812] usb 2-1: USB disconnect, device number 10
[ 1436.136697][T22037] usb 7-1: config 0 has no interface number 0
[ 1436.223765][T22037] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1436.345107][T22037] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1436.441247][T22037] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1436.449807][T22051] fido_id[22051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1436.488666][T22037] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1436.952767][T22037] usb 7-1: Product: syz
[ 1437.061950][T22037] usb 7-1: SerialNumber: syz
[ 1437.152064][T22037] usb 7-1: config 0 descriptor??
[ 1437.209339][T22037] cm109 7-1:0.8: invalid payload size 0, expected 4
[ 1437.275627][T22037] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input101
[ 1437.327699][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'.
[ 1437.340123][T22069] netlink: set zone limit has 8 unknown bytes
[ 1437.539350][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1437.816722][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.823914][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.831089][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.838253][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.845396][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.852562][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.859677][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.866826][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.874035][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.881251][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1437.900391][T22037] usb 7-1: USB disconnect, device number 8
[ 1437.906256][    C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1438.067378][T22037] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1439.339603][T22092] lo speed is unknown, defaulting to 1000
[ 1439.350355][T22092] lo speed is unknown, defaulting to 1000
[ 1440.386230][T22098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4466'.
[ 1440.876298][T22113] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1440.990346][T15267] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1441.073790][T22113] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.220158][T15267] usb 7-1: Using ep0 maxpacket: 16
[ 1441.228116][T22113] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.265224][T15267] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[ 1441.282636][T15267] usb 7-1: config 0 has no interface number 0
[ 1441.312184][T15267] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1441.336343][T15267] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1441.366838][T15267] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1441.401371][T22113] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.422969][T15267] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1441.446715][T15267] usb 7-1: Product: syz
[ 1441.460171][T15267] usb 7-1: SerialNumber: syz
[ 1441.469267][   T28] audit: type=1400 audit(1750854680.013:268): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=22115 comm="syz.5.4474"
[ 1441.499269][T15267] usb 7-1: config 0 descriptor??
[ 1441.528445][T15267] cm109 7-1:0.8: invalid payload size 0, expected 4
[ 1441.561354][T15267] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input104
[ 1441.676079][T22113] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.712701][T22113] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.735337][T22113] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.778116][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1441.778518][T22113] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.795565][   T27] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 1441.960305][   T27] usb 3-1: device descriptor read/64, error -71
[ 1442.012139][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1442.049515][T15415] usb 7-1: USB disconnect, device number 9
[ 1442.089766][T15415] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1442.250174][   T27] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[ 1442.430194][   T27] usb 3-1: device descriptor read/64, error -71
[ 1442.550353][   T27] usb usb3-port1: attempt power cycle
[ 1442.971049][   T27] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[ 1443.013367][   T27] usb 3-1: device descriptor read/8, error -71
[ 1443.015810][T22153] 9pnet_virtio: no channels available for device syz
[ 1443.320325][   T27] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1443.353916][   T27] usb 3-1: device descriptor read/8, error -71
[ 1443.410552][T22141] trusted_key: encrypted_key: insufficient parameters specified
[ 1443.434693][T22141] trusted_key: encrypted_key: insufficient parameters specified
[ 1443.481593][   T27] usb usb3-port1: unable to enumerate USB device
[ 1444.033276][T22167] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.133600][T22167] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.215923][T22167] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.377441][T22167] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.734709][T22167] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.807282][T22167] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.965742][T22167] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.016717][T22167] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.124157][T22181] IPVS: persistence engine module ip_vs_pe_
 not found
[ 1445.194222][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4492'.
[ 1445.203816][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4492'.
[ 1445.269529][T22187] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1445.279179][T22187] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1445.287974][T22187] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1445.296887][T22187] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1445.618974][T22189] trusted_key: encrypted_key: insufficient parameters specified
[ 1445.642792][T22189] trusted_key: encrypted_key: insufficient parameters specified
[ 1446.230579][T22198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4495'.
[ 1447.604944][T22221] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 1447.610263][T22220] IPVS: stopping master sync thread 22221 ...
[ 1447.672635][T15267] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 1447.840177][T15267] usb 3-1: device descriptor read/64, error -71
[ 1447.855530][T22223] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1447.919095][T22223] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1447.985444][T22223] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.061672][T22223] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.111382][T15267] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[ 1448.261195][T15267] usb 3-1: device descriptor read/64, error -71
[ 1448.381002][T15267] usb usb3-port1: attempt power cycle
[ 1449.144821][ T5812] page_pool_release_retry() stalled pool shutdown 1 inflight 120 sec
[ 1449.153156][ T5812] page_pool_release_retry() stalled pool shutdown 2 inflight 120 sec
[ 1449.211822][T15267] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[ 1449.291387][T15267] usb 3-1: device descriptor read/8, error -71
[ 1449.590213][T15267] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[ 1450.070258][T15267] usb 3-1: device not accepting address 16, error -71
[ 1450.110437][T15267] usb usb3-port1: unable to enumerate USB device
[ 1450.222765][T15415] page_pool_release_retry() stalled pool shutdown 2 inflight 121 sec
[ 1450.280138][T15415] page_pool_release_retry() stalled pool shutdown 2 inflight 121 sec
[ 1450.288256][T15415] page_pool_release_retry() stalled pool shutdown 1 inflight 121 sec
[ 1450.360150][ T5812] page_pool_release_retry() stalled pool shutdown 2 inflight 122 sec
[ 1450.414827][ T5812] page_pool_release_retry() stalled pool shutdown 2 inflight 122 sec
[ 1450.446229][ T5812] page_pool_release_retry() stalled pool shutdown 2 inflight 122 sec
[ 1451.606525][T22263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4513'.
[ 1452.652306][T22223] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.688420][T22223] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.708658][T22223] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.735510][T22223] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.780794][T15415] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 1453.316494][T15415] usb 6-1: device descriptor read/64, error -71
[ 1453.610151][T15415] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[ 1453.940199][T15415] usb 6-1: device descriptor read/64, error -71
[ 1454.070371][T15415] usb usb6-port1: attempt power cycle
[ 1454.106942][T22293] netlink: 'syz.2.4521': attribute type 1 has an invalid length.
[ 1454.529007][T15415] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[ 1454.537353][ T5812] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[ 1454.654749][T15415] usb 6-1: device descriptor read/8, error -71
[ 1454.965119][T22304] netlink: 'syz.2.4524': attribute type 4 has an invalid length.
[ 1455.028962][T15415] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[ 1455.042039][ T5812] usb 2-1: not running at top speed; connect to a high speed hub
[ 1455.135166][ T5812] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1455.175887][ T5812] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1455.239062][T15415] usb 6-1: device descriptor read/8, error -71
[ 1455.940925][ T5812] usb 2-1: string descriptor 0 read error: -22
[ 1455.970302][T15415] usb usb6-port1: unable to enumerate USB device
[ 1456.025571][ T5812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1456.062175][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1456.283560][T22288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1456.839663][T22319] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.091007][T22319] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.149263][T15415] usb 2-1: USB disconnect, device number 11
[ 1457.202204][T22319] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.299132][T22319] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.284163][T22339] 9pnet_virtio: no channels available for device syz
[ 1458.293374][T22339] overlayfs: failed to resolve './file1': -2
[ 1458.310385][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4535'.
[ 1458.329536][   T23] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[ 1458.543183][T22339] hsr_slave_1 (unregistering): left promiscuous mode
[ 1458.590781][   T23] usb 6-1: device descriptor read/64, error -71
[ 1458.890165][   T23] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[ 1459.080297][   T23] usb 6-1: device descriptor read/64, error -71
[ 1459.220220][   T23] usb usb6-port1: attempt power cycle
[ 1459.305952][T22319] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.352991][T22319] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.383958][T22319] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.405330][T22319] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1460.140186][   T23] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[ 1460.278949][   T27] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 1460.333202][   T23] usb 6-1: device descriptor read/8, error -71
[ 1460.784067][T22369] 9pnet_virtio: no channels available for device syz
[ 1460.856940][   T23] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[ 1460.888090][   T23] usb 6-1: device descriptor read/8, error -71
[ 1461.000318][   T23] usb usb6-port1: unable to enumerate USB device
[ 1461.371529][   T27] usb 3-1: not running at top speed; connect to a high speed hub
[ 1461.430482][   T27] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1461.450107][   T27] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1461.732550][   T27] usb 3-1: string descriptor 0 read error: -22
[ 1461.750416][T22373] netlink: 'syz.5.4543': attribute type 1 has an invalid length.
[ 1461.769131][   T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1461.829396][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.877150][T22373] bond2 (unregistering): Released all slaves
[ 1462.487898][   T27] usb 3-1: can't set config #1, error -71
[ 1462.534344][   T27] usb 3-1: USB disconnect, device number 17
[ 1463.019951][T22383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1463.109462][T22383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1463.461157][T22383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1463.473823][T22383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1463.673808][T22383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1463.686761][T22383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1463.874913][T22383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1463.899452][T22383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1464.285023][T22383] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1464.342797][T22383] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.522627][T22383] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1464.530697][T22383] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.547457][T22383] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1464.547489][T22383] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.574267][T22383] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1464.574299][T22383] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1464.915551][T22398] trusted_key: encrypted_key: insufficient parameters specified
[ 1464.915871][T22398] trusted_key: encrypted_key: insufficient parameters specified
[ 1467.149611][T22416] netlink: 'syz.2.4554': attribute type 10 has an invalid length.
[ 1467.158560][T22416] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1467.166384][T22416] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1467.307676][T22416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1467.314916][T22416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1467.322385][T22416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.329523][T22416] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1467.435199][T22416] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1467.660219][T16502] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[ 1468.038824][T16502] usb 2-1: not running at top speed; connect to a high speed hub
[ 1468.086121][T16502] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1468.369144][T16502] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1468.451391][T16502] usb 2-1: string descriptor 0 read error: -22
[ 1468.461192][T16502] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1468.471368][T16502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1468.489197][T22424] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1468.858742][T22445] sg_write: process 99 (syz.2.4563) changed security contexts after opening file descriptor, this is not allowed.
[ 1471.251640][    T8] usb 2-1: USB disconnect, device number 12
[ 1472.121557][T22490] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1472.160134][T22490] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.251483][T22490] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1472.296070][T22490] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.394457][T22490] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1472.415472][T22490] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.524240][T22490] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1472.548056][T22490] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.704697][T22490] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1472.731711][T22490] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1472.758683][T22490] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1472.769817][T22490] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.106504][T22490] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1473.115395][T22490] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.132289][T22511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4581'.
[ 1473.250962][T22490] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1473.285520][T22490] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.535979][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[ 1473.681762][   T23] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1473.858019][T22515] trusted_key: encrypted_key: insufficient parameters specified
[ 1473.982551][T22524] trusted_key: encrypted_key: insufficient parameters specified
[ 1474.212498][T22525] fido_id[22525]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1476.084491][T22547] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4590'.
[ 1476.554973][T22553] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1476.574848][T22553] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1476.619287][T22555] netlink: 'syz.1.4593': attribute type 1 has an invalid length.
[ 1476.713888][T22553] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1476.774566][T22553] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1476.822100][T22555] bond5 (unregistering): Released all slaves
[ 1476.889526][T22553] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1476.921469][T22553] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1477.166941][T22553] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1477.194090][T22553] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.451181][T22583] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4602'.
[ 1480.926398][T22553] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1481.016615][T22553] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1481.040153][T15267] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[ 1481.064192][T22553] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1481.064222][T22553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1481.088326][T22553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1481.088356][T22553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1481.098394][T22553] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1481.098424][T22553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1481.355985][T15267] usb 6-1: no configurations
[ 1481.356005][T15267] usb 6-1: can't read configurations, error -22
[ 1481.658150][T15267] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[ 1481.860982][T15267] usb 6-1: no configurations
[ 1481.865735][T15267] usb 6-1: can't read configurations, error -22
[ 1481.880235][T15267] usb usb6-port1: attempt power cycle
[ 1482.320275][T15267] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[ 1482.351565][T15267] usb 6-1: no configurations
[ 1482.356398][T15267] usb 6-1: can't read configurations, error -22
[ 1482.520288][T15267] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[ 1482.553054][T15267] usb 6-1: no configurations
[ 1482.557890][T15267] usb 6-1: can't read configurations, error -22
[ 1482.587412][T15267] usb usb6-port1: unable to enumerate USB device
[ 1483.553427][T22622] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4612'.
[ 1484.339464][T22629] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1484.355322][T22629] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1484.523084][T22629] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1484.553973][T22629] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1484.736326][T22629] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1484.736409][T22629] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1484.774170][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.774301][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.136471][T22629] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1485.148351][T22629] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.727434][T22629] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1488.744504][T22671] trusted_key: encrypted_key: insufficient parameters specified
[ 1488.765761][T22629] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1488.794287][T22674] trusted_key: encrypted_key: insufficient parameters specified
[ 1488.839896][T22629] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1488.879454][T22629] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1489.043253][T22629] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1489.120929][T22629] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1489.318980][T22629] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1489.359066][T22629] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1494.168101][T22726] overlayfs: missing 'lowerdir'
[ 1495.890017][T22741] ------------[ cut here ]------------
[ 1495.890232][T22741] WARNING: CPU: 1 PID: 22741 at drivers/gpu/drm/vkms/vkms_crtc.c:103 vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.890283][T22741] Modules linked in:
[ 1495.890320][T22741] CPU: 1 PID: 22741 Comm: syz.2.4642 Not tainted 6.6.94-syzkaller #0
[ 1495.890342][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1495.890360][T22741] RIP: 0010:vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.890386][T22741] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd e8 ac fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 08 41 54 fc <0f> 0b eb ea 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fe ff ff 4c
[ 1495.890407][T22741] RSP: 0018:ffffc9000fa9f2c8 EFLAGS: 00010283
[ 1495.890430][T22741] RAX: ffffffff853154c8 RBX: ffffc9000fa9f440 RCX: 0000000000080000
[ 1495.890448][T22741] RDX: ffffc9001b61e000 RSI: 0000000000006a9d RDI: 0000000000006a9e
[ 1495.890491][T22741] RBP: 1ffff92001f53e88 R08: ffffffff90d85577 R09: 1ffffffff21b0aae
[ 1495.890511][T22741] R10: dffffc0000000000 R11: fffffbfff21b0aaf R12: 0000015c481a4d96
[ 1495.890529][T22741] R13: dffffc0000000000 R14: ffff888021278000 R15: 0000015c481a4d96
[ 1495.890546][T22741] FS:  00007fd32026c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1495.890567][T22741] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1495.890583][T22741] CR2: 00007f02229b5f80 CR3: 0000000073dbe000 CR4: 00000000003506e0
[ 1495.890602][T22741] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1495.890617][T22741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1495.890633][T22741] Call Trace:
[ 1495.890643][T22741]  <TASK>
[ 1495.890658][T22741]  ? vkms_disable_vblank+0x20/0x20
[ 1495.890687][T22741]  drm_crtc_next_vblank_start+0x21f/0x450
[ 1495.890728][T22741]  ? drm_vblank_count_and_time+0x4c0/0x4c0
[ 1495.890753][T22741]  ? seqcount_lockdep_reader_access+0x124/0x1c0
[ 1495.890781][T22741]  ? lockdep_hardirqs_on+0x98/0x150
[ 1495.890813][T22741]  drm_atomic_helper_wait_for_fences+0x263/0x8b0
[ 1495.890846][T22741]  ? drm_atomic_helper_commit_modeset_enables+0xb10/0xb10
[ 1495.890874][T22741]  ? read_tsc+0x9/0x20
[ 1495.890896][T22741]  ? ktime_get+0x24b/0x280
[ 1495.890924][T22741]  commit_tail+0x79/0x390
[ 1495.890957][T22741]  drm_atomic_helper_commit+0xa42/0xae0
[ 1495.890988][T22741]  ? drm_atomic_helper_async_commit+0x5c0/0x5c0
[ 1495.891012][T22741]  drm_atomic_commit+0x24c/0x2a0
[ 1495.891041][T22741]  ? drm_atomic_check_only+0x3030/0x3030
[ 1495.891064][T22741]  ? handle_bad_prq_event+0x290/0x290
[ 1495.891098][T22741]  ? drm_client_rotation+0x446/0x570
[ 1495.891136][T22741]  drm_client_modeset_commit_atomic+0x621/0x760
[ 1495.891183][T22741]  ? drm_client_modeset_check+0x180/0x180
[ 1495.891232][T22741]  ? mutex_unlock+0x10/0x10
[ 1495.891260][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.891292][T22741]  drm_client_modeset_commit_locked+0xcb/0x4c0
[ 1495.891328][T22741]  drm_fb_helper_pan_display+0x3e7/0xbd0
[ 1495.891368][T22741]  ? drm_fb_helper_set_par+0x100/0x100
[ 1495.891392][T22741]  fb_pan_display+0x39f/0x690
[ 1495.891429][T22741]  fb_set_var+0x7fa/0xef0
[ 1495.891466][T22741]  ? fb_pan_display+0x690/0x690
[ 1495.891490][T22741]  ? mark_lock+0x94/0x320
[ 1495.891520][T22741]  ? trace_irq_disable+0x37/0xe0
[ 1495.891551][T22741]  ? lock_chain_count+0x20/0x20
[ 1495.891583][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.891605][T22741]  ? lockdep_hardirqs_on+0x98/0x150
[ 1495.891631][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.891682][T22741]  do_fb_ioctl+0x636/0x740
[ 1495.891726][T22741]  ? fb_release+0x140/0x140
[ 1495.891753][T22741]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1495.891800][T22741]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1495.891839][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.891862][T22741]  ? lockdep_hardirqs_on+0x98/0x150
[ 1495.891887][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.891924][T22741]  ? security_file_ioctl+0x5a/0xa0
[ 1495.891947][T22741]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1495.891971][T22741]  ? security_file_ioctl+0x80/0xa0
[ 1495.891993][T22741]  ? fb_write+0x220/0x220
[ 1495.892021][T22741]  __se_sys_ioctl+0xfd/0x170
[ 1495.892056][T22741]  do_syscall_64+0x55/0xb0
[ 1495.892084][T22741]  ? clear_bhb_loop+0x40/0x90
[ 1495.892104][T22741]  ? clear_bhb_loop+0x40/0x90
[ 1495.892128][T22741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1495.892159][T22741] RIP: 0033:0x7fd31f38e929
[ 1495.892186][T22741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1495.892205][T22741] RSP: 002b:00007fd32026c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1495.892231][T22741] RAX: ffffffffffffffda RBX: 00007fd31f5b6160 RCX: 00007fd31f38e929
[ 1495.892249][T22741] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000007
[ 1495.892264][T22741] RBP: 00007fd31f410b39 R08: 0000000000000000 R09: 0000000000000000
[ 1495.892279][T22741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1495.892294][T22741] R13: 0000000000000000 R14: 00007fd31f5b6160 R15: 00007ffe2ffa2608
[ 1495.892333][T22741]  </TASK>
[ 1495.892345][T22741] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1495.892355][T22741] CPU: 1 PID: 22741 Comm: syz.2.4642 Not tainted 6.6.94-syzkaller #0
[ 1495.892374][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1495.892384][T22741] Call Trace:
[ 1495.892391][T22741]  <TASK>
[ 1495.892399][T22741]  dump_stack_lvl+0x16c/0x230
[ 1495.892431][T22741]  ? show_regs_print_info+0x20/0x20
[ 1495.892460][T22741]  ? load_image+0x3b0/0x3b0
[ 1495.892500][T22741]  panic+0x2c0/0x710
[ 1495.892529][T22741]  ? bpf_jit_dump+0xd0/0xd0
[ 1495.892574][T22741]  __warn+0x2e0/0x470
[ 1495.892592][T22741]  ? vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.892617][T22741]  ? vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.892637][T22741]  report_bug+0x2be/0x4f0
[ 1495.892665][T22741]  ? vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.892686][T22741]  ? vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.892707][T22741]  ? vkms_get_vblank_timestamp+0x18a/0x1d0
[ 1495.892733][T22741]  handle_bug+0xcf/0x120
[ 1495.892761][T22741]  exc_invalid_op+0x1a/0x50
[ 1495.892789][T22741]  asm_exc_invalid_op+0x1a/0x20
[ 1495.892817][T22741] RIP: 0010:vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.892839][T22741] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd e8 ac fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 08 41 54 fc <0f> 0b eb ea 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fe ff ff 4c
[ 1495.892854][T22741] RSP: 0018:ffffc9000fa9f2c8 EFLAGS: 00010283
[ 1495.892871][T22741] RAX: ffffffff853154c8 RBX: ffffc9000fa9f440 RCX: 0000000000080000
[ 1495.892884][T22741] RDX: ffffc9001b61e000 RSI: 0000000000006a9d RDI: 0000000000006a9e
[ 1495.892897][T22741] RBP: 1ffff92001f53e88 R08: ffffffff90d85577 R09: 1ffffffff21b0aae
[ 1495.892911][T22741] R10: dffffc0000000000 R11: fffffbfff21b0aaf R12: 0000015c481a4d96
[ 1495.892925][T22741] R13: dffffc0000000000 R14: ffff888021278000 R15: 0000015c481a4d96
[ 1495.892949][T22741]  ? vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.892978][T22741]  ? vkms_get_vblank_timestamp+0x188/0x1d0
[ 1495.892997][T22741]  ? vkms_disable_vblank+0x20/0x20
[ 1495.893021][T22741]  drm_crtc_next_vblank_start+0x21f/0x450
[ 1495.893051][T22741]  ? drm_vblank_count_and_time+0x4c0/0x4c0
[ 1495.893073][T22741]  ? seqcount_lockdep_reader_access+0x124/0x1c0
[ 1495.893097][T22741]  ? lockdep_hardirqs_on+0x98/0x150
[ 1495.893123][T22741]  drm_atomic_helper_wait_for_fences+0x263/0x8b0
[ 1495.893153][T22741]  ? drm_atomic_helper_commit_modeset_enables+0xb10/0xb10
[ 1495.893179][T22741]  ? read_tsc+0x9/0x20
[ 1495.893198][T22741]  ? ktime_get+0x24b/0x280
[ 1495.893223][T22741]  commit_tail+0x79/0x390
[ 1495.893253][T22741]  drm_atomic_helper_commit+0xa42/0xae0
[ 1495.893280][T22741]  ? drm_atomic_helper_async_commit+0x5c0/0x5c0
[ 1495.893301][T22741]  drm_atomic_commit+0x24c/0x2a0
[ 1495.893326][T22741]  ? drm_atomic_check_only+0x3030/0x3030
[ 1495.893347][T22741]  ? handle_bad_prq_event+0x290/0x290
[ 1495.893378][T22741]  ? drm_client_rotation+0x446/0x570
[ 1495.893411][T22741]  drm_client_modeset_commit_atomic+0x621/0x760
[ 1495.893454][T22741]  ? drm_client_modeset_check+0x180/0x180
[ 1495.893500][T22741]  ? mutex_unlock+0x10/0x10
[ 1495.893526][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.893554][T22741]  drm_client_modeset_commit_locked+0xcb/0x4c0
[ 1495.893587][T22741]  drm_fb_helper_pan_display+0x3e7/0xbd0
[ 1495.893624][T22741]  ? drm_fb_helper_set_par+0x100/0x100
[ 1495.893645][T22741]  fb_pan_display+0x39f/0x690
[ 1495.893679][T22741]  fb_set_var+0x7fa/0xef0
[ 1495.893723][T22741]  ? fb_pan_display+0x690/0x690
[ 1495.893745][T22741]  ? mark_lock+0x94/0x320
[ 1495.893773][T22741]  ? trace_irq_disable+0x37/0xe0
[ 1495.893801][T22741]  ? lock_chain_count+0x20/0x20
[ 1495.893832][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.893851][T22741]  ? lockdep_hardirqs_on+0x98/0x150
[ 1495.893874][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.893928][T22741]  do_fb_ioctl+0x636/0x740
[ 1495.893959][T22741]  ? fb_release+0x140/0x140
[ 1495.893982][T22741]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1495.894024][T22741]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1495.894060][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.894080][T22741]  ? lockdep_hardirqs_on+0x98/0x150
[ 1495.894101][T22741]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1495.894135][T22741]  ? security_file_ioctl+0x5a/0xa0
[ 1495.894153][T22741]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1495.894175][T22741]  ? security_file_ioctl+0x80/0xa0
[ 1495.894194][T22741]  ? fb_write+0x220/0x220
[ 1495.894220][T22741]  __se_sys_ioctl+0xfd/0x170
[ 1495.894250][T22741]  do_syscall_64+0x55/0xb0
[ 1495.894275][T22741]  ? clear_bhb_loop+0x40/0x90
[ 1495.894292][T22741]  ? clear_bhb_loop+0x40/0x90
[ 1495.894312][T22741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1495.894340][T22741] RIP: 0033:0x7fd31f38e929
[ 1495.894355][T22741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1495.894371][T22741] RSP: 002b:00007fd32026c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1495.894390][T22741] RAX: ffffffffffffffda RBX: 00007fd31f5b6160 RCX: 00007fd31f38e929
[ 1495.894403][T22741] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000007
[ 1495.894415][T22741] RBP: 00007fd31f410b39 R08: 0000000000000000 R09: 0000000000000000
[ 1495.894427][T22741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1495.894439][T22741] R13: 0000000000000000 R14: 00007fd31f5b6160 R15: 00007ffe2ffa2608
[ 1495.894472][T22741]  </TASK>
[ 1495.894726][T22741] Kernel Offset: disabled