last executing test programs:

14m57.621098082s ago: executing program 32 (id=54):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

13m24.256427675s ago: executing program 1 (id=287):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0300000014a5b960818818ff654e5836a29c432afd2c56b1350ba174fb1cbe352ae967a7f0cb7532f495d7cc0a90226876548abac42cfe245e42ce8c5bcceda1cc302dbefc175d7154e593853455d3ff43396e0b90e03ab41faf593501ca555643870559fb2fb9b4d2fcac43a40a1e7d80f6cf4021894a7e6427e2a34039252bd256d0dbc577937ff61ecdd1bb75"], 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x3, 0x20}, 0xc)
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x4, 0x13, 0x4, 0x20, 0x80000001, {r5, r6/1000+60000}, {0x2, 0x0, 0x10, 0x4, 0x7, 0x6, "1d558e4a"}, 0x1b47, 0x1, {0x0}, 0x8001})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xf91, 0x4, 0x1, 0xa4, 0xb8}}, {0x4}}]}]}, 0x58}}, 0x44080)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000280), &(0x7f0000000340)=0x4)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf)
r10 = fcntl$dupfd(r9, 0x0, r9)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$inet_pktinfo(r11, 0x0, 0x8, 0x0, 0x0)
ioctl$TCFLSH(r10, 0x400455c8, 0x2)
syz_open_dev$vcsa(&(0x7f0000000440), 0x334, 0x80)
read$FUSE(r10, &(0x7f0000000880)={0x2020}, 0x2020)

13m22.867907049s ago: executing program 1 (id=291):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x190, 0x230, 0x230, 0x190, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00', {}, {}, 0x4}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
close(r2)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
accept(r4, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x530, 0x0, 0x0)

13m18.172532283s ago: executing program 1 (id=301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, 0x0, 0x80)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3450, &(0x7f0000000080))
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0xd87f3000)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20)

13m17.218028903s ago: executing program 1 (id=303):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmdt(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50)

13m16.085544966s ago: executing program 1 (id=306):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

13m11.996075542s ago: executing program 1 (id=310):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185)

12m57.468237227s ago: executing program 5 (id=339):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

12m56.681294014s ago: executing program 33 (id=310):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185)

12m56.470352639s ago: executing program 5 (id=344):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

12m53.626622775s ago: executing program 5 (id=347):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000000)={0x0})

12m51.693236531s ago: executing program 5 (id=351):
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
socket(0x2b, 0x3, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f00000003c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

12m47.917066749s ago: executing program 5 (id=355):
socket$netlink(0x10, 0x3, 0x4)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)

12m45.489101235s ago: executing program 5 (id=362):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
unshare(0x66000080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)

12m30.149695531s ago: executing program 34 (id=362):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
unshare(0x66000080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)

9m33.861669177s ago: executing program 3 (id=676):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd, 0x6, 0x0, 0x0, 0x2, 0x1})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x8, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080)

9m32.141917885s ago: executing program 3 (id=677):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r1 = io_uring_setup(0xec9, &(0x7f0000000200)={0x0, 0x93b9, 0x200, 0x1, 0x23e})
r2 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x1000, 0x20024c, 0x0, r1}, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
connect$inet(r5, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xa, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f00000004c0)={0x77359400}, 0x1, 0x40, 0x1})
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)

9m30.684548646s ago: executing program 3 (id=681):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FIONCLEX(r2, 0x5450)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010)

9m29.33105651s ago: executing program 3 (id=683):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r3, 0x407, 0x100000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r4, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x22044800)

9m28.122526399s ago: executing program 3 (id=686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x6, <r0=>0xffffffffffffffff})
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bind$nfc_llcp(r0, &(0x7f0000000440)={0x27, 0x0, 0x1, 0x7, 0xd, 0x4, "e738b419cd607e4f930257684a56080a936e5a6fad32e241436b8c7529e1416284156eac45d06bd36504f65673c25c7dd9c5df0f9ff4f00d91d221e89b259b", 0x6}, 0x60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4)
fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x196fd1, 0x40000000, 0x10})

9m25.022439518s ago: executing program 3 (id=692):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200000d4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x602, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r2, 0x0, &(0x7f00000000c0), 0x800)
socket$nl_route(0x10, 0x3, 0x0)

9m8.979505561s ago: executing program 35 (id=692):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200000d4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x602, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r2, 0x0, &(0x7f00000000c0), 0x800)
socket$nl_route(0x10, 0x3, 0x0)

8m17.805021143s ago: executing program 6 (id=794):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000"], 0x50)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x0)
listen(0xffffffffffffffff, 0x8)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000))

8m12.332566013s ago: executing program 6 (id=803):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000180), 0xc06620, 0x4)
io_submit(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r4, 0x4b45, 0x1)
r5 = fcntl$dupfd(r1, 0x0, r0)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x4, 0x6})
shutdown(r0, 0x0)

8m9.606321948s ago: executing program 6 (id=809):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r0=>0x0, @loopback, @remote}, &(0x7f0000000100)=0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x13)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

8m7.800439827s ago: executing program 6 (id=811):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000))
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
setns(0xffffffffffffffff, 0x66020000)
syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_io_uring_setup(0xcaf, 0x0, &(0x7f00000001c0), &(0x7f00000000c0))

8m6.304263921s ago: executing program 6 (id=813):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000002c80))
prlimit64(0x0, 0xa, &(0x7f0000002c00)={0xfffffffffffffe00, 0x28}, &(0x7f0000002c40))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001340)=""/104, 0x68}], 0x1)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000d060500000000000000000007000003050001"], 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x10040000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @empty, @empty}}}})
r5 = openat$vimc0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, 0x0)

8m4.724896069s ago: executing program 6 (id=818):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$unix(r1, &(0x7f0000001580)="6c862589e04f537e0703dc130b03468cbe273a30f825933ebdc22a6daa0218030305b37cebdd3140f3d9a90fb021b0748e6d91722f23e3bd8f5dd644d0d07cacc0f30bc7e9890aa21d7f2fb0276c47471d5a30c0182ff6325d1d0a0845658b74ed7a8913ec190dd0f21f343902612aebd1c13cb2262e868bf10c566e9f8df32b9fba897bc2ea05c633e2a1959ccc50b5cdbed31b788d029b8a213e25494c436db21ebdc088b4e8eb03c4c785552702d7d01f03f988fa385205b9a27ff244aaabde8751aa8e65961a1c", 0xc9, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}, @exit_looper], 0x6, 0x0, &(0x7f0000000440)="553fc696f4b1"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0xe, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x28}, 0x2000}], 0x2, 0x0, 0x0)

7m48.715234491s ago: executing program 36 (id=818):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$unix(r1, &(0x7f0000001580)="6c862589e04f537e0703dc130b03468cbe273a30f825933ebdc22a6daa0218030305b37cebdd3140f3d9a90fb021b0748e6d91722f23e3bd8f5dd644d0d07cacc0f30bc7e9890aa21d7f2fb0276c47471d5a30c0182ff6325d1d0a0845658b74ed7a8913ec190dd0f21f343902612aebd1c13cb2262e868bf10c566e9f8df32b9fba897bc2ea05c633e2a1959ccc50b5cdbed31b788d029b8a213e25494c436db21ebdc088b4e8eb03c4c785552702d7d01f03f988fa385205b9a27ff244aaabde8751aa8e65961a1c", 0xc9, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}, @exit_looper], 0x6, 0x0, &(0x7f0000000440)="553fc696f4b1"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0xe, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x28}, 0x2000}], 0x2, 0x0, 0x0)

2m38.297685845s ago: executing program 8 (id=1235):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8000000000201030000000000000000070000028800018006000340000300002c00018014000300fe80000000000000000000000000000d14000400fc02000000000000000000000000000006000340000200000c000280050001003a0000000c000280050001002f00000014000180080001000080000008000200ac14142306000340000000000c000280050001000600000006000340000319000800044000006b0506000740007369702d32303030300000000900060073797a31000000000e0006007369702d3230303030000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
socket(0x10, 0x803, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='nmi_noise\x00', r0, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x21bb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000ff57ff57b9000000000000008500000041000000a20005ae7dac94c8769f7b937bc4593a7c567efdf6d6f52fe6a325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_POLL(r1, 0x640f)
ioctl$COMEDI_POLL(r1, 0x640f)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]})
ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400)
ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)

2m33.768614s ago: executing program 8 (id=1241):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe58c, 0x1052c1)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x32, &(0x7f0000000300)={@broadcast, @random="6487a2bed3d6", @val={@val={0x88a8, 0x4, 0x0, 0xffe}, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @loopback, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x3e}}}}}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffe13, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x40000000000002)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, <r6=>0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r7, r5, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8})
ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000340)={0x8, r8})
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e"])
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r6, @ANYRES16, @ANYRESOCT=r4], 0x18)
keyctl$setperm(0x5, 0x0, 0x30010001)

2m31.35564294s ago: executing program 8 (id=1244):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
getrusage(0x0, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd70007f0000000900000008000399a000020005"], 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
socket$netlink(0x10, 0x3, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x6}, {0x83e, 0x40}]}, 0x14, 0x1)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none')

2m29.19830424s ago: executing program 8 (id=1246):
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={<r0=>0x0}, &(0x7f00000002c0)=0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c000180080001407f00011c0c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r0, 0xa5, "2e75c7f9ecf4fa908d40f4e422a064712e36bf2fd97831b9789922fbd4489984bb7e7d2a1bcb8d11b10e76fee5c3a721e9f1350507882af384eb0b4c1222b746e0a735e9564512c9d30c7763a2873e94894d52265c3bfbe90ae8381eeb1813662f595cf9801de25fbf2ba54de683e4ce2b28b2b838e627daf406908540fca507089101d3b8d55e"}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000144}, 0x44080)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f000001ea00), 0x0, 0x4)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r7 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000280)='default_permissions', 0x0, r7)
r8 = fsmount(r6, 0x0, 0x0)
fchdir(r8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80)
sendfile(r9, r9, 0x0, 0x1000000201005)

2m24.341410426s ago: executing program 8 (id=1253):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x9)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
ptrace(0x10, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r2, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x23b)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x800)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x2)

2m18.21256669s ago: executing program 8 (id=1260):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
eventfd(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = userfaultfd(0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r4, 0x4b35, 0x3c7)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x40)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x114})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r9 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2)
ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"})
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x9)

2m1.389106442s ago: executing program 37 (id=1260):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
eventfd(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = userfaultfd(0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r4, 0x4b35, 0x3c7)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x40)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x114})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r9 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2)
ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"})
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x9)

7.264030122s ago: executing program 9 (id=1529):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x0, 0x0, 0x3}, @global=@item_012={0x2, 0x1, 0x8, "4c8b"}, @global=@item_012={0x1, 0x1, 0xa, "b4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

5.743821401s ago: executing program 0 (id=1535):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
close(r0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18)

5.606386853s ago: executing program 0 (id=1538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x5c, r1, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000)

5.359197607s ago: executing program 0 (id=1542):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.03102503s ago: executing program 0 (id=1547):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

4.589681418s ago: executing program 9 (id=1553):
clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000500)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)

4.408408742s ago: executing program 0 (id=1555):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
fchmod(r3, 0x1f)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1})
sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000003070177d3398a09570ad6ab8bbe933f8e4ed70556fe1ad61be729df6eed662037bcc4f625721966ecb1f7fac195d7faf09aaa5bebca52c75b2195274425b3c48cf0edd2b99db3084843e045c59d628c894f75288c0dbca764a6e4dcce6cdaa108dea2e18f3b865c8d2cedb7854b1cb57024a1a96deed694eec8e67becefe8fd97aaa8c69fc65ef1ae6a01131c01f68682e05cdf4220afbb8c698bfcab753458142ec4ecc29a95ae2b0e01ce8aa8c653124b1d99f26918124952832a042c247e141406e7fb34f6e4811257"], 0x14}, 0x1, 0x0, 0x0, 0x28040891}, 0x84)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0xdc6, 0xdb}, 0x8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c})
ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000)
r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
close_range(0xffffffffffffffff, r9, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)

4.279459336s ago: executing program 7 (id=1557):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xffff}, 0x90)

3.956850637s ago: executing program 2 (id=1561):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x41, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @alu={0x4, 0x0, 0xd, 0x8, 0xb, 0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf2bd}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @ringbuf_query, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x1, 0x1, 0x0, 0x2, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0xa, 0xa, 0xfffffffffffffff0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

3.807004036s ago: executing program 2 (id=1562):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x30, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}])

3.628882907s ago: executing program 9 (id=1563):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1c002d8005000100000000000500040000000000080002007f"], 0x38}}, 0x0)

3.484623655s ago: executing program 2 (id=1564):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="20311100"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x4)

3.469129036s ago: executing program 9 (id=1565):
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000340), &(0x7f0000000400)=0x4)

3.149504749s ago: executing program 7 (id=1566):
r0 = socket$inet6(0xa, 0x3, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x4000800)

3.039218753s ago: executing program 7 (id=1567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef)

2.604730417s ago: executing program 9 (id=1569):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000000000004)

2.496282462s ago: executing program 4 (id=1570):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.390894366s ago: executing program 7 (id=1571):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"])

2.294442311s ago: executing program 9 (id=1572):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4)

2.208486947s ago: executing program 4 (id=1573):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
close(r0)

2.208063576s ago: executing program 7 (id=1574):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x34000, 0x24005805)

2.048759541s ago: executing program 7 (id=1575):
getrandom(&(0x7f0000000380)=""/288, 0xfffffffffffffd92, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

1.997035879s ago: executing program 4 (id=1576):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000000)="08bd28c700004aa7", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)

1.785156662s ago: executing program 2 (id=1577):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r5, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
writev(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, 0x8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'macvlan1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x8}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7f}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0x15, 0x5, 0x0)

1.755688212s ago: executing program 4 (id=1578):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f45"], 0x69)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

431.288349ms ago: executing program 2 (id=1579):
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400"])

384.929572ms ago: executing program 4 (id=1580):
syz_emit_ethernet(0x66, &(0x7f00000006c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "95a439", 0x2, 0x2, 0xff, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, @mcast2}}}}}}}, 0x0)
syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000900000038000380140002006261746164763000000000000000000008000100020000000800030000000000060004000900000008000500e0"], 0x4c}}, 0x0)

45.238589ms ago: executing program 2 (id=1581):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0x5, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f0000003a80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}}], 0x1, 0x4800)

44.422349ms ago: executing program 4 (id=1582):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000050601010000000000000000000000040900030073797a32000000000900030073797a320000000005000100070000000900040073797a30000000000900020073797a30"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084)

0s ago: executing program 0 (id=1583):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000680)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]})

kernel console output (not intermixed with test programs):

ted to 200000 ns
[  532.290767][ T9243] kvm: pic: non byte write
[  532.319889][ T8905] veth0_vlan: entered promiscuous mode
[  532.563545][ T8905] veth1_vlan: entered promiscuous mode
[  533.954781][ T8905] veth0_macvtap: entered promiscuous mode
[  533.973518][ T8905] veth1_macvtap: entered promiscuous mode
[  534.008870][ T8905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.165870][ T8905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  534.667898][ T8905] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.679712][ T8905] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.690230][ T8905] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.700047][ T8905] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.191647][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.241554][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.500315][ T6854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.533684][ T6854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.513076][ T7264] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  540.520765][ T5954] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  543.163305][ T7264] usb 9-1: Using ep0 maxpacket: 8
[  544.142763][ T5954] usb 5-1: device descriptor read/all, error -71
[  544.155576][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.6.813'.
[  544.246339][ T7264] usb 9-1: device descriptor read/all, error -71
[  544.430650][ T9336] random: crng reseeded on system resumption
[  544.774171][ T9346] NILFS (nullb0): couldn't find nilfs on the device
[  545.538594][ T9353] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  546.058930][ T9364] binder: 9359:9364 ioctl c0306201 2000000008c0 returned -14
[  546.226394][ T7264] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  546.893037][ T7264] usb 9-1: Using ep0 maxpacket: 16
[  547.025541][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.7.822'.
[  547.034881][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.7.822'.
[  547.828742][ T7264] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  547.849401][ T7264] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  547.864883][ T7264] usb 9-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[  547.875957][ T7264] usb 9-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3
[  547.888620][ T7264] usb 9-1: Product: syz
[  547.892868][ T7264] usb 9-1: SerialNumber: syz
[  547.986965][ T7264] usb 9-1: config 0 descriptor??
[  552.137285][ T7264] usb 9-1: USB disconnect, device number 4
[  554.835605][ T7264] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  555.353369][ T9411] dlm: no local IP address has been set
[  555.359606][ T9411] dlm: cannot start dlm midcomms -107
[  555.872962][ T7264] usb 9-1: Using ep0 maxpacket: 16
[  555.909442][ T9412] Bluetooth: MGMT ver 1.23
[  557.443977][ T7264] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[  557.453487][ T7264] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  557.461676][ T7264] usb 9-1: Product: syz
[  557.466393][ T7264] usb 9-1: Manufacturer: syz
[  557.471432][ T7264] usb 9-1: SerialNumber: syz
[  557.489083][ T7264] r8152-cfgselector 9-1: Unknown version 0x0000
[  557.495891][ T7264] r8152-cfgselector 9-1: config 0 descriptor??
[  557.581954][ T7264] r8152-cfgselector 9-1: Unknown version 0x0000
[  557.620965][ T7264] r8152-cfgselector 9-1: bad CDC descriptors
[  557.709960][ T9418] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  557.997617][ T7264] r8152-cfgselector 9-1: USB disconnect, device number 5
[  558.045280][   T30] audit: type=1326 audit(1753981895.481:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.7.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bcb58eb69 code=0x0
[  562.513664][ T7262] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  563.438506][ T7262] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  563.448090][ T7262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.507621][ T7262] usb 5-1: Product: syz
[  563.533353][ T7262] usb 5-1: Manufacturer: syz
[  563.569434][ T7262] usb 5-1: SerialNumber: syz
[  563.903051][ T7274] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  564.154115][ T7274] usb 9-1: config 0 has an invalid interface number: 199 but max is 1
[  564.162489][ T7274] usb 9-1: config 0 has no interface number 1
[  564.227386][ T7274] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  564.227550][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  564.289505][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  564.339101][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  564.392034][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  564.401390][ T7274] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  564.416528][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  564.470964][ T7274] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  564.487885][ T7274] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  564.501187][ T7274] usb 9-1: SerialNumber: syz
[  564.514467][ T7274] usb 9-1: config 0 descriptor??
[  564.772748][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.795609][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.909974][ T7274] usb 9-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  564.937685][ T7274] usb 9-1: No valid video chain found.
[  565.017974][ T7274] usb 9-1: USB disconnect, device number 6
[  566.547906][ T5840] Bluetooth: hci1: command tx timeout
[  567.808752][ T6858] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.239803][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  568.247587][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  568.633025][ T5840] Bluetooth: hci1: command tx timeout
[  569.063608][ T7262] usb 5-1: can't set config #1, error -110
[  569.104863][ T6858] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.763671][ T5840] Bluetooth: hci1: command tx timeout
[  571.118790][    T9] usb 5-1: USB disconnect, device number 9
[  572.536657][ T6858] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.863104][ T5840] Bluetooth: hci1: command tx timeout
[  574.043191][ T9510] syz.2.855: attempt to access beyond end of device
[  574.043191][ T9510] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  574.057102][ T9510] FAT-fs (loop5): unable to read boot sector
[  574.822436][ T6858] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.868590][ T5928] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  575.366450][ T5928] usb 3-1: Using ep0 maxpacket: 16
[  575.399836][ T5928] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  575.433972][ T5928] usb 3-1: config 0 has no interface number 0
[  575.472296][ T5928] usb 3-1: config 0 interface 48 has no altsetting 0
[  575.516545][ T5928] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  575.564108][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.600941][ T5928] usb 3-1: Product: syz
[  575.617438][ T5928] usb 3-1: Manufacturer: syz
[  575.744964][ T5928] usb 3-1: SerialNumber: syz
[  575.769128][ T5928] usb 3-1: config 0 descriptor??
[  575.786889][ T5928] usb 3-1: can't set config #0, error -71
[  575.853021][ T5928] usb 3-1: USB disconnect, device number 13
[  575.917460][ T9465] chnl_net:caif_netlink_parms(): no params data found
[  577.001496][ T6858] bridge_slave_1: left allmulticast mode
[  577.017939][ T6858] bridge_slave_1: left promiscuous mode
[  577.596380][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.824204][ T6858] bridge_slave_0: left allmulticast mode
[  577.830517][ T6858] bridge_slave_0: left promiscuous mode
[  577.902600][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.849154][ T9552] netlink: 'syz.7.864': attribute type 10 has an invalid length.
[  581.922587][ T9554] Bluetooth: MGMT ver 1.23
[  581.934823][ T9552] netlink: 40 bytes leftover after parsing attributes in process `syz.7.864'.
[  583.431010][ T6858] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  583.636070][ T9568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.043168][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  584.045841][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  584.295395][ T6858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  584.445744][ T6858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  584.486593][ T6858] bond0 (unregistering): Released all slaves
[  584.515137][ T6858] bond1 (unregistering): Released all slaves
[  584.844484][ T9552] team0: entered promiscuous mode
[  584.849617][ T9552] team_slave_0: entered promiscuous mode
[  584.878055][ T9552] team_slave_1: entered promiscuous mode
[  584.943400][ T9572] fuse: Bad value for 'fd'
[  585.618033][ T9552] team0: entered allmulticast mode
[  585.632464][ T9552] team_slave_0: entered allmulticast mode
[  585.662967][ T9552] team_slave_1: entered allmulticast mode
[  585.679415][ T9552] bridge0: port 3(team0) entered blocking state
[  585.687645][ T9552] bridge0: port 3(team0) entered disabled state
[  585.697391][ T9552] bridge0: port 3(team0) entered blocking state
[  585.704448][ T9552] bridge0: port 3(team0) entered forwarding state
[  585.734152][ T9565] batman_adv: batadv0: Adding interface: dummy0
[  585.749880][ T9565] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.962318][ T9565] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  587.065045][ T9583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.872'.
[  587.084833][ T9583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.872'.
[  590.968273][ T6858] hsr_slave_0: left promiscuous mode
[  590.975596][ T6858] hsr_slave_1: left promiscuous mode
[  591.047284][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  591.056465][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.227548][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.259029][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.148530][ T6858] veth1_macvtap: left promiscuous mode
[  592.161981][ T6858] veth0_macvtap: left promiscuous mode
[  592.169315][ T6858] veth1_vlan: left promiscuous mode
[  592.178012][ T6858] veth0_vlan: left promiscuous mode
[  592.440672][ T9628] mmap: syz.8.881 (9628) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  592.532124][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.881'.
[  592.571017][   T30] audit: type=1326 audit(1753981930.001:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcb58eb69 code=0x7fc00000
[  594.243114][ T7274] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  594.322733][ T6858] team0 (unregistering): Port device team_slave_1 removed
[  594.378205][ T6858] team0 (unregistering): Port device team_slave_0 removed
[  594.421638][ T7274] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  594.433001][ T7274] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  594.442285][ T7274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.469468][ T7274] usb 8-1: config 0 descriptor??
[  594.978759][ T7274] lua 0003:1E7D:2C2E.0002: collection stack underflow
[  594.988074][ T7274] lua 0003:1E7D:2C2E.0002: item 0 4 0 12 parsing failed
[  595.000416][ T7274] lua 0003:1E7D:2C2E.0002: parse failed
[  595.007262][ T7274] lua 0003:1E7D:2C2E.0002: probe with driver lua failed with error -22
[  595.109349][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'.
[  595.520088][ T9628] pim6reg: entered allmulticast mode
[  595.538762][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.279021][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.287981][ T9465] bridge_slave_0: entered allmulticast mode
[  596.296296][ T9465] bridge_slave_0: entered promiscuous mode
[  596.306724][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.314033][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.321383][ T9465] bridge_slave_1: entered allmulticast mode
[  596.329499][ T9465] bridge_slave_1: entered promiscuous mode
[  596.662408][ T9465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  596.909115][ T9465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.383193][ T7265] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  597.585247][ T5928] usb 8-1: USB disconnect, device number 6
[  597.593872][ T9465] team0: Port device team_slave_0 added
[  597.643552][ T7265] usb 5-1: Using ep0 maxpacket: 32
[  597.652160][ T9465] team0: Port device team_slave_1 added
[  597.679021][ T7265] usb 5-1: config 0 interface 0 has no altsetting 0
[  597.753361][ T7265] usb 5-1: New USB device found, idVendor=16d0, idProduct=003e, bcdDevice=de.00
[  598.578081][ T7265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.592772][ T7265] usb 5-1: Product: syz
[  598.597088][ T7265] usb 5-1: Manufacturer: syz
[  598.601767][ T7265] usb 5-1: SerialNumber: syz
[  598.896688][ T7265] usb 5-1: config 0 descriptor??
[  598.963595][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.889'.
[  601.413277][ T7265] usb 5-1: USB disconnect, device number 10
[  602.103473][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.293035][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.810306][ T9465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.827892][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.835062][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.880900][ T9465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.333175][ T7274] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  603.547241][ T7274] usb 3-1: Using ep0 maxpacket: 32
[  603.661144][ T7274] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[  603.693179][ T7274] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  603.740951][ T7274] usb 3-1: config 2 has no interface number 1
[  603.758247][ T9679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.783129][ T7274] usb 3-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30
[  603.812611][ T7274] usb 3-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142
[  603.971309][ T7274] usb 3-1: config 2 interface 0 has no altsetting 0
[  603.981066][ T7274] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  604.013133][ T7274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.032803][ T7274] usb 3-1: Product: syz
[  604.043187][ T7274] usb 3-1: Manufacturer: syz
[  604.049347][ T9465] hsr_slave_0: entered promiscuous mode
[  604.050533][ T7274] usb 3-1: SerialNumber: syz
[  604.057089][ T9465] hsr_slave_1: entered promiscuous mode
[  604.759952][ T9465] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  604.767855][ T9465] Cannot create hsr debugfs directory
[  604.917767][ T7274] imon 3-1:2.157: inconsistent driver matching
[  604.924527][ T7274] imon 3-1:2.157: unable to register, err -22
[  604.930891][ T7274] imon 3-1:2.157: probe with driver imon failed with error -22
[  605.265304][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.050485][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.121299][ T9677] netlink: 'syz.2.893': attribute type 12 has an invalid length.
[  606.144858][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  606.230989][ T7274] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  606.243237][ T7274] imon 3-1:2.0: unable to initialize intf0, err -19
[  606.249915][ T7274] imon:imon_probe: failed to initialize context!
[  606.259732][ T7274] imon 3-1:2.0: unable to register, err -19
[  606.270148][ T7274] usb 3-1: USB disconnect, device number 14
[  608.868538][ T9465] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  608.997345][ T9465] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  609.022060][ T9465] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  610.232933][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.390078][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.505750][ T9465] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  611.518437][ T9726] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  611.537490][ T9726] bridge0: port 3(team0) entered disabled state
[  611.547828][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.557722][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.482468][ T9465] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.544822][ T9465] 8021q: adding VLAN 0 to HW filter on device team0
[  612.571336][ T9733] pimreg: entered allmulticast mode
[  612.660480][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.667885][ T6858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.758917][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.766427][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  614.551738][ T9465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  615.346224][ T9756] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  616.689411][ T9761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.911'.
[  618.479126][ T7266] libceph: connect (1)[c::]:6789 error -101
[  618.527830][ T7266] libceph: mon0 (1)[c::]:6789 connect error
[  618.594455][ T9777] ceph: No mds server is up or the cluster is laggy
[  618.659572][ T7265] libceph: connect (1)[c::]:6789 error -101
[  618.701442][ T7265] libceph: mon0 (1)[c::]:6789 connect error
[  619.008428][ T7265] libceph: connect (1)[c::]:6789 error -101
[  619.120319][ T7265] libceph: mon0 (1)[c::]:6789 connect error
[  620.989623][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  627.963288][ T9808] 9pnet_fd: Insufficient options for proto=fd
[  629.713420][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  629.719950][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  630.109406][ T9822] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  630.533789][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  630.554926][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  630.593208][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  630.635573][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  630.657818][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  631.247713][ T5840] Bluetooth: hci2: unexpected event for opcode 0x0c1b
[  632.207815][ T9837] comedi comedi0: Minor 14 could not be opened
[  632.763193][ T5840] Bluetooth: hci4: command tx timeout
[  633.666975][ T9842] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  634.646622][ T9855] i2c i2c-0: Invalid block write size 33
[  634.946403][ T5840] Bluetooth: hci4: command tx timeout
[  635.193033][ T9857] loop6: detected capacity change from 0 to 524287999
[  637.063090][ T5840] Bluetooth: hci4: command tx timeout
[  637.834369][ T9820] chnl_net:caif_netlink_parms(): no params data found
[  639.671352][ T5840] Bluetooth: hci4: command tx timeout
[  641.904577][ T9887] fuse: Bad value for 'fd'
[  643.055923][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.233084][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.240543][ T9820] bridge_slave_0: entered allmulticast mode
[  643.265013][ T9820] bridge_slave_0: entered promiscuous mode
[  643.294086][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.301344][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.895705][ T9820] bridge_slave_1: entered allmulticast mode
[  644.294416][ T9820] bridge_slave_1: entered promiscuous mode
[  646.878405][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  646.937711][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.139146][ T9820] team0: Port device team_slave_0 added
[  648.207857][ T9820] team0: Port device team_slave_1 added
[  650.653462][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  650.663396][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  650.692759][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  650.708699][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  650.731073][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.005545][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  651.023541][ T6858] bridge_slave_1: left allmulticast mode
[  651.030235][ T6858] bridge_slave_1: left promiscuous mode
[  651.059334][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.849898][ T6858] bridge_slave_0: left allmulticast mode
[  651.886587][ T6858] bridge_slave_0: left promiscuous mode
[  651.894783][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.122726][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.7.953'.
[  652.135899][ T9959] netlink: 28 bytes leftover after parsing attributes in process `syz.7.953'.
[  653.260291][ T9966] fuse: Bad value for 'fd'
[  654.749322][ T9974] genirq: Flags mismatch irq 5. 00200000 (dt2814) vs. 00200000 (comedi_parport)
[  654.905318][ T9976] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  656.643729][ T6858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  656.943826][ T6858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  656.966606][ T6858] bond0 (unregistering): Released all slaves
[  659.355167][ T6858] hsr_slave_0: left promiscuous mode
[  659.373456][ T6858] hsr_slave_1: left promiscuous mode
[  659.379917][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.401658][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  662.378885][ T6858] team0 (unregistering): Port device team_slave_1 removed
[  662.437564][ T6858] team0 (unregistering): Port device team_slave_0 removed
[  662.990751][ T9820] hsr_slave_0: entered promiscuous mode
[  663.014114][ T9820] hsr_slave_1: entered promiscuous mode
[  663.020638][ T9820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  663.040716][ T9820] Cannot create hsr debugfs directory
[  670.607223][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'.
[  674.415490][T10109] tty tty3: ldisc open failed (-12), clearing slot 2
[  675.311161][ T9820] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  676.253648][ T9820] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  676.260600][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.991'.
[  676.307793][ T9820] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  676.364906][ T9820] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  677.570018][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.776548][T10137] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  678.783013][T10137] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  678.816285][ T9820] 8021q: adding VLAN 0 to HW filter on device team0
[  678.849476][T10137] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  678.856152][T10137] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  678.871872][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.879142][ T6856] bridge0: port 1(bridge_slave_0) entered forwarding state
[  678.907247][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.914536][ T6856] bridge0: port 2(bridge_slave_1) entered forwarding state
[  678.956441][T10137] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  678.962502][T10137] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  678.989172][T10137] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  678.995298][T10137] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  679.006894][T10137] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  680.691008][T10155] usb usb1: check_ctrlrecip: process 10155 (syz.2.996) requesting ep 01 but needs 81
[  680.701389][T10155] usb usb1: usbfs: process 10155 (syz.2.996) did not claim interface 0 before use
[  680.843170][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  680.927882][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  681.003232][ T5840] Bluetooth: hci6: command 0x0406 tx timeout
[  681.084213][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout
[  681.655047][T10166] ubi: mtd0 is already attached to ubi31
[  683.291367][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  683.297529][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  683.304903][ T5840] Bluetooth: hci6: command 0x0406 tx timeout
[  683.311871][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout
[  684.742104][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  684.751950][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  684.761507][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  684.772400][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  684.833842][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  685.363517][T10171] Bluetooth: hci4: command 0x0c1a tx timeout
[  686.955584][T10171] Bluetooth: hci1: command tx timeout
[  687.785221][T10200] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd4": -EINTR
[  689.003055][T10171] Bluetooth: hci1: command tx timeout
[  689.586347][T10220] Cannot find add_set index 0 as target
[  689.668705][T10221] Invalid ELF header magic: != ELF
[  691.088912][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  691.097982][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  691.108165][T10207] sp0: Synchronizing with TNC
[  691.323034][T10171] Bluetooth: hci1: command tx timeout
[  693.403924][T10171] Bluetooth: hci1: command tx timeout
[  695.739986][T10231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  699.040907][ T9467] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  699.183059][T10260] random: crng reseeded on system resumption
[  699.647917][ T9467] usb 9-1: device descriptor read/64, error -71
[  700.053195][ T9467] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  700.232195][ T9467] usb 9-1: device descriptor read/64, error -71
[  700.358493][ T9467] usb usb9-port1: attempt power cycle
[  700.437788][T10185] chnl_net:caif_netlink_parms(): no params data found
[  700.697989][ T5943] bridge_slave_1: left allmulticast mode
[  700.712565][ T5943] bridge_slave_1: left promiscuous mode
[  701.186953][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.239204][ T9467] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  701.475151][ T9467] usb 9-1: device not accepting address 9, error -71
[  702.221274][ T5943] bridge_slave_0: left allmulticast mode
[  702.237237][ T5943] bridge_slave_0: left promiscuous mode
[  702.249596][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.462986][   T30] audit: type=1326 audit(1753982039.821:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  702.586521][   T30] audit: type=1326 audit(1753982039.821:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  702.610394][   T30] audit: type=1326 audit(1753982039.821:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  702.634467][   T30] audit: type=1326 audit(1753982039.821:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  702.810215][   T30] audit: type=1326 audit(1753982039.821:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  703.229282][   T30] audit: type=1326 audit(1753982039.821:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  703.348372][   T30] audit: type=1326 audit(1753982039.821:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  703.387804][   T30] audit: type=1326 audit(1753982039.821:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  703.464675][   T30] audit: type=1326 audit(1753982039.881:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  703.523703][   T30] audit: type=1326 audit(1753982039.921:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.8.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fff8eb69 code=0x7ffc0000
[  705.969043][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  705.983141][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  705.994211][ T5943] bond0 (unregistering): Released all slaves
[  706.876939][T10185] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.126087][T10185] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.764133][T10185] bridge_slave_0: entered allmulticast mode
[  707.772490][T10185] bridge_slave_0: entered promiscuous mode
[  708.016659][T10185] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.025291][T10185] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.032921][T10185] bridge_slave_1: entered allmulticast mode
[  708.375503][T10185] bridge_slave_1: entered promiscuous mode
[  708.692320][ T5943] hsr_slave_0: left promiscuous mode
[  708.860952][T10322] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  708.877752][T10322] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0'
[  709.588643][ T5943] hsr_slave_1: left promiscuous mode
[  709.635061][T10323] Falling back ldisc for ttyprintk.
[  709.781610][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  709.811167][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  710.244758][T10332] Invalid source name
[  710.250774][T10332] UBIFS error (pid: 10332): cannot open "ubifs", error -22
[  713.874847][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  713.972595][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  714.961913][T10345] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  714.968698][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  714.968724][   T30] audit: type=1800 audit(1753982052.391:35): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1039" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  714.999202][T10345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  715.010943][T10345] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  715.020231][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  715.075297][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.283088][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1042'.
[  715.409967][T10366] use of bytesused == 0 is deprecated and will be removed in the future,
[  715.420441][T10366] use the actual size instead.
[  717.766141][   T30] audit: type=1326 audit(1753982054.761:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10372 comm="syz.7.1044" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bcb58eb69 code=0x0
[  718.225500][T10185] team0: Port device team_slave_0 added
[  719.742062][T10185] team0: Port device team_slave_1 added
[  719.747367][T10384] Device name cannot be null; rc = [-22]
[  720.026399][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.049814][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.077861][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  720.119950][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  720.141391][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.174329][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  721.139239][T10185] hsr_slave_0: entered promiscuous mode
[  721.140472][T10185] hsr_slave_1: entered promiscuous mode
[  721.141880][T10185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  721.142094][T10185] Cannot create hsr debugfs directory
[  722.493094][T10411] netlink: 'syz.4.1051': attribute type 1 has an invalid length.
[  722.501074][T10411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1051'.
[  722.593011][T10412] No such timeout policy "syz0"
[  723.769320][   T30] audit: type=1800 audit(1753982060.751:37): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1050" name="bus" dev="overlay" ino=356 res=0 errno=0
[  728.253252][T10436] netlink: 'syz.8.1056': attribute type 4 has an invalid length.
[  732.148772][T10455] random: crng reseeded on system resumption
[  734.746590][T10185] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  737.160559][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1067'.
[  737.852567][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1067'.
[  738.343516][T10185] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  738.365051][T10491] netlink: 'syz.2.1068': attribute type 10 has an invalid length.
[  739.560150][T10491] 8021q: adding VLAN 0 to HW filter on device bond0
[  739.587770][T10491] team0: Port device bond0 added
[  739.623609][T10185] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  739.755831][T10185] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  740.017281][T10492] IPVS: Error connecting to the multicast addr
[  740.580706][   T30] audit: type=1326 audit(1753982078.011:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10501 comm="syz.8.1071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fff8eb69 code=0x0
[  742.028161][T10522] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  744.789705][T10527] hpfs: Bad magic ... probably not HPFS
[  745.460383][T10544] xt_nat: multiple ranges no longer supported
[  746.227213][T10546] bridge1: entered promiscuous mode
[  746.233087][T10546] bridge1: entered allmulticast mode
[  747.033692][T10553] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1079'.
[  747.048341][T10553] netlink: 'syz.2.1079': attribute type 9 has an invalid length.
[  747.057923][T10553] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1079'.
[  747.070745][T10553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1079'.
[  747.843118][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'.
[  747.854475][T10553] netlink: 'syz.2.1079': attribute type 5 has an invalid length.
[  747.867368][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1079'.
[  748.577402][T10553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  748.719357][T10553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  748.769393][T10553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  748.833112][T10553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  748.957948][T10553] geneve2: entered promiscuous mode
[  748.959825][T10562] ptrace attach of "./syz-executor exec"[8905] was attempted by "./syz-executor exec"[10562]
[  749.109884][T10553] geneve2: entered allmulticast mode
[  749.538873][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  749.551140][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  749.564132][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  749.575572][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  749.586848][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  751.644472][T10171] Bluetooth: hci1: command tx timeout
[  751.653074][T10569] tty tty1: ldisc open failed (-12), clearing slot 0
[  752.583722][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  752.590227][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  753.805681][T10171] Bluetooth: hci1: command tx timeout
[  756.689317][T10171] Bluetooth: hci1: command tx timeout
[  757.905218][T10566] chnl_net:caif_netlink_parms(): no params data found
[  758.387735][T10621] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1094'.
[  758.397553][T10621] netlink: 420 bytes leftover after parsing attributes in process `syz.7.1094'.
[  758.763151][T10171] Bluetooth: hci1: command tx timeout
[  759.670190][T10566] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.865812][T10566] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.873800][T10566] bridge_slave_0: entered allmulticast mode
[  759.882456][T10566] bridge_slave_0: entered promiscuous mode
[  759.915506][T10566] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.927138][T10566] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.937728][T10566] bridge_slave_1: entered allmulticast mode
[  760.659541][T10566] bridge_slave_1: entered promiscuous mode
[  761.556195][T10645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  761.625274][ T5942] Bluetooth: hci4: Frame reassembly failed (-84)
[  761.669810][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  761.688290][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.787973][T10566] team0: Port device team_slave_0 added
[  761.815621][T10566] team0: Port device team_slave_1 added
[  761.838898][T10652] binder: 10650:10652 ioctl 400c620e 0 returned -14
[  762.033662][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  762.125729][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  762.534996][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  762.630637][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  762.638696][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  762.670629][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.873256][   T37] bridge_slave_1: left allmulticast mode
[  762.878995][   T37] bridge_slave_1: left promiscuous mode
[  762.885023][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.642990][T10171] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  763.954962][   T37] bridge_slave_0: left allmulticast mode
[  763.961064][   T37] bridge_slave_0: left promiscuous mode
[  763.982597][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.195174][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  767.247104][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  767.271388][   T37] bond0 (unregistering): Released all slaves
[  767.319513][T10661] bridge2: entered promiscuous mode
[  767.324870][T10661] bridge2: entered allmulticast mode
[  768.535377][T10690] Invalid source name
[  768.542526][T10690] UBIFS error (pid: 10690): cannot open "/dev/sg0", error -22
[  769.171784][   T37] hsr_slave_0: left promiscuous mode
[  770.748750][   T37] hsr_slave_1: left promiscuous mode
[  770.824317][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  771.346302][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  773.735717][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1118'.
[  774.004240][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1119'.
[  774.014035][T10728] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1119'.
[  774.184939][ T7262] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  774.440917][ T7262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  774.456677][ T7262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  774.471691][ T7262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  774.500515][ T7262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  774.516555][ T7262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  774.533180][ T7262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  774.553556][ T7262] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  774.714227][ T7262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.724194][ T7262] usb 9-1: Product: syz
[  774.728828][ T7262] usb 9-1: Manufacturer: syz
[  774.755533][ T7262] usb 9-1: SerialNumber: syz
[  774.767887][   T37] team0 (unregistering): Port device team_slave_1 removed
[  774.770077][ T7262] usb 9-1: config 0 descriptor??
[  774.799998][ T7262] ti_usb_3410_5052 9-1:0.0: TI USB 5052 2 port adapter converter detected
[  774.816705][ T7262] ti_usb_3410_5052 9-1:0.0: missing endpoints
[  775.588050][   T37] team0 (unregistering): Port device team_slave_0 removed
[  776.785016][  T977] usb 9-1: USB disconnect, device number 11
[  777.205200][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'.
[  777.223569][T10746] netlink: 'syz.2.1124': attribute type 11 has an invalid length.
[  777.231509][T10746] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1124'.
[  777.687587][T10566] hsr_slave_0: entered promiscuous mode
[  777.701753][T10566] hsr_slave_1: entered promiscuous mode
[  777.708304][T10566] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  777.715974][T10566] Cannot create hsr debugfs directory
[  782.354742][T10766] atomic_op ffff8880316a6998 conn xmit_atomic 0000000000000000
[  783.970300][ T7262] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  784.552258][ T7262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  784.589434][ T7262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.860081][ T7262] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  784.870181][ T7262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.890046][ T7262] usb 3-1: config 0 descriptor??
[  785.269758][T10790] fuse: Bad value for 'fd'
[  785.315966][T10787] binder: 10784:10787 ioctl c018620c 200000000000 returned -22
[  785.726962][ T7262] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  785.759409][ T7262] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  785.999167][ T7262] cp2112 0003:10C4:EA90.0003: error requesting version
[  786.061469][ T7262] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32
[  788.753444][ T5928] usb 3-1: USB disconnect, device number 15
[  790.322103][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'.
[  791.131112][T10566] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  792.106519][T10566] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  792.543079][T10566] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  792.747231][T10566] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  792.949211][T10842] netlink: 452 bytes leftover after parsing attributes in process `syz.8.1145'.
[  793.177114][T10855] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  793.818490][T10837] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  793.928551][T10855] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  793.993187][  T977] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  794.242985][  T977] usb 9-1: Using ep0 maxpacket: 16
[  794.250591][  T977] usb 9-1: config 1 interface 0 has no altsetting 0
[  794.454433][T10566] 8021q: adding VLAN 0 to HW filter on device bond0
[  794.574647][  T977] usb 9-1: New USB device found, idVendor=05ac, idProduct=02e6, bcdDevice= 0.40
[  794.663203][  T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.696015][T10566] 8021q: adding VLAN 0 to HW filter on device team0
[  794.725572][  T977] usb 9-1: Product: syz
[  794.754881][  T977] usb 9-1: Manufacturer: syz
[  794.790624][  T977] usb 9-1: SerialNumber: syz
[  795.371391][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.378800][ T6858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.815083][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.822297][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  795.852748][T10842] nvme_fabrics: missing parameter 'transport=%s'
[  795.876088][T10842] nvme_fabrics: missing parameter 'nqn=%s'
[  795.903700][  T977] usbhid 9-1:1.0: can't add hid device: -71
[  795.909750][  T977] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  795.961871][  T977] usb 9-1: USB disconnect, device number 12
[  797.912840][T10885] xt_CT: You must specify a L4 protocol and not use inversions on it
[  799.329877][T10566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  799.712659][ T7274] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  800.673978][ T7274] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  801.371625][ T7274] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  801.522853][ T7274] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.565608][ T7274] usb 9-1: config 0 descriptor??
[  801.603882][ T7274] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  805.531408][T10921] syz.7.1157: attempt to access beyond end of device
[  805.531408][T10921] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  805.735658][ T7262] usb 9-1: USB disconnect, device number 13
[  808.018261][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  808.032274][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  808.224596][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  808.247365][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  808.266054][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  809.783309][ T7274] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  810.309226][T10947] ipvlan2: entered promiscuous mode
[  810.746094][T10951] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  810.754577][T10951] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  810.767857][T10951] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  810.785789][T10951] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  811.163174][T10171] Bluetooth: hci4: command tx timeout
[  811.175823][ T7274] usb 5-1: device descriptor read/64, error -71
[  811.472969][ T5954] libceph: connect (1)[c::]:6789 error -101
[  811.481212][ T5954] libceph: mon0 (1)[c::]:6789 connect error
[  812.163466][ T7274] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  813.302994][T10171] Bluetooth: hci4: command tx timeout
[  813.848020][T10957] ceph: No mds server is up or the cluster is laggy
[  813.907568][ T9467] libceph: connect (1)[c::]:6789 error -101
[  813.938803][ T9467] libceph: mon0 (1)[c::]:6789 connect error
[  813.973663][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  813.983074][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  814.808404][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1168'.
[  815.332913][T10171] Bluetooth: hci4: command tx timeout
[  817.074275][T10994] overlayfs: failed to resolve './file0': -2
[  817.415976][T10171] Bluetooth: hci4: command tx timeout
[  819.898598][T10933] chnl_net:caif_netlink_parms(): no params data found
[  820.224088][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1176'.
[  820.265846][ T6876] bridge_slave_1: left allmulticast mode
[  820.271530][ T6876] bridge_slave_1: left promiscuous mode
[  820.332239][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.527857][T10989] "syz.2.1173" (10989) uses obsolete ecb(arc4) skcipher
[  821.315833][ T6876] bridge_slave_0: left allmulticast mode
[  821.321590][ T6876] bridge_slave_0: left promiscuous mode
[  821.363117][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.483127][ T5837] Bluetooth: hci4: command 0x0405 tx timeout
[  821.980415][T11021] overlayfs: missing 'lowerdir'
[  823.009329][T11025] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  823.017213][T11025] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  823.025650][T11025] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  823.033504][T11025] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  824.505374][T11035] input: syz0 as /devices/virtual/input/input12
[  827.190018][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'.
[  827.996350][T11049] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  828.003430][T11049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  828.052984][T11057] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  828.073933][T11049] vhci_hcd vhci_hcd.0: Device attached
[  828.169409][T11049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  828.213474][T11049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  828.225180][T11049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  828.238629][T11049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  828.364268][T11062] program syz.8.1185 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  828.592906][ T7269] vhci_hcd: vhci_device speed not set
[  828.777528][T11049] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(19)
[  828.784204][T11049] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  828.793196][ T7269] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  828.909808][T11057] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  828.943942][T11064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  828.974275][T11049] vhci_hcd vhci_hcd.0: Device attached
[  829.120794][T11061] vhci_hcd: connection closed
[  829.134616][T11051] vhci_hcd: connection reset by peer
[  829.156085][ T6436] vhci_hcd: stop threads
[  829.162096][ T6436] vhci_hcd: release socket
[  829.250142][ T6436] vhci_hcd: disconnect device
[  829.276942][ T6436] vhci_hcd: stop threads
[  829.516470][ T6436] vhci_hcd: release socket
[  829.552577][ T6436] vhci_hcd: disconnect device
[  831.483267][ T6876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  831.636746][T11073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  831.648911][T11073] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  832.421527][ T6876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  832.644929][ T6876] bond0 (unregistering): Released all slaves
[  832.761485][T11078] ubi: mtd0 is already attached to ubi31
[  834.212557][ T6876] hsr_slave_0: left promiscuous mode
[  834.213109][ T7269] vhci_hcd: vhci_device speed not set
[  834.234783][ T6876] hsr_slave_1: left promiscuous mode
[  834.243918][ T9467] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  834.267426][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  834.283893][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  834.628273][ T9467] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  834.756894][ T9467] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  834.881276][ T9467] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  834.963037][ T9467] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.824836][ T9467] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  835.833297][ T9467] usb 9-1: invalid MIDI out EP 0
[  836.103547][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1194'.
[  837.982086][T11113] vxfs: WRONG superblock magic 00000000 at 1
[  837.991768][T11113] vxfs: WRONG superblock magic 00000000 at 8
[  837.998150][T11113] vxfs: can't find superblock.
[  838.642294][ T9467] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22
[  838.710363][ T9467] usb 9-1: USB disconnect, device number 14
[  838.724925][T11027] udevd[11027]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  840.035107][T11120] syz.2.1196: attempt to access beyond end of device
[  840.035107][T11120] loop2: rw=0, sector=16, nr_sectors = 2 limit=0
[  840.527092][ T6876] team0 (unregistering): Port device team_slave_1 removed
[  841.943941][T11133] slcan: can't register candev
[  841.949193][T11133] Falling back ldisc for ttyS3.
[  842.030886][ T6876] team0 (unregistering): Port device team_slave_0 removed
[  844.619140][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1203'.
[  846.068379][T11163] syz.2.1205: attempt to access beyond end of device
[  846.068379][T11163] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0
[  846.084626][T11163] syz.2.1205: attempt to access beyond end of device
[  846.084626][T11163] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0
[  848.592797][T11170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  848.703064][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  848.712164][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  848.789629][    T9] IPVS: starting estimator thread 0...
[  848.810604][T11094] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  848.951065][T11171] IPVS: using max 23 ests per chain, 55200 per kthread
[  849.179991][T11101] team_slave_0 (unregistering): left promiscuous mode
[  849.188333][T11101] team_slave_0 (unregistering): left allmulticast mode
[  849.204066][T11101] team0: Port device team_slave_0 removed
[  849.629081][T10933] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.365264][T10933] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.372573][T10933] bridge_slave_0: entered allmulticast mode
[  850.554538][T10933] bridge_slave_0: entered promiscuous mode
[  850.575364][T10933] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.582609][T10933] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.594288][T10933] bridge_slave_1: entered allmulticast mode
[  850.602307][T10933] bridge_slave_1: entered promiscuous mode
[  850.994742][T11190] netlink: 'syz.7.1210': attribute type 4 has an invalid length.
[  852.076993][T10933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.279932][T10933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  853.291813][T11204] : entered promiscuous mode
[  855.249681][T10933] team0: Port device team_slave_0 added
[  855.259641][T10933] team0: Port device team_slave_1 added
[  856.903415][T10933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.910829][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  856.941302][T10933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  857.147543][T11228] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1216'.
[  857.265548][T10933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  857.272541][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  857.303019][T10933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  857.899848][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1220'.
[  858.026239][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1220'.
[  858.844140][T11242] vlan2: entered promiscuous mode
[  858.849306][T11242] syz_tun: entered promiscuous mode
[  858.856879][T11243] bridge0: port 3(team0) entered disabled state
[  858.885371][T11243] bridge_slave_1: left allmulticast mode
[  858.891076][T11243] bridge_slave_1: left promiscuous mode
[  858.897239][T11243] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.908935][T11243] bridge_slave_0: left allmulticast mode
[  858.917993][T11243] bridge_slave_0: left promiscuous mode
[  858.924086][T11243] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.228496][T10933] hsr_slave_0: entered promiscuous mode
[  859.253863][T10933] hsr_slave_1: entered promiscuous mode
[  859.269856][T10933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  859.473898][T10933] Cannot create hsr debugfs directory
[  859.847524][T11255] vivid-000: disconnect
[  862.114874][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1225'.
[  862.124001][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1225'.
[  864.832867][T11284] kernel profiling enabled (shift: 7)
[  864.909189][T11285] netlink: 'syz.2.1227': attribute type 10 has an invalid length.
[  864.937066][T11285] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  864.951542][T11285] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  865.563581][T11277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  866.489541][T11288] bpq0: entered allmulticast mode
[  866.604926][T11289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1228'.
[  872.532123][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  872.550864][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  872.616569][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  872.641342][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  872.651443][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  873.573454][ T6856] bridge_slave_1: left allmulticast mode
[  873.579213][ T6856] bridge_slave_1: left promiscuous mode
[  873.623658][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.771797][ T6856] bridge_slave_0: left allmulticast mode
[  874.012847][ T6856] bridge_slave_0: left promiscuous mode
[  874.013133][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.515421][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  875.521835][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  875.655135][T11382] binder: 11379:11382 ioctl c018620c 200000000000 returned -22
[  875.805281][ T5837] Bluetooth: hci1: command tx timeout
[  876.686488][T11386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  877.409962][ T6856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  877.467940][ T6856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  877.521590][ T6856] bond0 (unregistering): Released all slaves
[  877.596685][T11371] vxcan1: entered allmulticast mode
[  877.849922][T11393] syz.2.1242: attempt to access beyond end of device
[  877.849922][T11393] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  877.870388][T11393] (syz.2.1242,11393,0):ocfs2_get_sector:1714 ERROR: status = -5
[  877.878989][T11393] (syz.2.1242,11393,0):ocfs2_sb_probe:753 ERROR: status = -5
[  877.892510][T11393] (syz.2.1242,11393,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  877.893133][ T5837] Bluetooth: hci1: command tx timeout
[  877.914630][T11393] (syz.2.1242,11393,0):ocfs2_fill_super:1177 ERROR: status = -5
[  878.617828][ T6856] hsr_slave_0: left promiscuous mode
[  878.955654][T11399] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  879.113781][T11399] CIFS mount error: No usable UNC path provided in device string!
[  879.113781][T11399] 
[  879.124807][T11399] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  879.815882][ T6856] hsr_slave_1: left promiscuous mode
[  879.824640][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  879.863886][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  879.974076][ T5837] Bluetooth: hci1: command tx timeout
[  881.407743][T11405] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  882.066784][ T5837] Bluetooth: hci1: command tx timeout
[  882.965989][T11420] netlink: 'syz.7.1250': attribute type 30 has an invalid length.
[  883.618880][ T6856] team0 (unregistering): Port device team_slave_1 removed
[  883.684828][ T6856] team0 (unregistering): Port device team_slave_0 removed
[  887.813756][T11447] vivid-007: =================  START STATUS  =================
[  887.824584][T11447] vivid-007: Generate PTS: true
[  887.830966][T11447] vivid-007: Generate SCR: true
[  887.836358][T11447] tpg source WxH: 320x240 (Y'CbCr)
[  887.841599][T11447] tpg field: 1
[  887.845246][T11447] tpg crop: (0,0)/320x240
[  887.849669][T11447] tpg compose: (0,0)/320x240
[  887.854460][T11447] tpg colorspace: 8
[  887.858353][T11447] tpg transfer function: 0/0
[  887.863178][T11447] tpg Y'CbCr encoding: 0/0
[  887.867765][T11447] tpg quantization: 0/0
[  887.900268][T11447] tpg RGB range: 0/2
[  887.904398][T11447] vivid-007: ==================  END STATUS  ==================
[  888.058179][T11448] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12)
[  888.064885][T11448] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  888.074536][T11448] vhci_hcd vhci_hcd.0: Device attached
[  889.227507][T11449] vhci_hcd: connection closed
[  889.231466][ T5942] vhci_hcd: stop threads
[  889.242677][ T5942] vhci_hcd: release socket
[  889.247284][ T5942] vhci_hcd: disconnect device
[  889.260426][ T5928] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  889.605861][T11357] chnl_net:caif_netlink_parms(): no params data found
[  894.296393][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1261'.
[  894.305544][T11480] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1261'.
[  894.606098][T11357] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.657847][T11357] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.693442][T11357] bridge_slave_0: entered allmulticast mode
[  894.701470][T11357] bridge_slave_0: entered promiscuous mode
[  894.857364][T11357] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.927278][T11357] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.991528][T11357] bridge_slave_1: entered allmulticast mode
[  895.557218][T11357] bridge_slave_1: entered promiscuous mode
[  895.720218][T11492] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2
[  896.701215][T11357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.722001][T11357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  898.011229][T11357] team0: Port device team_slave_0 added
[  898.025423][T11357] team0: Port device team_slave_1 added
[  898.925891][T11509] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  899.494292][T11357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  899.548607][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  899.576176][T11357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  899.635728][T11357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  899.757333][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  899.803655][T11357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  899.928663][T11513] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  899.935703][T11513] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  899.943394][T11513] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  899.951103][T11513] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  899.958627][T11513] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  899.965678][T11513] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  899.972811][T11513] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  899.979486][T11513] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  899.986342][T11513] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  899.993537][T11513] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  900.000630][T11513] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  900.007678][T11513] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  900.015257][T11513] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  900.023681][T11513] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  900.032229][T11513] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  900.039673][T11513] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  900.048187][T11513] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  900.056616][T11513] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  900.064122][T11513] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  900.073031][T11513] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  900.080610][T11513] comedi comedi3: 8255: I/O port conflict (0x8000000,4)
[  900.088533][T11513] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  903.283405][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1260'.
[  903.288225][T11525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1271'.
[  905.055545][   T30] audit: type=1326 audit(1753982498.493:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11522 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  905.202895][   T30] audit: type=1326 audit(1753982498.513:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11522 comm="syz.4.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  905.276368][T11525] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  907.307612][T11539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  909.005921][T11521] team0: Port device team_slave_0 removed
[  909.079236][T11357] hsr_slave_0: entered promiscuous mode
[  909.841904][T11357] hsr_slave_1: entered promiscuous mode
[  909.849637][T11357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  909.860247][T11357] Cannot create hsr debugfs directory
[  912.051476][T10171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  912.064008][T10171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  912.074741][T10171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  912.091447][T10171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  912.100268][T10171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  914.203198][ T5837] Bluetooth: hci4: command tx timeout
[  914.588347][T11592] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1284'.
[  915.004913][   T30] audit: type=1326 audit(1753982508.433:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.7.1283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bcb58eb69 code=0x0
[  916.215695][T11605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'.
[  916.292949][ T5837] Bluetooth: hci4: command tx timeout
[  916.909569][ T6858] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.117325][T11357] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  917.145819][T11357] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  917.274508][ T5837] Bluetooth: hci6: ACL packet for unknown connection handle 201
[  917.828660][T11357] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  917.945655][ T6858] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.980365][T11357] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  918.009246][T11616] delete_channel: no stack
[  918.089946][T11614] batman_adv: batadv0: Removing interface: dummy0
[  918.101712][T11614] batman_adv: batadv0: Removing interface: batadv_slave_0
[  918.375069][ T5837] Bluetooth: hci4: command tx timeout
[  918.394000][T11614] batman_adv: batadv0: Removing interface: batadv_slave_1
[  919.140993][T11624] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1291'.
[  919.150935][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'.
[  919.694971][ T6858] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.811169][T11614] netlink: 'syz.2.1288': attribute type 2 has an invalid length.
[  919.878969][T11614] netlink: 'syz.2.1288': attribute type 1 has an invalid length.
[  920.112042][ T6858] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.453010][ T5837] Bluetooth: hci4: command tx timeout
[  920.787221][T11646] fuse: Bad value for 'fd'
[  921.782017][T11572] chnl_net:caif_netlink_parms(): no params data found
[  925.924010][T11572] bridge0: port 1(bridge_slave_0) entered blocking state
[  925.931259][T11572] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.978164][T11572] bridge_slave_0: entered allmulticast mode
[  925.998902][T11572] bridge_slave_0: entered promiscuous mode
[  926.156220][T11572] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.168331][T11572] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.176072][T11572] bridge_slave_1: entered allmulticast mode
[  926.194198][T11572] bridge_slave_1: entered promiscuous mode
[  927.196990][ T6858] bridge_slave_1: left allmulticast mode
[  927.203657][ T6858] bridge_slave_1: left promiscuous mode
[  927.209510][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state
[  927.249455][ T6858] bridge_slave_0: left allmulticast mode
[  927.267421][ T6858] bridge_slave_0: left promiscuous mode
[  927.273352][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.608183][T11707] xt_nat: multiple ranges no longer supported
[  930.673526][   T30] audit: type=1804 audit(1753982523.763:42): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1308" name="file0" dev="ramfs" ino=34793 res=1 errno=0
[  930.992479][T11733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1309'.
[  931.868465][   T30] audit: type=1326 audit(1753982525.303:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  931.907582][   T30] audit: type=1326 audit(1753982525.343:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  931.933387][   T30] audit: type=1326 audit(1753982525.343:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  931.991813][   T30] audit: type=1326 audit(1753982525.343:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  932.056847][   T30] audit: type=1326 audit(1753982525.343:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  932.121075][   T30] audit: type=1326 audit(1753982525.343:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  932.184851][   T30] audit: type=1326 audit(1753982525.343:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  932.210086][T10171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  932.222163][T10171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  932.230937][   T30] audit: type=1326 audit(1753982525.343:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  932.253797][T10171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  932.272208][   T30] audit: type=1326 audit(1753982525.343:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11737 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  932.303394][T10171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  932.340555][T10171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  932.610820][ T6858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  932.629542][ T6858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  932.641443][ T6858] bond0 (unregistering): Released all slaves
[  932.696252][T11572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.713526][T11572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.785323][T11572] team0: Port device team_slave_0 added
[  932.812397][T11572] team0: Port device team_slave_1 added
[  933.084177][T11750] ubi: mtd0 is already attached to ubi31
[  933.593701][T11572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  933.600738][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.638947][T11572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  933.670685][T11572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  933.693538][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.734521][T11572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  934.412534][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'.
[  934.442829][ T5837] Bluetooth: hci0: command tx timeout
[  934.656245][T11572] hsr_slave_0: entered promiscuous mode
[  934.663724][T11572] hsr_slave_1: entered promiscuous mode
[  934.670274][T11572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  934.679863][T11572] Cannot create hsr debugfs directory
[  935.839879][T11763] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1315'.
[  936.854374][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  936.860894][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  936.966336][ T5837] Bluetooth: hci0: command tx timeout
[  937.577717][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'.
[  937.693894][ T6858] hsr_slave_0: left promiscuous mode
[  937.807271][ T6858] hsr_slave_1: left promiscuous mode
[  937.823757][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  938.472817][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  938.513802][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  938.541042][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  938.638240][T11786] overlayfs: missing 'workdir'
[  938.848789][ T6858] veth1_macvtap: left promiscuous mode
[  939.613285][ T6858] veth0_macvtap: left promiscuous mode
[  939.619266][ T6858] veth1_vlan: left promiscuous mode
[  939.624868][ T5837] Bluetooth: hci0: command tx timeout
[  940.359107][ T6858] veth0_vlan: left promiscuous mode
[  941.867548][ T5837] Bluetooth: hci0: command tx timeout
[  942.194557][ T6858] pim6reg (unregistering): left allmulticast mode
[  942.481392][T11806] netlink: 'syz.4.1323': attribute type 9 has an invalid length.
[  942.509578][T11806] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  944.542134][T11813] QAT: Device 7 not found
[  945.095052][T11816] netlink: 'syz.4.1326': attribute type 6 has an invalid length.
[  945.754427][T11821] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 11821 comm: syz.2.1327)
[  946.115531][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  946.115566][   T30] audit: type=1800 audit(1753982539.203:83): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1327" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=35963 res=0 errno=0
[  946.628071][T11819] syz.4.1326 (11819): attempted to duplicate a private mapping with mremap.  This is not supported.
[  946.641606][   T30] audit: type=1326 audit(1753982540.073:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11814 comm="syz.4.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  946.708615][   T30] audit: type=1326 audit(1753982540.103:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11814 comm="syz.4.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  946.780051][   T30] audit: type=1326 audit(1753982540.103:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11814 comm="syz.4.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  946.828333][   T30] audit: type=1326 audit(1753982540.263:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11814 comm="syz.4.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  946.851881][   T30] audit: type=1326 audit(1753982540.263:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11814 comm="syz.4.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[  946.873446][    C0] vkms_vblank_simulate: vblank timer overrun
[  947.790531][ T6858] team0 (unregistering): Port device team_slave_1 removed
[  948.454953][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1319'.
[  949.245271][T11836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1330'.
[  950.361381][T11836] vlan2: entered promiscuous mode
[  950.551576][T11836] bridge0: entered promiscuous mode
[  950.581230][T11836] vlan2: entered allmulticast mode
[  950.586667][T11836] bridge0: entered allmulticast mode
[  950.802439][T11840] team0: Port device bond0 removed
[  950.808212][T11840] bridge_slave_0: left allmulticast mode
[  950.814621][T11840] bridge_slave_0: left promiscuous mode
[  951.543111][T11840] bridge0: port 1(bridge_slave_0) entered disabled state
[  951.557853][T11840] bridge_slave_1: left allmulticast mode
[  951.656930][T11840] bridge_slave_1: left promiscuous mode
[  951.677501][T11840] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.704243][T11840] bond0: (slave bond_slave_0): Releasing backup interface
[  951.712438][T11840] bond_slave_0: left promiscuous mode
[  951.728365][T11840] bond0: (slave bond_slave_1): Releasing backup interface
[  951.738939][T11840] bond_slave_1: left promiscuous mode
[  951.780303][T11840] team0: Port device team_slave_0 removed
[  951.807121][T11840] team0: Port device team_slave_1 removed
[  951.822021][T11840] bond0: (slave wlan1): Releasing backup interface
[  951.837251][T11840] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  951.918030][T11841] netlink: 'syz.4.1331': attribute type 22 has an invalid length.
[  951.946600][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'.
[  952.273436][T11841] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  952.282542][T11841] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  952.291387][T11841] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  952.300297][T11841] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  952.396206][T11841] netlink: 'syz.4.1331': attribute type 22 has an invalid length.
[  952.672829][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'.
[  952.710918][T11857] wg1 speed is unknown, defaulting to 1000
[  952.779633][T11857] wg1 speed is unknown, defaulting to 1000
[  952.869263][T11864] netlink: 'syz.4.1337': attribute type 1 has an invalid length.
[  953.045092][ T9467] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  953.089024][T11857] wg1 speed is unknown, defaulting to 1000
[  953.110528][T11740] chnl_net:caif_netlink_parms(): no params data found
[  954.090112][T11857] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  954.102861][ T9467] usb 3-1: Using ep0 maxpacket: 8
[  954.162634][ T9467] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  954.175717][ T9467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.210059][ T9467] usb 3-1: Product: syz
[  954.512883][ T9467] usb 3-1: Manufacturer: syz
[  954.517584][ T9467] usb 3-1: SerialNumber: syz
[  954.525576][ T9467] usb 3-1: config 0 descriptor??
[  954.566785][T11857] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  954.590405][T11864] 8021q: adding VLAN 0 to HW filter on device bond1
[  954.640259][T11868] vlan2: entered allmulticast mode
[  954.657431][T11868] veth1: entered allmulticast mode
[  954.711410][T11868] bond1: (slave vlan2): making interface the new active one
[  954.739451][ T9467] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  954.749197][T11868] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  954.769027][ T5928] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  954.834427][T11876] vlan3: entered promiscuous mode
[  954.839602][T11876] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  954.847477][T11876] vlan3: entered allmulticast mode
[  954.852774][T11876] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  954.921279][T11857] wg1 speed is unknown, defaulting to 1000
[  955.224233][ T5928] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  955.240486][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.258844][ T5928] usb 5-1: config 0 descriptor??
[  956.106208][ T9467] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  956.553076][ T5928] usb 5-1: can't set config #0, error -71
[  956.573904][ T5928] usb 5-1: USB disconnect, device number 14
[  957.289012][T11857] wg1 speed is unknown, defaulting to 1000
[  957.528266][T11857] wg1 speed is unknown, defaulting to 1000
[  957.571617][T11740] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.579466][T11740] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.587231][T11740] bridge_slave_0: entered allmulticast mode
[  957.596511][T11740] bridge_slave_0: entered promiscuous mode
[  957.609472][T11857] wg1 speed is unknown, defaulting to 1000
[  957.614345][T11740] bridge0: port 2(bridge_slave_1) entered blocking state
[  957.622651][T11740] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.630371][T11740] bridge_slave_1: entered allmulticast mode
[  957.639306][T11740] bridge_slave_1: entered promiscuous mode
[  957.738629][T11857] wg1 speed is unknown, defaulting to 1000
[  957.746407][T11857] wg1 speed is unknown, defaulting to 1000
[  957.812285][ T7269] usb 3-1: USB disconnect, device number 16
[  958.000314][T11740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  958.052380][T11740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  959.888577][T11906] netlink: 'syz.4.1344': attribute type 1 has an invalid length.
[  960.970619][T11740] team0: Port device team_slave_0 added
[  961.199558][T11906] 8021q: adding VLAN 0 to HW filter on device bond2
[  961.393228][T11910] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  961.523402][ T7269] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  961.544975][T11740] team0: Port device team_slave_1 added
[  961.836264][ T7269] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  962.022748][ T7269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.089548][ T7269] usb 5-1: config 0 descriptor??
[  962.114341][ T7269] gspca_main: cpia1-2.14.0 probing 0813:0001
[  962.151400][T11740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  962.176329][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  962.261510][T11740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  962.460196][T11572] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  962.670892][T11740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  962.710515][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  962.739789][    C1] vkms_vblank_simulate: vblank timer overrun
[  963.018122][T11740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  963.046957][T11572] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  963.360533][ T6858] bridge_slave_1: left allmulticast mode
[  963.378880][ T6858] bridge_slave_1: left promiscuous mode
[  963.414411][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state
[  963.466558][ T6858] bridge_slave_0: left allmulticast mode
[  963.501404][ T6858] bridge_slave_0: left promiscuous mode
[  963.517786][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state
[  963.654023][ T7269] gspca_cpia1: usb_control_msg 03, error -110
[  963.778190][ T7269] gspca_cpia1: usb_control_msg 01, error -32
[  963.810335][ T7269] gspca_cpia1: usb_control_msg 01, error -32
[  963.830882][ T7269] gspca_cpia1: usb_control_msg 01, error -32
[  963.876438][ T7269] gspca_cpia1: usb_control_msg 01, error -32
[  963.919098][ T7269] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  964.471865][T11943] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1349'.
[  964.638639][ T6858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  964.658303][ T6858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  964.663299][ T9467] usb 5-1: USB disconnect, device number 15
[  964.678300][ T6858] bond0 (unregistering): Released all slaves
[  964.846783][T11572] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  965.028410][T11572] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  965.802913][T10171] Bluetooth: hci0: command 0x0405 tx timeout
[  966.903715][T11943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  967.322055][T11943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  967.480703][T11943] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  967.497393][T11943] bond0 (unregistering): Released all slaves
[  968.417855][ T6858] hsr_slave_0: left promiscuous mode
[  968.433971][ T6858] hsr_slave_1: left promiscuous mode
[  968.443498][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  968.493527][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  970.518984][T11978] overlayfs: failed to clone upperpath
[  970.864962][T10171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  970.933003][T11984] ubi31: detaching mtd0
[  971.476334][T10171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  971.491747][T10171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  971.507809][T11984] ubi31: mtd0 is detached
[  971.618070][T10171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  971.775849][T10171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  972.944394][   T30] audit: type=1326 audit(1753982565.513:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11989 comm="syz.2.1360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f343d58eb69 code=0x0
[  974.241205][ T5837] Bluetooth: hci1: command tx timeout
[  974.328055][T12008] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  974.747609][ T6858] team0 (unregistering): Port device team_slave_1 removed
[  974.822167][ T6858] team0 (unregistering): Port device team_slave_0 removed
[  975.122572][T11572] kthread_run failed with err -4
[  975.133586][T11740] hsr_slave_0: entered promiscuous mode
[  975.303459][T11740] hsr_slave_1: entered promiscuous mode
[  975.312017][T11740] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  975.319878][T11740] Cannot create hsr debugfs directory
[  976.868705][ T5837] Bluetooth: hci1: command tx timeout
[  978.474060][T12026] xt_hashlimit: size too large, truncated to 1048576
[  978.485729][T12026] syz.2.1366: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  978.503312][T12026] CPU: 1 UID: 0 PID: 12026 Comm: syz.2.1366 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  978.503334][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  978.503345][T12026] Call Trace:
[  978.503354][T12026]  <TASK>
[  978.503363][T12026]  dump_stack_lvl+0x189/0x250
[  978.503389][T12026]  ? __pfx_dump_stack_lvl+0x10/0x10
[  978.503408][T12026]  ? __pfx__printk+0x10/0x10
[  978.503440][T12026]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  978.503464][T12026]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  978.503489][T12026]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  978.503513][T12026]  warn_alloc+0x214/0x310
[  978.503542][T12026]  ? __pfx_warn_alloc+0x10/0x10
[  978.503568][T12026]  ? __get_vm_area_node+0x28f/0x300
[  978.503585][T12026]  ? htable_create+0xfc/0x7a0
[  978.503605][T12026]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  978.503647][T12026]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  978.503671][T12026]  ? rcu_is_watching+0x15/0xb0
[  978.503690][T12026]  ? htable_create+0xfc/0x7a0
[  978.503704][T12026]  ? htable_create+0xfc/0x7a0
[  978.503718][T12026]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  978.503735][T12026]  ? htable_create+0xfc/0x7a0
[  978.503749][T12026]  ? hashlimit_pernet+0x23/0x240
[  978.503770][T12026]  htable_create+0xfc/0x7a0
[  978.503791][T12026]  hashlimit_mt_check_common+0x719/0xa10
[  978.503815][T12026]  xt_check_match+0x3ce/0xab0
[  978.503840][T12026]  ? __pfx___mutex_lock+0x10/0x10
[  978.503861][T12026]  ? __pfx_xt_check_match+0x10/0x10
[  978.503893][T12026]  ? xt_find_target+0x4c/0x240
[  978.503919][T12026]  ? xt_find_match+0x1f7/0x250
[  978.503949][T12026]  translate_table+0x1553/0x2040
[  978.503990][T12026]  ? __pfx_translate_table+0x10/0x10
[  978.504015][T12026]  ? __might_fault+0xb0/0x130
[  978.504045][T12026]  ? _copy_from_user+0x94/0xb0
[  978.504071][T12026]  do_ip6t_set_ctl+0x970/0xce0
[  978.504098][T12026]  ? preempt_schedule_thunk+0x16/0x30
[  978.504124][T12026]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  978.504162][T12026]  ? __pfx___mutex_lock+0x10/0x10
[  978.504187][T12026]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  978.504205][T12026]  ? __schedule+0x16c8/0x4c90
[  978.504226][T12026]  ? __lock_acquire+0xab9/0xd20
[  978.504246][T12026]  nf_setsockopt+0x26c/0x290
[  978.504276][T12026]  rawv6_setsockopt+0x23b/0x5b0
[  978.504295][T12026]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  978.504312][T12026]  ? sock_common_setsockopt+0x36/0xc0
[  978.504332][T12026]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  978.504354][T12026]  do_sock_setsockopt+0x179/0x1b0
[  978.504382][T12026]  __x64_sys_setsockopt+0x13f/0x1b0
[  978.504417][T12026]  do_syscall_64+0xfa/0x3b0
[  978.504435][T12026]  ? lockdep_hardirqs_on+0x9c/0x150
[  978.504451][T12026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.504467][T12026]  ? clear_bhb_loop+0x60/0xb0
[  978.504486][T12026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.504503][T12026] RIP: 0033:0x7f343d58eb69
[  978.504519][T12026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  978.504533][T12026] RSP: 002b:00007f343af91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  978.504550][T12026] RAX: ffffffffffffffda RBX: 00007f343d7b6240 RCX: 00007f343d58eb69
[  978.504562][T12026] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006
[  978.504571][T12026] RBP: 00007f343d611df1 R08: 00000000000005c0 R09: 0000000000000000
[  978.504581][T12026] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  978.504591][T12026] R13: 0000000000000000 R14: 00007f343d7b6240 R15: 00007ffc2b881148
[  978.504615][T12026]  </TASK>
[  978.504633][T12026] Mem-Info:
[  978.863365][T12026] active_anon:5992 inactive_anon:7178 isolated_anon:0
[  978.863365][T12026]  active_file:18696 inactive_file:35531 isolated_file:0
[  978.863365][T12026]  unevictable:768 dirty:281 writeback:14
[  978.863365][T12026]  slab_reclaimable:11058 slab_unreclaimable:99857
[  978.863365][T12026]  mapped:35491 shmem:9995 pagetables:1034
[  978.863365][T12026]  sec_pagetables:0 bounce:0
[  978.863365][T12026]  kernel_misc_reclaimable:0
[  978.863365][T12026]  free:1296197 free_pcp:17559 free_cma:0
[  978.909278][T12026] Node 0 active_anon:23968kB inactive_anon:28712kB active_file:74488kB inactive_file:142124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141896kB dirty:1120kB writeback:56kB shmem:38444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11536kB pagetables:3984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  978.943395][T12026] Node 1 active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  978.975006][T12026] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  979.004014][T12026] lowmem_reserve[]: 0 2500 2502 2502 2502
[  979.009791][T12026] Node 0 DMA32 free:1262628kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23964kB inactive_anon:28668kB active_file:72736kB inactive_file:142056kB unevictable:1536kB writepending:1172kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:59976kB local_pcp:37564kB free_cma:0kB
[  979.042817][T12026] lowmem_reserve[]: 0 0 1 1 1
[  979.047619][T12026] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1752kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  979.079237][T12026] lowmem_reserve[]: 0 0 0 0 0
[  979.084656][T12026] Node 1 Normal free:3906780kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10244kB local_pcp:3620kB free_cma:0kB
[  979.116067][T12026] lowmem_reserve[]: 0 0 0 0 0
[  979.120831][T12026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  979.133638][T12026] Node 0 DMA32: 74*4kB (UM) 119*8kB (UME) 459*16kB (UM) 100*32kB (UME) 115*64kB (UME) 99*128kB (UME) 46*256kB (UME) 57*512kB (UM) 34*1024kB (UME) 6*2048kB (UME) 279*4096kB (UM) = 1262672kB
[  979.152403][T12026] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  979.164825][T12026] Node 1 Normal: 179*4kB (UME) 42*8kB (UME) 46*16kB (UME) 235*32kB (UME) 124*64kB (UME) 29*128kB (UME) 5*256kB (UME) 5*512kB (UM) 3*1024kB (ME) 2*2048kB (ME) 946*4096kB (M) = 3906780kB
[  979.183304][T12026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  979.193019][T12026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  979.202318][T12026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  979.213031][T12026] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  979.222357][T12026] 64219 total pagecache pages
[  979.227121][T12026] 0 pages in swap cache
[  979.231334][T12026] Free swap  = 124996kB
[  979.235589][T12026] Total swap = 124996kB
[  979.239759][T12026] 2097051 pages RAM
[  979.243796][T12026] 0 pages HighMem/MovableOnly
[  979.248522][T12026] 424695 pages reserved
[  979.252809][T12026] 0 pages cma reserved
[  979.364716][T10171] Bluetooth: hci1: command tx timeout
[  979.491083][T11982] wg1 speed is unknown, defaulting to 1000
[  980.792278][   T30] audit: type=1326 audit(1753982574.223:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12033 comm="syz.2.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f343d58eb69 code=0x0
[  981.319079][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'.
[  981.904263][T10171] Bluetooth: hci1: command tx timeout
[  985.666788][T12068] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  990.771589][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  990.784187][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  990.794759][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  990.812070][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  991.039846][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  993.423078][T11982] chnl_net:caif_netlink_parms(): no params data found
[  994.023163][T10171] Bluetooth: hci4: command tx timeout
[  994.789478][T12103] wg1 speed is unknown, defaulting to 1000
[  996.125206][T10171] Bluetooth: hci4: command tx timeout
[  996.753324][T11982] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.761846][T11982] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.883296][T11982] bridge_slave_0: entered allmulticast mode
[  996.905056][T11982] bridge_slave_0: entered promiscuous mode
[  996.994779][T10171] Bluetooth: hci2: unexpected event for opcode 0x2035
[  997.118357][T11982] bridge0: port 2(bridge_slave_1) entered blocking state
[  997.153034][T11982] bridge0: port 2(bridge_slave_1) entered disabled state
[  997.160498][T11982] bridge_slave_1: entered allmulticast mode
[  997.195195][T11982] bridge_slave_1: entered promiscuous mode
[  997.363402][T11982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  997.387849][ T6858] bridge_slave_1: left allmulticast mode
[  997.396032][T12162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  997.403020][T12162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  997.413134][ T6858] bridge_slave_1: left promiscuous mode
[  997.419471][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state
[  997.431027][T12162] vhci_hcd vhci_hcd.0: Device attached
[  997.464102][ T6858] bridge_slave_0: left allmulticast mode
[  997.471453][ T6858] bridge_slave_0: left promiscuous mode
[  997.603553][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.331664][T10171] Bluetooth: hci4: command tx timeout
[  998.337759][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  998.344277][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  998.491694][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'.
[  998.513226][ T9467] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  999.990308][ T6858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1000.095864][ T6858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1000.176132][ T6858] bond0 (unregistering): Released all slaves
[ 1000.364584][T10171] Bluetooth: hci4: command tx timeout
[ 1000.414893][T11982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1001.006940][T10171] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1001.018392][T10171] Bluetooth: hci2: Injecting HCI hardware error event
[ 1001.028305][ T5837] Bluetooth: hci2: hardware error 0x00
[ 1001.336253][T11982] team0: Port device team_slave_0 added
[ 1001.438793][T12195] siw: device registration error -23
[ 1002.168439][T12164] vhci_hcd: connection reset by peer
[ 1002.195186][T11330] vhci_hcd: stop threads
[ 1002.199570][T11330] vhci_hcd: release socket
[ 1002.251378][T11330] vhci_hcd: disconnect device
[ 1002.258581][ T6858] hsr_slave_0: left promiscuous mode
[ 1002.292130][T10171] Bluetooth: hci2: unexpected event for opcode 0x080c
[ 1002.292917][ T6858] hsr_slave_1: left promiscuous mode
[ 1002.318277][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1002.680535][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1002.823278][T12219] random: crng reseeded on system resumption
[ 1003.043346][T12225] trusted_key: syz.7.1428 sent an empty control message without MSG_MORE.
[ 1003.088264][ T5837] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1003.226905][ T6858] team0 (unregistering): Port device team_slave_1 removed
[ 1003.281902][ T6858] team0 (unregistering): Port device team_slave_0 removed
[ 1004.598484][T11982] team0: Port device team_slave_1 added
[ 1004.736632][T12231] netlink: 'syz.7.1430': attribute type 3 has an invalid length.
[ 1004.749339][T12231] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1430'.
[ 1004.764536][T11982] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1004.772427][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1004.801394][T11982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1004.901915][T11982] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1004.909108][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1004.939732][T11982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1005.053474][ T9467] vhci_hcd: vhci_device speed not set
[ 1005.898840][T11982] hsr_slave_0: entered promiscuous mode
[ 1005.915183][T11982] hsr_slave_1: entered promiscuous mode
[ 1005.922543][T11982] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1005.932238][T11982] Cannot create hsr debugfs directory
[ 1006.093627][T12103] chnl_net:caif_netlink_parms(): no params data found
[ 1006.260689][ T6858] bridge_slave_1: left allmulticast mode
[ 1006.272784][ T6858] bridge_slave_1: left promiscuous mode
[ 1006.286469][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.312714][ T6858] bridge_slave_0: left allmulticast mode
[ 1006.318739][ T6858] bridge_slave_0: left promiscuous mode
[ 1006.329002][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.492309][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'.
[ 1006.569022][ T6858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1006.597509][ T6858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1006.621320][ T6858] bond0 (unregistering): Released all slaves
[ 1006.765919][ T6858] hsr_slave_0: left promiscuous mode
[ 1006.784498][ T6858] hsr_slave_1: left promiscuous mode
[ 1006.791197][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1006.814079][ T6858] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1006.814119][   T30] audit: type=1326 audit(1753982600.243:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[ 1006.844946][   T30] audit: type=1326 audit(1753982600.243:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[ 1006.867493][   T30] audit: type=1326 audit(1753982600.253:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f426b38d4d0 code=0x7ffc0000
[ 1006.889930][   T30] audit: type=1326 audit(1753982600.253:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[ 1006.912917][   T30] audit: type=1326 audit(1753982600.253:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[ 1006.937190][   T30] audit: type=1326 audit(1753982600.253:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[ 1006.959959][   T30] audit: type=1326 audit(1753982600.253:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[ 1006.982480][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1006.990192][   T30] audit: type=1326 audit(1753982600.253:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12293 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426b38eb69 code=0x7ffc0000
[ 1007.012181][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1007.266221][ T6858] team0 (unregistering): Port device team_slave_1 removed
[ 1007.319252][ T6858] team0 (unregistering): Port device team_slave_0 removed
[ 1007.335041][T12303] xt_hashlimit: size too large, truncated to 1048576
[ 1007.750817][T12103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.764397][T12103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.793199][T12103] bridge_slave_0: entered allmulticast mode
[ 1007.816410][T12103] bridge_slave_0: entered promiscuous mode
[ 1007.913714][T12103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.921575][T12103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.956527][T12103] bridge_slave_1: entered allmulticast mode
[ 1007.969105][T12103] bridge_slave_1: entered promiscuous mode
[ 1008.110812][T12103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1008.200073][T12103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1008.283310][ T9467] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1008.322292][T12103] team0: Port device team_slave_0 added
[ 1008.334792][T12103] team0: Port device team_slave_1 added
[ 1008.666130][ T9467] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1008.687128][ T9467] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1008.700093][ T9467] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1008.712248][ T9467] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1009.516655][T12103] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1009.530005][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1009.672832][ T9467] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1009.694341][ T9467] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1009.707135][ T9467] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1009.715530][ T9467] usb 3-1: Product: syz
[ 1009.719739][ T9467] usb 3-1: Manufacturer: syz
[ 1010.213531][T12103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1010.250866][T12103] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1010.261304][ T9467] cdc_wdm 3-1:1.0: skipping garbage
[ 1010.262190][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1010.267257][ T9467] cdc_wdm 3-1:1.0: skipping garbage
[ 1010.297740][T12103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1010.301833][ T9467] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1010.315849][ T9467] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1010.555426][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.562378][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.568732][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.575391][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.581859][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.588519][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.595219][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.602071][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.608522][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.615183][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.621637][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.628304][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.634726][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.641370][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.647710][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.654361][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.660695][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.667369][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.673825][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1010.680477][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1010.702455][T12103] hsr_slave_0: entered promiscuous mode
[ 1010.708986][ T9467] usb 3-1: USB disconnect, device number 17
[ 1010.715266][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1010.760338][T12103] hsr_slave_1: entered promiscuous mode
[ 1010.776809][T12103] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1010.784599][T12341] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1468'.
[ 1010.795827][T12103] Cannot create hsr debugfs directory
[ 1012.149875][T11982] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1012.187439][T11982] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1012.210002][T11982] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1012.278242][T11982] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1012.510381][T12103] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1012.541591][T12103] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1012.560044][T12103] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1012.575423][T12103] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1012.785074][T11982] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1012.888112][T12103] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1012.964506][T12103] 8021q: adding VLAN 0 to HW filter on device team0
[ 1013.047811][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.055074][ T6858] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1013.069712][T11982] 8021q: adding VLAN 0 to HW filter on device team0
[ 1013.804488][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.811734][ T6856] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1013.902443][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.909772][ T6858] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1013.964192][T12404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1488'.
[ 1014.001545][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.008869][ T6858] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1014.218276][T12412] netlink: 'syz.2.1492': attribute type 4 has an invalid length.
[ 1014.545241][T12103] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1014.666061][T11982] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1014.788412][T12437] vlan3: entered promiscuous mode
[ 1014.800483][T12437] syz_tun: entered promiscuous mode
[ 1014.884793][T11982] veth0_vlan: entered promiscuous mode
[ 1014.895650][ T5928] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1014.929845][T11982] veth1_vlan: entered promiscuous mode
[ 1015.047071][T11982] veth0_macvtap: entered promiscuous mode
[ 1015.072770][ T5928] usb 3-1: Using ep0 maxpacket: 16
[ 1015.075416][T11982] veth1_macvtap: entered promiscuous mode
[ 1015.087515][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.118253][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.155171][ T5928] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[ 1015.167311][T11982] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1015.181953][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.212135][T11982] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1015.228014][ T5928] usb 3-1: config 0 descriptor??
[ 1015.238205][T11982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.251923][T11982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.267400][T11982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.288256][T11982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.564657][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1015.576865][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1015.650683][T12103] veth0_vlan: entered promiscuous mode
[ 1015.686427][T12103] veth1_vlan: entered promiscuous mode
[ 1015.700636][ T5928] apple 0003:05AC:024B.0004: unknown main item tag 0x6
[ 1015.708012][ T6855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1015.713579][ T5928] apple 0003:05AC:024B.0004: ignoring exceeding usage max
[ 1015.726691][ T5928] apple 0003:05AC:024B.0004: invalid report_size 16640
[ 1015.734495][ T5928] apple 0003:05AC:024B.0004: item 0 2 1 7 parsing failed
[ 1015.735808][ T6855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1015.743184][ T5928] apple 0003:05AC:024B.0004: parse failed
[ 1015.757164][ T5928] apple 0003:05AC:024B.0004: probe with driver apple failed with error -22
[ 1015.808747][T12103] veth0_macvtap: entered promiscuous mode
[ 1015.828805][T12103] veth1_macvtap: entered promiscuous mode
[ 1015.879171][T12103] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1015.951667][T12103] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1015.973503][ T9467] usb 3-1: USB disconnect, device number 18
[ 1015.993334][T12103] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1016.015941][T12103] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1016.026649][T12103] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1016.039783][T12103] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1017.072053][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1512'.
[ 1017.124564][T12472] netem: invalid attributes len -4
[ 1017.135051][T12472] netem: change failed
[ 1017.191762][ T6856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1017.232828][ T6856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1017.414248][T11332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1017.452743][T11332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1017.522612][T12483] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1512'.
[ 1019.422812][ T7266] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1019.513071][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1019.615901][ T7266] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1019.625072][ T7266] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.677797][ T7266] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1019.689400][ T7266] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1019.723941][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1019.956288][    T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1019.981142][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.844330][    T9] usb 1-1: Product: syz
[ 1020.848981][    T9] usb 1-1: Manufacturer: syz
[ 1020.858750][    T9] usb 1-1: SerialNumber: syz
[ 1020.977848][ T7266] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1021.050775][ T7266] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1021.070231][    T9] r8152-cfgselector 1-1: Unknown version 0x0000
[ 1021.092726][    T9] r8152-cfgselector 1-1: config 0 descriptor??
[ 1021.112789][ T7266] usb 3-1: Product: syz
[ 1021.142695][ T7266] usb 3-1: Manufacturer: syz
[ 1021.165831][ T7266] cdc_wdm 3-1:1.0: skipping garbage
[ 1021.181592][ T7266] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1021.484295][    T9] usb 3-1: USB disconnect, device number 19
[ 1021.618383][ T7269] r8152-cfgselector 1-1: USB disconnect, device number 2
[ 1022.123336][ T7269] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1022.350606][ T7269] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1022.436024][ T7269] usb 10-1: config 0 has no interface number 0
[ 1022.448788][ T7269] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1022.465529][ T7269] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1023.163498][ T7269] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1023.176864][ T7269] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 1023.186218][ T7269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.237449][ T7269] usb 10-1: config 0 descriptor??
[ 1023.681760][ T7269] hid (null): report_id 35660 is invalid
[ 1023.891903][ T7269] input: HID 28bd:0042 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.0005/input/input13
[ 1024.035253][ T7269] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1
[ 1024.115442][ T7269] usb 10-1: USB disconnect, device number 2
[ 1024.301021][T12566] fido_id[12566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[ 1025.242789][ T5954] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1025.408325][ T5954] usb 1-1: Using ep0 maxpacket: 8
[ 1025.594707][ T5954] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[ 1025.616596][ T5954] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.648380][ T5954] usb 1-1: config 135 has no interface number 0
[ 1025.670744][ T5954] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1025.713962][ T5954] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[ 1025.723640][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.731969][ T5954] usb 1-1: Product: syz
[ 1025.810731][ T5954] usb 1-1: Manufacturer: syz
[ 1025.815980][ T5954] usb 1-1: SerialNumber: syz
[ 1025.852735][ T5928] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1025.856182][ T5954] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[ 1025.879903][ T5954] usb 1-1: No valid video chain found.
[ 1026.018037][ T5928] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1026.031074][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.113625][ T5928] usb 3-1: Product: syz
[ 1026.118316][ T5928] usb 3-1: Manufacturer: syz
[ 1026.161474][ T5928] usb 3-1: SerialNumber: syz
[ 1026.170830][ T5928] usb 3-1: config 0 descriptor??
[ 1026.427820][ T5928] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 1026.488707][T12626] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1568'.
[ 1026.661033][ T5928] usb 3-1: USB disconnect, device number 20
[ 1027.624305][T12655] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1028.941029][T12660] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[ 1029.037854][ T7269] usb 1-1: USB disconnect, device number 3
[ 1029.224679][T12666] 
[ 1029.227097][T12666] ======================================================
[ 1029.234693][T12666] WARNING: possible circular locking dependency detected
[ 1029.241887][T12666] 6.16.0-syzkaller #0 Not tainted
[ 1029.247294][T12666] ------------------------------------------------------
[ 1029.256794][T12666] syz.0.1583/12666 is trying to acquire lock:
[ 1029.266759][T12666] ffffffff8f662a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x517/0x8d0
[ 1029.280255][T12666] 
[ 1029.280255][T12666] but task is already holding lock:
[ 1029.291045][T12666] ffff888034075b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0
[ 1029.303325][T12666] 
[ 1029.303325][T12666] which lock already depends on the new lock.
[ 1029.303325][T12666] 
[ 1029.317602][T12666] 
[ 1029.317602][T12666] the existing dependency chain (in reverse order) is:
[ 1029.328851][T12666] 
[ 1029.328851][T12666] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[ 1029.338382][T12666]        lock_acquire+0x120/0x360
[ 1029.343579][T12666]        _raw_spin_lock_bh+0x36/0x50
[ 1029.349002][T12666]        nr_rt_device_down+0x12a/0x720
[ 1029.355051][T12666]        nr_device_event+0x137/0x150
[ 1029.361682][T12666]        notifier_call_chain+0x1b3/0x3e0
[ 1029.367727][T12666]        __dev_notify_flags+0x18d/0x2e0
[ 1029.376119][T12666]        netif_change_flags+0xe8/0x1a0
[ 1029.385413][T12666]        dev_change_flags+0x130/0x260
[ 1029.392189][T12666]        dev_ioctl+0x7b4/0x1150
[ 1029.400394][T12666]        sock_do_ioctl+0x22c/0x300
[ 1029.406181][T12666]        sock_ioctl+0x576/0x790
[ 1029.411585][T12666]        __se_sys_ioctl+0xfc/0x170
[ 1029.417977][T12666]        do_syscall_64+0xfa/0x3b0
[ 1029.425217][T12666]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1029.433724][T12666] 
[ 1029.433724][T12666] -> #1 (nr_node_list_lock){+...}-{3:3}:
[ 1029.444249][T12666]        lock_acquire+0x120/0x360
[ 1029.451398][T12666]        _raw_spin_lock_bh+0x36/0x50
[ 1029.461546][T12666]        nr_rt_device_down+0xa9/0x720
[ 1029.468704][T12666]        nr_device_event+0x137/0x150
[ 1029.475255][T12666]        notifier_call_chain+0x1b3/0x3e0
[ 1029.482633][T12666]        __dev_notify_flags+0x18d/0x2e0
[ 1029.489048][T12666]        netif_change_flags+0xe8/0x1a0
[ 1029.494658][T12666]        dev_change_flags+0x130/0x260
[ 1029.502031][T12666]        dev_ioctl+0x7b4/0x1150
[ 1029.508569][T12666]        sock_do_ioctl+0x22c/0x300
[ 1029.514756][T12666]        sock_ioctl+0x576/0x790
[ 1029.520164][T12666]        __se_sys_ioctl+0xfc/0x170
[ 1029.526663][T12666]        do_syscall_64+0xfa/0x3b0
[ 1029.533226][T12666]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1029.540942][T12666] 
[ 1029.540942][T12666] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[ 1029.551453][T12666]        validate_chain+0xb9b/0x2140
[ 1029.557910][T12666]        __lock_acquire+0xab9/0xd20
[ 1029.564616][T12666]        lock_acquire+0x120/0x360
[ 1029.569800][T12666]        _raw_spin_lock_bh+0x36/0x50
[ 1029.577058][T12666]        nr_del_node+0x517/0x8d0
[ 1029.585413][T12666]        nr_rt_ioctl+0x989/0xd50
[ 1029.591455][T12666]        sock_do_ioctl+0xdc/0x300
[ 1029.597561][T12666]        sock_ioctl+0x576/0x790
[ 1029.604374][T12666]        __se_sys_ioctl+0xfc/0x170
[ 1029.610953][T12666]        do_syscall_64+0xfa/0x3b0
[ 1029.616838][T12666]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1029.626374][T12666] 
[ 1029.626374][T12666] other info that might help us debug this:
[ 1029.626374][T12666] 
[ 1029.640937][T12666] Chain exists of:
[ 1029.640937][T12666]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[ 1029.640937][T12666] 
[ 1029.658955][T12666]  Possible unsafe locking scenario:
[ 1029.658955][T12666] 
[ 1029.668324][T12666]        CPU0                    CPU1
[ 1029.673981][T12666]        ----                    ----
[ 1029.681223][T12666]   lock(&nr_node->node_lock);
[ 1029.687798][T12666]                                lock(nr_node_list_lock);
[ 1029.696815][T12666]                                lock(&nr_node->node_lock);
[ 1029.705407][T12666]   lock(nr_neigh_list_lock);
[ 1029.710852][T12666] 
[ 1029.710852][T12666]  *** DEADLOCK ***
[ 1029.710852][T12666] 
[ 1029.720082][T12666] 2 locks held by syz.0.1583/12666:
[ 1029.726594][T12666]  #0: ffffffff8f662a78 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0xfc/0x8d0
[ 1029.740039][T12666]  #1: ffff888034075b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0
[ 1029.754956][T12666] 
[ 1029.754956][T12666] stack backtrace:
[ 1029.762443][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.0.1583 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1029.762467][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1029.762479][T12666] Call Trace:
[ 1029.762489][T12666]  <TASK>
[ 1029.762499][T12666]  dump_stack_lvl+0x189/0x250
[ 1029.762526][T12666]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1029.762546][T12666]  ? __pfx__printk+0x10/0x10
[ 1029.762570][T12666]  ? print_lock_name+0xde/0x100
[ 1029.762593][T12666]  print_circular_bug+0x2ee/0x310
[ 1029.762618][T12666]  check_noncircular+0x134/0x160
[ 1029.762644][T12666]  validate_chain+0xb9b/0x2140
[ 1029.762678][T12666]  __lock_acquire+0xab9/0xd20
[ 1029.762699][T12666]  ? nr_del_node+0x517/0x8d0
[ 1029.762717][T12666]  lock_acquire+0x120/0x360
[ 1029.762733][T12666]  ? nr_del_node+0x517/0x8d0
[ 1029.762752][T12666]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1029.762775][T12666]  ? do_raw_spin_unlock+0x122/0x240
[ 1029.762798][T12666]  ? nr_neigh_get_dev+0xbd/0x140
[ 1029.762819][T12666]  ? nr_del_node+0x517/0x8d0
[ 1029.762838][T12666]  _raw_spin_lock_bh+0x36/0x50
[ 1029.762865][T12666]  ? nr_del_node+0x517/0x8d0
[ 1029.762884][T12666]  nr_del_node+0x517/0x8d0
[ 1029.762905][T12666]  nr_rt_ioctl+0x989/0xd50
[ 1029.762923][T12666]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1029.762953][T12666]  ? kasan_quarantine_put+0xdd/0x220
[ 1029.762980][T12666]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1029.763002][T12666]  ? cap_capable+0x11f/0x460
[ 1029.763019][T12666]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1029.763043][T12666]  ? capable+0x89/0xe0
[ 1029.763068][T12666]  ? nr_ioctl+0x1b1/0x3b0
[ 1029.763096][T12666]  sock_do_ioctl+0xdc/0x300
[ 1029.764170][T12666]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1029.764192][T12666]  ? __lock_acquire+0xab9/0xd20
[ 1029.764211][T12666]  ? __asan_memset+0x22/0x50
[ 1029.764236][T12666]  ? smack_file_ioctl+0x24a/0x340
[ 1029.764255][T12666]  sock_ioctl+0x576/0x790
[ 1029.764274][T12666]  ? __pfx_sock_ioctl+0x10/0x10
[ 1029.764293][T12666]  ? __fget_files+0x2a/0x420
[ 1029.764312][T12666]  ? __fget_files+0x3a0/0x420
[ 1029.764330][T12666]  ? __fget_files+0x2a/0x420
[ 1029.764351][T12666]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1029.764374][T12666]  ? __pfx_sock_ioctl+0x10/0x10
[ 1029.764392][T12666]  __se_sys_ioctl+0xfc/0x170
[ 1029.764419][T12666]  do_syscall_64+0xfa/0x3b0
[ 1029.764439][T12666]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1029.764457][T12666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1029.764506][T12666]  ? clear_bhb_loop+0x60/0xb0
[ 1029.764531][T12666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1029.764548][T12666] RIP: 0033:0x7ff593f8eb69
[ 1029.764566][T12666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1029.764581][T12666] RSP: 002b:00007ff594da5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1029.764601][T12666] RAX: ffffffffffffffda RBX: 00007ff5941b5fa0 RCX: 00007ff593f8eb69
[ 1029.764615][T12666] RDX: 0000200000000680 RSI: 000000000000890c RDI: 0000000000000005
[ 1029.764627][T12666] RBP: 00007ff594011df1 R08: 0000000000000000 R09: 0000000000000000
[ 1029.764642][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1029.764653][T12666] R13: 0000000000000000 R14: 00007ff5941b5fa0 R15: 00007ffd98e8a018
[ 1029.764672][T12666]  </TASK>
[ 1030.412775][ T7262] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[ 1030.574462][ T7262] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1030.583088][ T7262] usb 3-1: config 0 has no interface number 0
[ 1030.590984][ T7262] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1030.620777][ T7262] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1030.638693][ T7262] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1030.650344][ T7262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.667069][ T7262] usb 3-1: config 0 descriptor??
[ 1030.678638][T12669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1030.695301][ T7262] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1030.895130][ T7269] usb 3-1: USB disconnect, device number 21
[ 1030.895288][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19