last executing test programs:

8m54.422015805s ago: executing program 0 (id=168):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800)

8m53.400163638s ago: executing program 0 (id=176):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x10001, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

8m50.760901139s ago: executing program 0 (id=178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25010000"], 0x68}, 0x1, 0x0, 0x0, 0x20004800}, 0x44040)

8m50.113937913s ago: executing program 0 (id=180):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r3)

8m48.212162497s ago: executing program 0 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8010}, 0x8814)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
ptrace$ARCH_GET_CPUID(0x1e, r3, 0x0, 0x1011)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x4}, {0x1, 0x1}, {0x75, 0x6}, {0x7, 0x3}], "e56b41258b0ab45c"}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4800)

8m45.673516355s ago: executing program 0 (id=185):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)

8m30.133984419s ago: executing program 32 (id=185):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)

2m56.151531094s ago: executing program 4 (id=1186):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x19, 0x0, 0x0)

2m55.656149435s ago: executing program 4 (id=1188):
openat$dir(0xffffffffffffff9c, 0x0, 0x1c3e40, 0x0)
r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x3)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m53.616280772s ago: executing program 4 (id=1198):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, 0x0, 0x44810)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmmsg$inet6(r5, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xffff}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000040)={0xffffffffffffff01, 0x0}, 0x10)

2m52.586617095s ago: executing program 4 (id=1206):
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3e40, 0x0)
r0 = open$dir(0x0, 0x0, 0x3)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m52.495438377s ago: executing program 4 (id=1207):
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$cec(0x0, 0x0, 0x200)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x6020400)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x2000004)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)

2m50.388012805s ago: executing program 4 (id=1209):
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvfrom(r2, 0x0, 0x9400, 0x10132, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x45, 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})

2m35.26335708s ago: executing program 33 (id=1209):
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvfrom(r2, 0x0, 0x9400, 0x10132, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x45, 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})

10.687463867s ago: executing program 2 (id=1680):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)

10.430387292s ago: executing program 2 (id=1683):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r3, 0x402c542d, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

7.91206602s ago: executing program 5 (id=1684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0)

7.611123486s ago: executing program 5 (id=1687):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4054)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x6bb6c4a5b2d35093, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2}}}}}}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0)

5.980505063s ago: executing program 5 (id=1689):
creat(&(0x7f0000000140)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="0302"], 0xd, 0x1)

5.920256555s ago: executing program 1 (id=1691):
munmap$IORING_OFF_SQES(0x0, 0xc5059c)
socket$inet6(0xa, 0x2, 0x8)
mmap$IORING_OFF_SQ_RING(0x0, 0x600, 0x1000004, 0x40010, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x3, 0x84)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getpeername(r0, &(0x7f0000000540)=@ieee802154={0x24, @short}, &(0x7f00000005c0)=0x80)
read(r0, &(0x7f0000000100)=""/41, 0x29)
ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000180)={0x2, 0x0, [{0x303, 0x0, 0x96}, {0x2c, 0x0, 0x100000000}]})
r10 = accept4(r5, 0x0, 0x0, 0x0)
recvfrom(r10, 0x0, 0x0, 0x1a3, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

5.476082075s ago: executing program 1 (id=1692):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.28838709s ago: executing program 5 (id=1693):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x8, r0}, 0x38)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xd88f)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a00)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5], 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x1)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000173113900000000001600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[], 0x0, 0x1cc, &(0x7f00000002c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a04ff00000000950000000000000089870d319131e4e301132816a96e3a511034fd3677ed94dfae89058ba1dcbda287243aa9419808065310b62aec3b53c573a56ce320907517009dcf74dc24ed4af94e3a08284076ccb36cf7021ff92cd3b8769765737a0700000000000000383dcab37a51794af89966921951e2359778ffc42da2fb8bba5406b5909c3ad274c6884afea3345172e2456d99ea88064f134127b14dbc3389ab3171583edf9e510ba8ce2c3c2bc1db5d30b9333e5b0a7a55fe3e7b9e0ce0ed74a846fcb0463326cd8cc740d30696"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]})

4.081269417s ago: executing program 1 (id=1694):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3a, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fb}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x59}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_fd, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff5}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

3.834287373s ago: executing program 2 (id=1695):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0)

3.589217288s ago: executing program 5 (id=1696):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904"], 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)

3.480137261s ago: executing program 1 (id=1697):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x1000000010, 0x6, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x65da8918682a7942)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x11, 0x80000000, 0xb06c}, 0x0, 0x0)

3.474982171s ago: executing program 2 (id=1698):
syz_open_dev$loop(0x0, 0x8, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004180)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000000880)=""/229, 0xe5}], 0xa}, 0xb1fd}, {{&(0x7f0000000a40)=@nl=@unspec, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/183, 0xb7}, {&(0x7f0000000b80)=""/111, 0x6f}, {&(0x7f0000000c00)=""/87, 0x57}], 0x3, &(0x7f0000000cc0)=""/4, 0x4}, 0x6}, {{&(0x7f0000000d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004100)=""/69, 0x45}, 0x80000001}], 0x3, 0x40, &(0x7f0000004240)={0x77359400})
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10a480, &(0x7f0000000180), 0x4, 0x795, &(0x7f0000001740)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x3, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0)

2.530405512s ago: executing program 2 (id=1699):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4054)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x6bb6c4a5b2d35093, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2}}}}}}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0)

2.408716235s ago: executing program 1 (id=1701):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0)

2.401273245s ago: executing program 3 (id=1702):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bind$802154_raw(r0, &(0x7f0000002f00)={0x24, @none={0x0, 0x1}}, 0x14)

2.304104198s ago: executing program 1 (id=1703):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r3, 0x402c542d, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0))
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.284844718s ago: executing program 3 (id=1704):
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x6, &(0x7f000082a000/0x400000)=nil)

2.225648619s ago: executing program 3 (id=1705):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x11623bf9e926539c, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x1}]})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d030000000000000000130000070c000980080002"], 0x20}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x9, 0x2, 0x2db, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x7fffffff, 0x5, 0x8d], 0xeeee8000, 0x284e97})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40a783, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.228133882s ago: executing program 3 (id=1706):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0xffffffff}, @host, 0x0, 0x0, 0x5e, 0x100000000, 0x0, 0x1, 0xf783})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a310000000005000500020000000500040000000000ec85b3f0a22e9fc2af7a792eb2cfe77db625654a43cdf82b765c25bcb5ab235a163d133ffc1e333ffeaa7a557cdd5513745e1bfeaf674cf8f1fbf6109228894f0cc985af7666587fcb1f0a1776029ca0fe1eca9207000000000000009688165e459d5d89f7d9c5eb676d0a57a502cb024b07477d00"], 0x48}}, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x440, 0x0)
syz_emit_vhci(0x0, 0xd)
r8 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r8, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500018007000000100007800c00194000"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.163946064s ago: executing program 5 (id=1707):
syz_usb_connect(0x3, 0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="92010000055bed40020000000000000003010902380002000000060904c702010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1, 0x0, 0x0, 0xf000}, 0x840)

429.7925ms ago: executing program 2 (id=1708):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB], 0x64}}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000150a0102cf"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000100", 0x48, 0x2f, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, [0x9, 0x9]}, {}, {0x8, 0x88be, 0xfffffff9, {{0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2, {0xfffcfff8, 0xfffe}}}}}}}}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00k\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800)

349.607312ms ago: executing program 3 (id=1709):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=1710):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x80002, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xdd9ef000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts.
[   74.677034][ T5760] cgroup: Unknown subsys name 'net'
[   74.809253][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   76.579068][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.197821][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.222450][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.231582][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.242161][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.246162][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.258934][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.272055][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.280664][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.281867][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.287952][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.299028][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.303395][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.310313][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.322980][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   78.323974][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.337737][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.342534][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.371846][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.389428][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.397330][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.412169][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.420153][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.442162][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.452784][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.849734][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   78.905921][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   78.994701][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   79.043867][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   79.129056][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.136409][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.144311][ T5776] bridge_slave_0: entered allmulticast mode
[   79.151405][ T5776] bridge_slave_0: entered promiscuous mode
[   79.183067][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.190438][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.198012][ T5776] bridge_slave_1: entered allmulticast mode
[   79.204982][ T5776] bridge_slave_1: entered promiscuous mode
[   79.233092][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.240261][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.247735][ T5773] bridge_slave_0: entered allmulticast mode
[   79.254870][ T5773] bridge_slave_0: entered promiscuous mode
[   79.287436][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.294809][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.302414][ T5774] bridge_slave_0: entered allmulticast mode
[   79.309382][ T5774] bridge_slave_0: entered promiscuous mode
[   79.327216][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.334923][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.342593][ T5774] bridge_slave_1: entered allmulticast mode
[   79.350022][ T5774] bridge_slave_1: entered promiscuous mode
[   79.357211][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.364480][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.374388][ T5773] bridge_slave_1: entered allmulticast mode
[   79.381195][ T5773] bridge_slave_1: entered promiscuous mode
[   79.403027][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.415611][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.495879][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.508515][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.515871][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.523363][ T5775] bridge_slave_0: entered allmulticast mode
[   79.530168][ T5775] bridge_slave_0: entered promiscuous mode
[   79.548455][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.560049][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.579269][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.586604][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.594173][ T5775] bridge_slave_1: entered allmulticast mode
[   79.601709][ T5775] bridge_slave_1: entered promiscuous mode
[   79.611245][ T5776] team0: Port device team_slave_0 added
[   79.622527][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.655247][ T5776] team0: Port device team_slave_1 added
[   79.681123][ T5773] team0: Port device team_slave_0 added
[   79.692151][ T5773] team0: Port device team_slave_1 added
[   79.719953][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.750247][ T5774] team0: Port device team_slave_0 added
[   79.761284][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.781859][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.788847][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.817865][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.831257][ T5774] team0: Port device team_slave_1 added
[   79.856768][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.864431][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.890839][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.904009][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.910993][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.937096][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.949468][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.959888][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.986394][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.041313][ T5775] team0: Port device team_slave_0 added
[   80.060204][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.067309][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.093726][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.119461][ T5775] team0: Port device team_slave_1 added
[   80.135209][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.142638][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.168601][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.219864][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.227175][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.253693][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.282093][ T5776] hsr_slave_0: entered promiscuous mode
[   80.288395][ T5776] hsr_slave_1: entered promiscuous mode
[   80.315948][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.323217][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.349402][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.364322][ T5773] hsr_slave_0: entered promiscuous mode
[   80.371075][ T5773] hsr_slave_1: entered promiscuous mode
[   80.378335][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.386342][ T5773] Cannot create hsr debugfs directory
[   80.422608][ T5085] Bluetooth: hci3: command tx timeout
[   80.422630][ T5782] Bluetooth: hci1: command tx timeout
[   80.456322][ T5774] hsr_slave_0: entered promiscuous mode
[   80.462978][ T5774] hsr_slave_1: entered promiscuous mode
[   80.469071][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.477353][ T5774] Cannot create hsr debugfs directory
[   80.501683][ T5085] Bluetooth: hci0: command tx timeout
[   80.501703][ T5782] Bluetooth: hci2: command tx timeout
[   80.599247][ T5775] hsr_slave_0: entered promiscuous mode
[   80.605927][ T5775] hsr_slave_1: entered promiscuous mode
[   80.613251][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.620859][ T5775] Cannot create hsr debugfs directory
[   80.949396][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.963314][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.976379][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.990415][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.056010][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.074933][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.087022][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.103088][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.190305][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.205140][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.216314][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.227311][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.315262][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.328172][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.338628][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.366354][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.454177][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.538455][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   81.560237][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.567619][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.578847][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.586009][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.607940][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.632444][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.661434][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.701100][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   81.733961][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   81.751824][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.758989][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.784809][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.792053][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.808453][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   81.819345][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.826588][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.856531][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.863732][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.914880][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.922098][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.936861][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.944105][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.240994][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.394795][ T5773] veth0_vlan: entered promiscuous mode
[   82.446448][ T5773] veth1_vlan: entered promiscuous mode
[   82.515033][ T5085] Bluetooth: hci1: command tx timeout
[   82.515047][ T5782] Bluetooth: hci3: command tx timeout
[   82.548089][ T5773] veth0_macvtap: entered promiscuous mode
[   82.575796][ T5773] veth1_macvtap: entered promiscuous mode
[   82.582266][ T5085] Bluetooth: hci0: command tx timeout
[   82.593071][ T5085] Bluetooth: hci2: command tx timeout
[   82.637028][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.679282][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.701101][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.719362][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.729075][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.738347][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.748468][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.776089][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.808560][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.929764][ T5774] veth0_vlan: entered promiscuous mode
[   82.993589][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.007108][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.037688][ T5776] veth0_vlan: entered promiscuous mode
[   83.054276][ T5775] veth0_vlan: entered promiscuous mode
[   83.062784][ T5774] veth1_vlan: entered promiscuous mode
[   83.097480][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.100147][ T5776] veth1_vlan: entered promiscuous mode
[   83.116743][ T5775] veth1_vlan: entered promiscuous mode
[   83.118879][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.199981][ T5774] veth0_macvtap: entered promiscuous mode
[   83.248699][ T5775] veth0_macvtap: entered promiscuous mode
[   83.266663][ T5774] veth1_macvtap: entered promiscuous mode
[   83.285780][ T5775] veth1_macvtap: entered promiscuous mode
[   83.345635][ T5837] syz.3.4[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   83.357926][ T5776] veth0_macvtap: entered promiscuous mode
[   83.398766][ T5776] veth1_macvtap: entered promiscuous mode
[   83.426545][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.440284][ T5837] loop3: detected capacity change from 0 to 4096
[   83.442250][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.453384][ T5837] EXT4-fs: inline encryption not supported
[   83.473151][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.482463][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.494020][ T5837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   83.503461][ T5837] EXT4-fs (loop3): Test dummy encryption mode enabled
[   83.511363][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.524139][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.534822][ T5837] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   83.543641][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.551981][ T5837] System zones: 0-5
[   83.555235][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.579961][ T5837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.628407][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.653523][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.675796][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.723817][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.757008][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.768078][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.778760][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.794176][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.814695][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.826627][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.838684][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.849058][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.867667][ T5837] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   83.879378][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.891087][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.901264][   T28] audit: type=1800 audit(1784664844.150:2): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=15 res=0 errno=0
[   83.901323][ T5841] overlayfs: failed to resolve './bus': -2
[   83.921586][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.938705][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.949896][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.960564][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.973257][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.984421][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.994975][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.022257][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.031206][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.058682][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.085129][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.098720][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.110807][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.125081][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.140928][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.163137][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.180790][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.203762][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.217564][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.228124][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.243579][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.350623][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.368151][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.437623][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.450884][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.485924][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.506865][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.515547][   T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.577782][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.590334][ T5085] Bluetooth: hci1: command tx timeout
[   84.592135][ T5782] Bluetooth: hci3: command tx timeout
[   84.599875][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.609164][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.634935][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.658786][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.666825][ T5782] Bluetooth: hci2: command tx timeout
[   84.666860][ T5782] Bluetooth: hci0: command tx timeout
[   84.696773][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.731884][   T27] usb 4-1: Using ep0 maxpacket: 8
[   84.743803][   T27] usb 4-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5
[   84.759138][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.801870][   T27] usb 4-1: config 0 descriptor??
[   84.837463][   T27] uvcvideo 4-1:0.0: Found Unit with invalid ID 0
[   84.912787][ T5854] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.022206][   T27] usb 4-1: string descriptor 0 read error: -71
[   85.056839][   T27] usb 4-1: Found UVC 0.00 device <unnamed> (031b:0201)
[   85.060994][ T5860] loop2: detected capacity change from 0 to 512
[   85.067104][   T27] usb 4-1: No valid video chain found.
[   85.104189][   T27] usb 4-1: USB disconnect, device number 2
[   85.180620][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.348933][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.425701][ T5867] Illegal XDP return value 4294967294 on prog  (id 2) dev syz_tun, expect packet loss!
[   85.680058][ T5873] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   86.001964][ T5879] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10'.
[   86.663452][ T5085] Bluetooth: hci1: command tx timeout
[   86.669327][ T5085] Bluetooth: hci3: command tx timeout
[   86.742501][ T5782] Bluetooth: hci0: command tx timeout
[   86.743278][ T5085] Bluetooth: hci2: command tx timeout
[   87.077079][ T5888] capability: warning: `syz.0.14' uses deprecated v2 capabilities in a way that may be insecure
[   87.089319][ T5881] netlink: 'syz.1.12': attribute type 8 has an invalid length.
[   87.388787][ T5895] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.424804][ T5895] loop3: detected capacity change from 0 to 8
[   87.494751][ T5895] SQUASHFS error: zlib decompression failed, data probably corrupt
[   87.503131][ T5895] SQUASHFS error: Failed to read block 0x9b: -5
[   87.510374][ T5895] SQUASHFS error: Unable to read metadata cache entry [99]
[   87.517891][ T5895] SQUASHFS error: Unable to read inode 0x127
[   89.660562][   T28] audit: type=1804 audit(1784664849.910:3): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.18" name="/newroot/4/bus/bus" dev="overlay" ino=49 res=1 errno=0
[   91.501668][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   93.607923][ T5930] sched: RT throttling activated
[   93.921603][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.222184][ T5902] usb 4-1: Using ep0 maxpacket: 16
[   94.243375][  T172] cfg80211: failed to load regulatory.db
[   94.275626][ T5902] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   94.317991][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.391695][ T5902] usb 4-1: Product: syz
[   94.395945][ T5902] usb 4-1: Manufacturer: syz
[   94.400573][ T5902] usb 4-1: SerialNumber: syz
[   94.507627][ T5902] usb 4-1: can't set config #1, error -71
[   94.535372][ T5902] usb 4-1: USB disconnect, device number 3
[   94.856045][ T5950] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   95.369915][ T5954] loop3: detected capacity change from 0 to 2048
[   96.211845][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[   97.308489][ T3067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.342611][ T3067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.386887][ T3067] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   97.661956][ T5967] fido_id[5967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   97.984837][ T5978] loop0: detected capacity change from 0 to 256
[   98.002885][ T5978] exfat: Deprecated parameter 'namecase'
[   98.065677][ T5978] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[   98.086071][ T5982] loop1: detected capacity change from 0 to 1024
[   98.099215][ T5982] EXT4-fs: inline encryption not supported
[   98.128290][ T5982] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled
[   98.233900][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.476705][   T28] audit: type=1800 audit(1784664858.730:4): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="bus" dev="loop1" ino=18 res=0 errno=0
[   98.479491][ T5982] Invalid ELF header magic: != ELF
[   99.605692][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.686865][ T6003] loop3: detected capacity change from 0 to 256
[  100.725494][ T6003] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  101.285117][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[  101.731713][ T6028] loop1: detected capacity change from 0 to 8
[  101.974439][ T6028] SQUASHFS error: zlib decompression failed, data probably corrupt
[  101.982725][ T6028] SQUASHFS error: Failed to read block 0x9b: -5
[  101.989078][ T6028] SQUASHFS error: Unable to read metadata cache entry [99]
[  101.996422][ T6028] SQUASHFS error: Unable to read inode 0x127
[  102.366100][ T6030] loop3: detected capacity change from 0 to 512
[  102.429312][ T6030] EXT4-fs: inline encryption not supported
[  102.501388][ T6030] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.591088][ T6030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.702538][ T6030] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  102.719203][ T6030] EXT4-fs (loop3): 1 truncate cleaned up
[  102.728376][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.801471][ T6036] loop0: detected capacity change from 0 to 512
[  102.816996][ T6030] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5959: inode #15: comm syz.3.62: bad extra_isize 62 (inode size 256)
[  102.886510][ T6036] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.63: inode has both inline data and extents flags
[  102.909788][ T6030] EXT4-fs (loop3): Remounting filesystem read-only
[  102.919151][ T6036] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.63: couldn't read orphan inode 15 (err -117)
[  102.944474][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.028133][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.089671][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.219029][ T6045] loop0: detected capacity change from 0 to 512
[  103.238528][ T6045] EXT4-fs: Ignoring removed orlov option
[  103.273221][ T6045] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[  103.320415][ T6047] loop1: detected capacity change from 0 to 4096
[  103.375933][ T6049] loop3: detected capacity change from 0 to 256
[  103.385592][ T6047] EXT4-fs: inline encryption not supported
[  103.405958][ T6047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  103.417870][ T6049] exfat: Unknown parameter '[»8U϶0'
[  103.515922][ T6047] EXT4-fs (loop1): Test dummy encryption mode enabled
[  103.610415][ T6047] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[  103.622769][ T6047] System zones: 0-5
[  103.631011][ T6049] loop3: detected capacity change from 0 to 256
[  103.639313][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.834364][ T6049] FAT-fs (loop3): Directory bread(block 64) failed
[  103.866616][ T6049] FAT-fs (loop3): Directory bread(block 65) failed
[  103.874295][ T6049] FAT-fs (loop3): Directory bread(block 66) failed
[  103.880973][ T6049] FAT-fs (loop3): Directory bread(block 67) failed
[  103.906622][ T6049] FAT-fs (loop3): Directory bread(block 68) failed
[  103.935830][ T6049] FAT-fs (loop3): Directory bread(block 69) failed
[  103.961796][ T6049] FAT-fs (loop3): Directory bread(block 70) failed
[  103.970309][ T6047] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  103.984540][ T6049] FAT-fs (loop3): Directory bread(block 71) failed
[  103.991443][ T6049] FAT-fs (loop3): Directory bread(block 72) failed
[  104.011898][ T6047] File: /18/file2/file1 PID: 6047 Comm: syz.1.66
[  104.044752][ T6049] FAT-fs (loop3): Directory bread(block 73) failed
[  104.188617][ T6049] syz.3.67: attempt to access beyond end of device
[  104.188617][ T6049] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256
[  104.205993][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.237662][ T6049] syz.3.67: attempt to access beyond end of device
[  104.237662][ T6049] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256
[  104.450156][ T6062] loop0: detected capacity change from 0 to 128
[  104.525761][ T6062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.585265][ T6062] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  104.754568][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.989305][ T6102] tipc: Failed to remove unknown binding: 66,0,0/0:1473246941/1473246943
[  106.011627][ T6102] tipc: Failed to remove unknown binding: 66,0,0/0:1473246941/1473246942
[  106.039834][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'.
[  106.124213][ T5816] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.311670][ T5816] usb 4-1: Using ep0 maxpacket: 32
[  107.407614][ T5816] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[  107.432228][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.454439][ T5816] usb 4-1: config 0 descriptor??
[  107.509652][ T6095] loop1: detected capacity change from 0 to 40427
[  107.546823][ T6095] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  107.575365][ T6095] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  107.601863][ T6095] F2FS-fs (loop1): invalid crc value
[  107.924253][ T5816] wacom 0003:056A:0003.0002: Unknown device_type for 'HID 056a:0003'. Assuming pen.
[  107.954733][ T6095] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  107.967915][ T5816] wacom 0003:056A:0003.0002: hidraw0: USB HID vf0.00 Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0
[  107.980920][ T6095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  108.014789][ T5816] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.0002/input/input6
[  108.169698][ T5816] usb 4-1: USB disconnect, device number 4
[  108.918287][ T6135] loop1: detected capacity change from 0 to 512
[  108.994010][ T6135] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.89: missing EA_INODE flag
[  109.020511][ T6131] loop3: detected capacity change from 0 to 8192
[  109.028577][ T6131] =======================================================
[  109.028577][ T6131] WARNING: The mand mount option has been deprecated and
[  109.028577][ T6131]          and is ignored by this kernel. Remove the mand
[  109.028577][ T6131]          option from the mount to silence this warning.
[  109.028577][ T6131] =======================================================
[  109.037588][ T6135] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.89: error while reading EA inode 12 err=-117
[  109.119417][ T6135] EXT4-fs (loop1): 1 orphan inode deleted
[  109.169751][ T6135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.478852][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.551452][ T6151] IPv6: NLM_F_CREATE should be specified when creating new route
[  112.777220][ T6151] loop3: detected capacity change from 0 to 40427
[  113.039474][ T6151] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  113.046043][ T6151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  113.064824][ T6151] F2FS-fs (loop3): invalid crc value
[  113.228027][ T6151] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4)
[  115.305527][ T6168] loop3: detected capacity change from 0 to 256
[  115.450049][ T6168] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  115.470822][ T6162] syz.1.98: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  115.567293][ T6162] CPU: 1 PID: 6162 Comm: syz.1.98 Not tainted syzkaller #0
[  115.574582][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  115.584676][ T6162] Call Trace:
[  115.587986][ T6162]  <TASK>
[  115.590945][ T6162]  dump_stack_lvl+0x18c/0x250
[  115.595674][ T6162]  ? show_regs_print_info+0x20/0x20
[  115.600914][ T6162]  ? load_image+0x420/0x420
[  115.605461][ T6162]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  115.611917][ T6162]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  115.618462][ T6162]  warn_alloc+0x246/0x340
[  115.622857][ T6162]  ? zone_watermark_ok_safe+0x230/0x230
[  115.628461][ T6162]  ? _raw_spin_unlock+0x28/0x40
[  115.633356][ T6162]  ? xsk_init_queue+0xad/0x100
[  115.638168][ T6162]  __vmalloc_node_range+0x661/0x1320
[  115.643526][ T6162]  ? free_vm_area+0x50/0x50
[  115.648087][ T6162]  vmalloc_user+0x74/0x80
[  115.652455][ T6162]  ? xskq_create+0xbf/0x170
[  115.656993][ T6162]  xskq_create+0xbf/0x170
[  115.661374][ T6162]  xsk_init_queue+0xad/0x100
[  115.666011][ T6162]  xsk_setsockopt+0x4c9/0x750
[  115.670738][ T6162]  ? xsk_poll+0x670/0x670
[  115.675109][ T6162]  ? __fget_files+0x28/0x460
[  115.679737][ T6162]  ? aa_sock_opt_perm+0x74/0x100
[  115.684718][ T6162]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  115.690299][ T6162]  ? security_socket_setsockopt+0x7e/0xa0
[  115.696063][ T6162]  ? xsk_poll+0x670/0x670
[  115.700431][ T6162]  do_sock_setsockopt+0x175/0x1a0
[  115.705520][ T6162]  ? __fdget+0x180/0x210
[  115.709834][ T6162]  __x64_sys_setsockopt+0x182/0x200
[  115.715081][ T6162]  do_syscall_64+0x55/0xb0
[  115.719545][ T6162]  ? clear_bhb_loop+0x40/0x90
[  115.724264][ T6162]  ? clear_bhb_loop+0x40/0x90
[  115.728978][ T6162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.734928][ T6162] RIP: 0033:0x7f429539de99
[  115.739408][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.759049][ T6162] RSP: 002b:00007f4296196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  115.767510][ T6162] RAX: ffffffffffffffda RBX: 00007f4295625fa0 RCX: 00007f429539de99
[  115.775531][ T6162] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  115.783560][ T6162] RBP: 00007f4295433eaf R08: 0000000000000004 R09: 0000000000000000
[  115.791573][ T6162] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  115.799580][ T6162] R13: 00007f4295626038 R14: 00007f4295625fa0 R15: 00007ffe200b8738
[  115.807605][ T6162]  </TASK>
[  116.042456][ T6162] Mem-Info:
[  116.046094][ T6162] active_anon:5872 inactive_anon:0 isolated_anon:0
[  116.046094][ T6162]  active_file:10624 inactive_file:39989 isolated_file:0
[  116.046094][ T6162]  unevictable:768 dirty:31 writeback:0
[  116.046094][ T6162]  slab_reclaimable:10227 slab_unreclaimable:90749
[  116.046094][ T6162]  mapped:24457 shmem:1360 pagetables:582
[  116.046094][ T6162]  sec_pagetables:0 bounce:0
[  116.046094][ T6162]  kernel_misc_reclaimable:0
[  116.046094][ T6162]  free:1341421 free_pcp:14216 free_cma:0
[  116.135845][ T6175] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  116.145973][ T6175] overlayfs: missing 'lowerdir'
[  116.152285][ T6162] Node 0 active_anon:23588kB inactive_anon:0kB active_file:42496kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97828kB dirty:124kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no
[  116.236466][ T6162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  116.283163][ T6162] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.311423][ T6162] lowmem_reserve[]: 0 2521 2522 2522 2522
[  116.317541][ T6162] Node 0 DMA32 free:1461568kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25152kB inactive_anon:0kB active_file:42496kB inactive_file:158924kB unevictable:1536kB writepending:164kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:33812kB local_pcp:18012kB free_cma:0kB
[  116.370611][ T6162] lowmem_reserve[]: 0 0 0 0 0
[  116.376086][ T6162] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.411761][ T6162] lowmem_reserve[]: 0 0 0 0 0
[  116.416564][ T6162] Node 1 Normal free:3888276kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:9088kB free_cma:0kB
[  116.456552][ T6162] lowmem_reserve[]: 0 0 0 0 0
[  116.466886][ T6162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  116.493275][ T6162] Node 0 DMA32: 262*4kB (ME) 443*8kB (M) 445*16kB (UME) 211*32kB (ME) 244*64kB (ME) 9*128kB (ME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 6*2048kB (UM) 344*4096kB (M) = 1460896kB
[  116.512466][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[  116.537154][ T6162] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  116.571816][ T6162] Node 1 Normal: 241*4kB (UME) 50*8kB (UME) 44*16kB (UME) 42*32kB (UME) 17*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (UM) = 3888276kB
[  116.620911][ T6162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  116.632096][ T6162] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.641445][ T6162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  116.656617][ T6162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.666395][ T6162] 56872 total pagecache pages
[  116.671395][ T6162] 0 pages in swap cache
[  116.681078][ T6162] Free swap  = 124996kB
[  116.686172][ T6162] Total swap = 124996kB
[  116.690373][ T6162] 2097051 pages RAM
[  116.707180][ T6162] 0 pages HighMem/MovableOnly
[  116.718162][ T6162] 416953 pages reserved
[  116.723985][ T6162] 0 pages cma reserved
[  116.842136][ T6173] loop3: detected capacity change from 0 to 40427
[  116.878610][ T6173] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  116.888695][ T6173] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  116.923573][ T6173] F2FS-fs (loop3): Image doesn't support compression
[  116.931265][ T6173] F2FS-fs (loop3): Image doesn't support compression
[  117.067464][ T6173] F2FS-fs (loop3): invalid crc value
[  117.239304][   T28] audit: type=1804 audit(1784664877.490:5): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.107" name="bus" dev="ramfs" ino=9338 res=1 errno=0
[  118.831903][   T28] audit: type=1804 audit(1784664877.520:6): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.107" name="bus" dev="ramfs" ino=9338 res=1 errno=0
[  118.926077][ T6173] F2FS-fs (loop3): Start checkpoint disabled!
[  119.703723][ T6202] binder: 6197:6202 ioctl c0306201 200000000680 returned -14
[  127.060129][ T6266] loop3: detected capacity change from 0 to 256
[  127.093432][ T6266] exfat: Deprecated parameter 'namecase'
[  127.169563][ T6266] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x62ca6c44, utbl_chksum : 0xe619d30d)
[  129.492140][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  129.901690][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  130.061875][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.134'.
[  130.757345][ T6278] loop1: detected capacity change from 0 to 256
[  130.791842][ T3067] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  130.981629][ T3067] usb 4-1: Using ep0 maxpacket: 16
[  131.009565][ T3067] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  131.028393][ T3067] usb 4-1: config 0 has no interface number 0
[  131.041670][ T3067] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  131.059252][ T3067] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  131.085225][ T6280] loop1: detected capacity change from 0 to 512
[  131.099635][ T3067] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  131.119401][ T3067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.138947][ T3067] usb 4-1: Product: syz
[  131.143968][ T3067] usb 4-1: Manufacturer: syz
[  131.149662][ T3067] usb 4-1: SerialNumber: syz
[  131.178542][ T6280] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  131.194063][ T3067] usb 4-1: config 0 descriptor??
[  131.202026][ T6280] EXT4-fs (loop1): orphan cleanup on readonly fs
[  131.202365][ T6276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.223514][ T6276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.233688][ T6280] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated!
[  131.250999][ T6280] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  131.261398][ T6280] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.140: Failed to acquire dquot type 1
[  131.318346][ T6280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.140: bg 0: block 40: padding at end of block bitmap is not set
[  131.372164][ T6280] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  131.450426][ T6276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.458423][ T6276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.478849][ T6280] EXT4-fs (loop1): 1 truncate cleaned up
[  131.501441][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  131.701293][ T3067] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  132.473293][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.881533][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  132.961535][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  132.981536][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  133.031540][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  133.191522][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  133.221536][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  133.808021][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  133.825887][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  133.992924][ T3067] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  134.017934][ T3067] asix: probe of 4-1:0.34 failed with error -71
[  134.087665][ T3067] usb 4-1: USB disconnect, device number 5
[  135.177775][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.146'.
[  136.773148][   T28] audit: type=1326 audit(1784664897.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.150" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f881cb9de99 code=0x0
[  140.401862][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.156'.
[  143.072920][ T6352] overlayfs: failed to clone upperpath
[  144.091946][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'.
[  145.100597][ T6370] loop1: detected capacity change from 0 to 4096
[  145.118506][ T6370] EXT4-fs: inline encryption not supported
[  145.159327][ T6370] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  145.183781][ T6370] EXT4-fs (loop1): Test dummy encryption mode enabled
[  145.203867][ T6370] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (9000000)
[  148.082411][ T6398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.177'.
[  148.871765][ T6398] wireguard0: entered promiscuous mode
[  159.058110][ T6474] xt_hashlimit: size too large, truncated to 1048576
[  159.837170][ T6482] "syz.2.202" (6482) uses obsolete ecb(arc4) skcipher
[  166.046450][   T28] audit: type=1804 audit(1784664925.450:8): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.212" name="bus" dev="ramfs" ino=9009 res=1 errno=0
[  166.257482][   T28] audit: type=1804 audit(1784664925.460:9): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.212" name="bus" dev="ramfs" ino=9009 res=1 errno=0
[  166.690612][ T6519] "syz.2.213" (6519) uses obsolete ecb(arc4) skcipher
[  170.251898][ T6540] tipc: Started in network mode
[  170.256858][ T6540] tipc: Node identity 7f000001, cluster identity 4711
[  170.284770][ T6540] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  170.312617][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  170.322424][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  170.330594][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  170.348615][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  170.359292][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  170.368194][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.169553][ T6542] chnl_net:caif_netlink_parms(): no params data found
[  173.905647][ T5085] Bluetooth: hci4: command tx timeout
[  175.941552][ T5085] Bluetooth: hci4: command tx timeout
[  175.954233][ T6576] netlink: 'syz.1.228': attribute type 12 has an invalid length.
[  176.614162][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.631787][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.647510][ T6542] bridge_slave_0: entered allmulticast mode
[  176.670450][ T6542] bridge_slave_0: entered promiscuous mode
[  176.784853][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.847221][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.863180][ T6542] bridge_slave_1: entered allmulticast mode
[  176.897373][ T6542] bridge_slave_1: entered promiscuous mode
[  177.963014][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.977509][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.017359][ T6542] team0: Port device team_slave_0 added
[  178.023953][ T5085] Bluetooth: hci4: command tx timeout
[  178.067914][ T6542] team0: Port device team_slave_1 added
[  178.256800][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.266514][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.294237][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.308531][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.315708][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.342948][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.200674][ T6542] hsr_slave_0: entered promiscuous mode
[  179.216751][ T6542] hsr_slave_1: entered promiscuous mode
[  179.228103][ T6542] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.238587][ T6542] Cannot create hsr debugfs directory
[  179.244994][ T6598] xt_hashlimit: size too large, truncated to 1048576
[  180.111592][ T5085] Bluetooth: hci4: command tx timeout
[  180.734809][ T6542] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  180.781419][ T6542] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  180.816504][ T6542] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  180.841991][ T6542] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  181.092218][ T6617] 
: renamed from bond_slave_0 (while UP)
[  181.893347][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.956513][ T6542] 8021q: adding VLAN 0 to HW filter on device team0
[  182.006841][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.014091][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.078383][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.085623][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.334059][ T6542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.857208][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.027030][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.211079][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.261438][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.455984][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.812403][ T6660] warning: `syz.2.244' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  187.978858][ T6542] veth0_vlan: entered promiscuous mode
[  188.414480][ T6685] "syz.2.251" (6685) uses obsolete ecb(arc4) skcipher
[  190.035988][ T6542] veth1_vlan: entered promiscuous mode
[  190.376842][ T6542] veth0_macvtap: entered promiscuous mode
[  190.623462][ T6542] veth1_macvtap: entered promiscuous mode
[  191.339495][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.393915][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.428469][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.439497][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.460891][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.487310][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.507812][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.541508][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.573499][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.774721][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.809230][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.840145][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.874351][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.884631][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.904298][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.118320][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.279818][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.583273][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.914654][ T6542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.940895][ T6542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.970328][ T6542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.998680][ T6542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.548776][   T11] hsr_slave_0: left promiscuous mode
[  193.579382][   T11] hsr_slave_1: left promiscuous mode
[  193.631634][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.639175][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.891651][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.899230][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.022274][ T6724] "syz.2.259" (6724) uses obsolete ecb(arc4) skcipher
[  194.671877][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.678289][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.709106][   T11] bridge_slave_1: left allmulticast mode
[  194.733353][   T11] bridge_slave_1: left promiscuous mode
[  194.748169][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.785454][   T11] bridge_slave_0: left allmulticast mode
[  194.791194][   T11] bridge_slave_0: left promiscuous mode
[  195.019809][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.534701][   T11] veth1_macvtap: left promiscuous mode
[  195.717679][   T11] veth0_macvtap: left promiscuous mode
[  195.745973][   T11] veth1_vlan: left promiscuous mode
[  195.772303][   T11] veth0_vlan: left promiscuous mode
[  199.247521][ T6761] "syz.2.268" (6761) uses obsolete ecb(arc4) skcipher
[  200.124070][   T11] team0 (unregistering): Port device team_slave_1 removed
[  200.222036][   T11] team0 (unregistering): Port device team_slave_0 removed
[  200.285131][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.341252][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.909055][   T11] bond0 (unregistering): Released all slaves
[  201.946678][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  201.952884][ T5790] Bluetooth: hci1: command 0x0406 tx timeout
[  201.959005][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  202.256004][ T6316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.317694][ T6316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.916394][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.960641][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.440237][ T6794] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  207.551973][ T6844] loop4: detected capacity change from 0 to 1024
[  207.843849][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  207.856789][ T6844] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.317755][ T6849] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  209.428461][ T6849] EXT4-fs (loop4): Remounting filesystem read-only
[  209.448654][ T6542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  210.192896][ T6892] overlayfs: conflicting options: userxattr,redirect_dir=on
[  212.040162][ T6912] loop4: detected capacity change from 0 to 512
[  212.082774][ T6912] EXT4-fs: Ignoring removed nobh option
[  212.169792][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.281749][ T6912] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  212.737031][ T6928] netlink: 580 bytes leftover after parsing attributes in process `syz.2.316'.
[  212.775844][ T6542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.576244][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.585650][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.959306][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.011272][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.379856][ T6935] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.389237][ T6935] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.398493][ T6935] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.408506][ T6935] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.751132][ T6956] mmap: syz.4.324 (6956) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  215.796955][   T28] audit: type=1804 audit(1784664976.050:10): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.324" name="bus" dev="ramfs" ino=11019 res=1 errno=0
[  215.852411][   T28] audit: type=1804 audit(1784664976.110:11): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.324" name="bus" dev="ramfs" ino=11019 res=1 errno=0
[  218.472186][ T6961] overlayfs: failed to clone upperpath
[  225.725395][ T7077] xt_hashlimit: size too large, truncated to 1048576
[  225.842190][ T7089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  225.895095][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.078916][ T7089] bridge_slave_0 (unregistering): left allmulticast mode
[  226.098492][ T7089] bridge_slave_0 (unregistering): left promiscuous mode
[  226.122399][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.637270][ T7131] xt_hashlimit: max too large, truncated to 1048576
[  229.659445][ T7131] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  230.209276][ T7147] loop4: detected capacity change from 0 to 256
[  230.763133][ T7147] exFAT-fs (loop4): bogus data start sector
[  230.999511][ T7147] exFAT-fs (loop4): failed to read boot sector
[  231.098026][ T7147] exFAT-fs (loop4): failed to recognize exfat type
[  233.309251][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'.
[  234.960269][ T7221] loop4: detected capacity change from 0 to 256
[  235.326087][ T7228] loop4: detected capacity change from 0 to 256
[  239.005972][   T28] audit: type=1804 audit(1784664999.260:12): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.407" name="bus" dev="ramfs" ino=11751 res=1 errno=0
[  239.075911][   T28] audit: type=1804 audit(1784664999.330:13): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.407" name="bus" dev="ramfs" ino=11751 res=1 errno=0
[  239.793937][ T7300] Zero length message leads to an empty skb
[  240.199342][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  256.107812][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  256.116683][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  262.582625][ T7523] netlink: 'syz.4.469': attribute type 9 has an invalid length.
[  262.590356][ T7523] netlink: 'syz.4.469': attribute type 7 has an invalid length.
[  262.598161][ T7523] netlink: 'syz.4.469': attribute type 8 has an invalid length.
[  272.519258][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'.
[  272.543111][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.915172][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.900775][ T7641] xt_hashlimit: size too large, truncated to 1048576
[  286.371714][ T7678] veth1_to_bond: entered allmulticast mode
[  286.386065][ T7678] veth1_to_bond: left allmulticast mode
[  287.578721][ T7692] netlink: 592 bytes leftover after parsing attributes in process `syz.1.521'.
[  293.304959][ T7733] 9pnet_fd: Insufficient options for proto=fd
[  293.528207][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'.
[  293.668386][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'.
[  293.881937][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'.
[  295.138647][ T5785] Bluetooth: hci4: command 0x0406 tx timeout
[  300.931370][ T7796] overlayfs: failed to clone upperpath
[  301.169591][ T7802] netlink: 104 bytes leftover after parsing attributes in process `syz.1.561'.
[  303.543709][ T7838] 
: renamed from bond_slave_0 (while UP)
[  315.869597][ T7913] netem: change failed
[  317.562449][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.568889][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  318.786583][   T28] audit: type=1804 audit(1784665078.190:14): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.607" name="bus" dev="ramfs" ino=13217 res=1 errno=0
[  318.852731][   T28] audit: type=1804 audit(1784665078.190:15): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.607" name="bus" dev="ramfs" ino=13217 res=1 errno=0
[  319.413625][ T7963] netem: change failed
[  321.142581][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  322.931503][   T28] audit: type=1804 audit(1784665081.610:16): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.618" name="bus" dev="ramfs" ino=12267 res=1 errno=0
[  324.957949][   T28] audit: type=1804 audit(1784665081.610:17): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.618" name="bus" dev="ramfs" ino=12267 res=1 errno=0
[  325.856680][ T8004] netem: change failed
[  326.179866][ T8010] IPv6: NLM_F_CREATE should be specified when creating new route
[  331.802295][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'.
[  331.849862][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'.
[  331.895499][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'.
[  331.940762][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'.
[  334.293849][ T8066] netem: change failed
[  335.923800][   T28] audit: type=1804 audit(1784665095.950:18): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.649" name="bus" dev="ramfs" ino=13375 res=1 errno=0
[  337.932003][   T28] audit: type=1804 audit(1784665095.950:19): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.649" name="bus" dev="ramfs" ino=13375 res=1 errno=0
[  340.022681][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.656'.
[  340.035052][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.656'.
[  341.573366][   T28] audit: type=1804 audit(1784665101.130:20): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.661" name="bus" dev="ramfs" ino=14466 res=1 errno=0
[  341.612373][   T28] audit: type=1804 audit(1784665101.130:21): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.661" name="bus" dev="ramfs" ino=14466 res=1 errno=0
[  342.324045][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'.
[  344.151350][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'.
[  346.094885][ T8163] netlink: 'syz.1.678': attribute type 29 has an invalid length.
[  346.107824][ T8163] netlink: 'syz.1.678': attribute type 29 has an invalid length.
[  346.120434][ T8163] netlink: 'syz.1.678': attribute type 29 has an invalid length.
[  346.132164][ T8163] netlink: 'syz.1.678': attribute type 29 has an invalid length.
[  346.141684][ T8165] netlink: 'syz.4.681': attribute type 2 has an invalid length.
[  347.213388][   T28] audit: type=1804 audit(1784665106.600:22): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.680" name="bus" dev="ramfs" ino=14542 res=1 errno=0
[  347.352413][   T28] audit: type=1804 audit(1784665106.600:23): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.680" name="bus" dev="ramfs" ino=14542 res=1 errno=0
[  350.610369][ T8208] netlink: 120 bytes leftover after parsing attributes in process `syz.3.700'.
[  357.049029][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[  360.641969][ T8332] UBIFS error (pid: 8332): cannot open "/dev/sequencer", error -22
[  360.830320][ T8340] vlan2: entered allmulticast mode
[  360.843800][ T8340] bond0: entered allmulticast mode
[  360.848956][ T8340] 
: entered allmulticast mode
[  360.854591][ T8340] bond_slave_1: entered allmulticast mode
[  360.862267][ T8340] bridge0: port 3(vlan2) entered blocking state
[  360.868692][ T8340] bridge0: port 3(vlan2) entered disabled state
[  360.881771][ T8340] vlan2: entered promiscuous mode
[  360.886971][ T8340] bond0: entered promiscuous mode
[  360.892601][ T8340] 
: entered promiscuous mode
[  360.898920][ T8340] bond_slave_1: entered promiscuous mode
[  360.915215][ T8340] bridge0: port 3(vlan2) entered blocking state
[  360.921720][ T8340] bridge0: port 3(vlan2) entered forwarding state
[  360.937878][ T8344] bridge_slave_0: left allmulticast mode
[  360.943930][ T8344] bridge_slave_0: left promiscuous mode
[  360.949971][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.959964][ T8344] bridge_slave_1: left allmulticast mode
[  360.968116][ T8344] bridge_slave_1: left promiscuous mode
[  360.993352][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.390489][ T8344] bond0: (slave 
3
0
): Releasing backup interface
[  361.459541][ T8344] 
: left promiscuous mode
[  361.493699][ T8344] 
: left allmulticast mode
[  361.771835][ T8344] bond0: (slave bond_slave_1): Releasing backup interface
[  361.790393][ T8344] bond_slave_1: left promiscuous mode
[  361.796856][ T8344] bond_slave_1: left allmulticast mode
[  361.826873][ T8344] team0: Port device team_slave_0 removed
[  361.854537][ T8344] team0: Port device team_slave_1 removed
[  361.860893][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.869087][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.878807][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.886788][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.903154][ T8344] vlan2: left promiscuous mode
[  361.907992][ T8344] bond0: left promiscuous mode
[  361.913726][ T8344] bridge0: port 3(vlan2) entered disabled state
[  362.395576][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'.
[  366.699763][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.791'.
[  367.402120][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.791'.
[  370.403187][ T8480] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.799'.
[  372.296265][ T5785] Bluetooth: hci4: Malformed Event: 0x02
[  372.375474][ T8517] overlayfs: failed to clone upperpath
[  373.941018][   T28] audit: type=1804 audit(1784665133.440:24): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.821" name="bus" dev="ramfs" ino=13855 res=1 errno=0
[  374.718931][   T28] audit: type=1804 audit(1784665133.930:25): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.821" name="bus" dev="ramfs" ino=13855 res=1 errno=0
[  379.694409][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  379.700845][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.811820][   T28] audit: type=1804 audit(1784665137.940:26): pid=8566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.831" name="bus" dev="ramfs" ino=13910 res=1 errno=0
[  379.975764][   T28] audit: type=1804 audit(1784665139.460:27): pid=8566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.831" name="bus" dev="ramfs" ino=13910 res=1 errno=0
[  381.718903][ T5815] IPVS: starting estimator thread 0...
[  382.351904][ T8593] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  382.763424][ T8594] IPVS: using max 16 ests per chain, 38400 per kthread
[  384.936545][   T28] audit: type=1804 audit(1784665144.350:28): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.843" name="bus" dev="ramfs" ino=15186 res=1 errno=0
[  385.241001][   T28] audit: type=1804 audit(1784665144.350:29): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.843" name="bus" dev="ramfs" ino=15186 res=1 errno=0
[  386.960392][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'.
[  388.939049][   T28] audit: type=1804 audit(1784665148.700:30): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.853" name="bus" dev="ramfs" ino=13970 res=1 errno=0
[  392.055072][   T28] audit: type=1804 audit(1784665148.700:31): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.853" name="bus" dev="ramfs" ino=13970 res=1 errno=0
[  392.303615][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'.
[  392.437345][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'.
[  392.798292][ T8664] syz.3.850 uses obsolete (PF_INET,SOCK_PACKET)
[  393.632691][ T8664] netlink: 'syz.3.850': attribute type 10 has an invalid length.
[  393.640510][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.850'.
[  393.718137][ T8664] team0: Port device geneve0 added
[  393.760562][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'.
[  393.826314][ T8666] block device autoloading is deprecated and will be removed.
[  393.868064][ T8671] capability: warning: `syz.2.864' uses 32-bit capabilities (legacy support in use)
[  394.004953][ T8676] tipc: Started in network mode
[  394.010041][ T8676] tipc: Node identity 4, cluster identity 4711
[  394.016356][ T8676] tipc: Node number set to 4
[  395.929908][   T28] audit: type=1804 audit(1784665155.290:32): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.865" name="bus" dev="ramfs" ino=14029 res=1 errno=0
[  400.992597][   T28] audit: type=1804 audit(1784665155.290:33): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.865" name="bus" dev="ramfs" ino=14029 res=1 errno=0
[  401.452636][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'.
[  402.848842][ T8700] vlan2: entered allmulticast mode
[  402.857035][ T8700] bond0: entered allmulticast mode
[  402.866758][ T8700] bond_slave_0: entered allmulticast mode
[  402.877672][ T8700] bond_slave_1: entered allmulticast mode
[  402.975768][ T8700] bridge0: port 3(vlan2) entered blocking state
[  403.024385][ T8700] bridge0: port 3(vlan2) entered disabled state
[  403.069705][ T8700] vlan2: entered promiscuous mode
[  403.093152][ T8700] bond0: entered promiscuous mode
[  403.117819][ T8700] bond_slave_0: entered promiscuous mode
[  403.136938][ T8700] bond_slave_1: entered promiscuous mode
[  403.429684][ T8700] bridge0: port 3(vlan2) entered blocking state
[  403.436240][ T8700] bridge0: port 3(vlan2) entered forwarding state
[  413.194010][ T8769] syz.2.889 (8769) used greatest stack depth: 17896 bytes left
[  414.072167][ T8781] overlayfs: missing 'lowerdir'
[  415.031733][ T8794] blktrace: Concurrent blktraces are not allowed on loop8
[  415.753723][ T8804] overlayfs: failed to clone upperpath
[  415.878856][ T8809] tipc: Started in network mode
[  415.883889][ T8809] tipc: Node identity 4, cluster identity 4711
[  415.890079][ T8809] tipc: Node number set to 4
[  416.083222][ T5785] Bluetooth: hci1: Malformed Event: 0x02
[  419.540204][ T8833] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[  419.816216][ T8838] bond1: (slave gretap1): making interface the new active one
[  419.826346][ T8838] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  422.992621][ T8865] blktrace: Concurrent blktraces are not allowed on loop8
[  425.328060][ T8888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.507064][ T8896] overlayfs: failed to resolve './file2': -2
[  426.564447][ T8894] netlink: 'syz.3.932': attribute type 39 has an invalid length.
[  426.686401][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  429.307277][ T8923] blktrace: Concurrent blktraces are not allowed on loop6
[  434.002984][ T8967] tipc: Started in network mode
[  434.008023][ T8967] tipc: Node identity 4, cluster identity 4711
[  434.014366][ T8967] tipc: Node number set to 4
[  437.797954][ T9003] blktrace: Concurrent blktraces are not allowed on loop8
[  438.971025][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'.
[  440.430896][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.437551][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  442.573810][ T5785] Bluetooth: hci1: Malformed Event: 0x02
[  442.643267][   T28] audit: type=1804 audit(1784665202.900:34): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.976" name="bus" dev="ramfs" ino=15880 res=1 errno=0
[  443.951487][   T28] audit: type=1804 audit(1784665202.920:35): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.976" name="bus" dev="ramfs" ino=15880 res=1 errno=0
[  445.071708][ T9048] netlink: 44 bytes leftover after parsing attributes in process `syz.1.979'.
[  445.102296][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'.
[  446.128431][ T5785] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3
[  446.136918][ T5785] Bluetooth: hci2: unexpected event for opcode 0x204b
[  447.001789][ T5785] Bluetooth: hci1: Malformed Event: 0x02
[  448.113961][ T9078] netlink: 44 bytes leftover after parsing attributes in process `syz.3.989'.
[  448.147370][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'.
[  448.296745][ T5785] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3
[  448.304140][ T5785] Bluetooth: hci2: unexpected event for opcode 0x204b
[  449.812015][ T9116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1004'.
[  449.829829][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[  451.121551][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'.
[  451.147423][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'.
[  451.165379][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'.
[  451.269381][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'.
[  451.309709][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'.
[  451.888572][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'.
[  451.898657][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'.
[  451.910856][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'.
[  453.159146][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'.
[  453.194878][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'.
[  456.223872][ T9227] __nla_validate_parse: 2 callbacks suppressed
[  456.223923][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'.
[  456.295338][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'.
[  456.337537][ T9231] UBIFS error (pid: 9231): cannot open "/dev/sequencer", error -22
[  456.338248][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'.
[  456.731861][ T5785] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3
[  456.738871][ T5785] Bluetooth: hci2: unexpected event for opcode 0x204b
[  459.095849][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[  459.121933][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[  462.184642][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'.
[  462.222138][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'.
[  464.897776][ T9321] (null): rxe_set_mtu: Set mtu to 4096
[  464.906565][ T9321] lo speed is unknown, defaulting to 1000
[  464.916490][ T9321] lo speed is unknown, defaulting to 1000
[  464.925738][ T9321] lo speed is unknown, defaulting to 1000
[  465.133513][ T9321] infiniband syz2: set active
[  465.138653][ T9321] infiniband syz2: added lo
[  466.050615][ T5852] lo speed is unknown, defaulting to 1000
[  466.055416][ T9321] RDS/IB: syz2: added
[  466.061754][ T9321] smc: adding ib device syz2 with port count 1
[  466.068226][ T9321] smc:    ib device syz2 port 1 has pnetid 
[  466.092762][ T9321] lo speed is unknown, defaulting to 1000
[  466.177016][    T8] lo speed is unknown, defaulting to 1000
[  466.232071][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'.
[  466.346935][ T9321] lo speed is unknown, defaulting to 1000
[  466.527811][ T9321] lo speed is unknown, defaulting to 1000
[  466.707037][ T9321] lo speed is unknown, defaulting to 1000
[  469.057947][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'.
[  470.710972][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'.
[  474.128161][ T9372] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  474.135386][ T9372] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  476.330824][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'.
[  476.341859][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'.
[  479.360181][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'.
[  485.029933][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'.
[  485.342491][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'.
[  486.935588][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'.
[  489.142601][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'.
[  489.343291][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'.
[  495.136630][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'.
[  495.461782][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'.
[  498.836947][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'.
[  498.913446][ T9572] overlayfs: failed to clone upperpath
[  499.230626][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'.
[  500.278918][ T9582] overlayfs: failed to clone upperpath
[  500.413469][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'.
[  500.720876][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'.
[  500.905419][ T9601] overlayfs: failed to resolve './file0': -2
[  501.152564][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'.
[  501.916255][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  501.923171][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  503.614596][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'.
[  505.510753][ T5785] Bluetooth: hci1: unexpected cc 0x204b length: 9 > 3
[  505.522335][ T5785] Bluetooth: hci1: unexpected event for opcode 0x204b
[  506.243499][ T9664] syz_tun: entered allmulticast mode
[  506.251079][ T9663] syz_tun: left allmulticast mode
[  507.141876][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'.
[  509.936896][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'.
[  509.959737][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'.
[  510.107938][ T9706] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  510.117906][ T9706] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  510.126837][ T9706] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  510.135646][ T9706] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  511.251837][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'.
[  515.450683][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'.
[  518.282298][ T9772] xfrm0: entered promiscuous mode
[  518.287407][ T9772] xfrm0: entered allmulticast mode
[  518.665699][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'.
[  520.859965][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'.
[  520.988068][ T9803] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  521.007752][ T9803] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  524.388666][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'.
[  524.937259][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  526.763912][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  526.774802][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  526.789209][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  526.803937][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  526.813771][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  526.999678][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'.
[  527.947015][ T9849] lo speed is unknown, defaulting to 1000
[  529.921502][ T5085] Bluetooth: hci0: command tx timeout
[  532.781419][ T5085] Bluetooth: hci0: command tx timeout
[  533.265434][ T9895] vlan2: left promiscuous mode
[  533.270299][ T9895] bond0: left promiscuous mode
[  533.291642][ T9895] bond_slave_0: left promiscuous mode
[  533.305101][ T9895] bond_slave_1: left promiscuous mode
[  533.311177][ T9895] bridge0: port 3(vlan2) entered disabled state
[  533.331699][ T9895] bridge_slave_1: left allmulticast mode
[  533.345229][ T9895] bridge_slave_1: left promiscuous mode
[  533.357925][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.382944][ T9895] bridge_slave_0: left allmulticast mode
[  533.388625][ T9895] bridge_slave_0: left promiscuous mode
[  533.416139][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.625261][ T9849] chnl_net:caif_netlink_parms(): no params data found
[  533.915773][ T9913] infiniband syz2: set active
[  534.075377][ T9913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  534.106608][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.139249][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.159914][ T9849] bridge_slave_0: entered allmulticast mode
[  534.187083][ T9849] bridge_slave_0: entered promiscuous mode
[  534.199854][  T172] lo speed is unknown, defaulting to 1000
[  534.206450][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.218739][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.231650][ T9849] bridge_slave_1: entered allmulticast mode
[  534.254204][ T9849] bridge_slave_1: entered promiscuous mode
[  535.061776][ T5085] Bluetooth: hci0: command tx timeout
[  535.418472][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'.
[  535.503677][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.518642][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.583612][ T9849] team0: Port device team_slave_0 added
[  535.615113][ T9849] team0: Port device team_slave_1 added
[  535.672686][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.679954][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.739858][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.764269][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.774991][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.806985][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.928778][ T9849] hsr_slave_0: entered promiscuous mode
[  536.078781][ T9849] hsr_slave_1: entered promiscuous mode
[  536.098819][ T9849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.121747][ T9849] Cannot create hsr debugfs directory
[  536.135216][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'.
[  536.169812][ T9934] fuse: Bad value for 'fd'
[  536.795303][ T9946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1301'.
[  536.843785][ T9849] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  536.937797][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'.
[  537.026619][ T9849] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  537.079666][ T9849] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  537.123731][ T9849] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  537.141583][ T5085] Bluetooth: hci0: command tx timeout
[  538.886283][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.895925][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'.
[  538.907959][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1305'.
[  538.924093][ T9959] /dev/loop1: Can't lookup blockdev
[  538.930300][ T9959] 9pnet_fd: Insufficient options for proto=fd
[  539.007661][ T9849] 8021q: adding VLAN 0 to HW filter on device team0
[  539.101197][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.108451][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.181367][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.188573][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.379195][ T9849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  540.078504][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1309'.
[  540.131902][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.182722][ T9849] veth0_vlan: entered promiscuous mode
[  541.217713][ T9849] veth1_vlan: entered promiscuous mode
[  541.435948][ T9849] veth0_macvtap: entered promiscuous mode
[  541.490473][ T9849] veth1_macvtap: entered promiscuous mode
[  541.563458][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.601460][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.631371][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.661366][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.691644][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.729811][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.931749][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.967777][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.028837][ T9849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.526677][ T9849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.551500][ T9849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.570789][ T9849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.674197][T10001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1317'.
[  543.899528][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.928563][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.024375][ T6317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.053453][ T6317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.102469][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'.
[  546.494859][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1327'.
[  547.266549][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'.
[  549.284573][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'.
[  549.397277][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1340'.
[  549.414474][T10069] batadv0: entered promiscuous mode
[  549.420273][T10069] batadv0: entered allmulticast mode
[  554.215790][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'.
[  558.519543][T10162] Bluetooth: MGMT ver 1.22
[  559.166247][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'.
[  561.343219][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'.
[  562.013711][T10211] PKCS8: Unsupported PKCS#8 version
[  563.041662][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  563.230934][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.259582][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.281245][   T23] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  563.290973][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.306477][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  563.313421][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  563.328995][   T23] usb 6-1: config 0 descriptor??
[  563.777490][   T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  563.801922][   T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  563.819307][   T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  563.829435][   T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  563.849706][   T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  563.878815][   T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  563.902149][   T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  563.920401][   T23] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  564.182669][   T23] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[  564.994404][   T23] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71
[  566.346135][   T23] usb 6-1: USB disconnect, device number 2
[  569.951034][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1400'.
[  572.023826][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1405'.
[  575.408174][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'.
[  579.374740][T10352] lo speed is unknown, defaulting to 1000
[  579.591231][   T23] libceph: connect (1)[c::]:6789 error -101
[  579.606141][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  579.623055][T10370] netlink: 'syz.3.1434': attribute type 3 has an invalid length.
[  579.895512][ T5902] libceph: connect (1)[c::]:6789 error -101
[  579.912897][ T5902] libceph: mon0 (1)[c::]:6789 connect error
[  580.347712][T10365] ceph: No mds server is up or the cluster is laggy
[  580.841587][ T6731] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  581.103056][ T6731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.128688][ T6731] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  581.160825][ T6731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.179664][ T6731] usb 6-1: config 0 descriptor??
[  581.464865][T10376] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  581.484178][T10376] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  581.741484][ T6731] usb 6-1: string descriptor 0 read error: -71
[  581.755654][ T6731] cypress_m8 6-1:0.0: DeLorme Earthmate USB converter detected
[  581.765405][ T6731] earthmate ttyUSB0: required endpoint is missing
[  581.775069][ T6731] usb 6-1: USB disconnect, device number 3
[  581.786072][ T6731] cypress_m8 6-1:0.0: device disconnected
[  583.515564][T10401] sg_write: data in/out 1349/10 bytes for SCSI command 0x2f-- guessing data in;
[  583.515564][T10401]    program syz.5.1446 not setting count and/or reply_len properly
[  583.655198][ T5085] Bluetooth: hci2: unexpected event for opcode 0x004b
[  584.008697][T10422] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  584.522410][ T5816] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  584.711457][ T5816] usb 6-1: Using ep0 maxpacket: 16
[  584.718824][ T5816] usb 6-1: config 73 has an invalid interface number: 24 but max is 0
[  584.736481][ T5816] usb 6-1: config 73 has no interface number 0
[  584.745514][ T5816] usb 6-1: config 73 interface 24 has no altsetting 0
[  584.759783][ T5816] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09
[  584.775598][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.786151][ T5816] usb 6-1: Product: syz
[  584.790468][ T5816] usb 6-1: Manufacturer: syz
[  584.800670][ T5816] usb 6-1: SerialNumber: syz
[  585.224944][ T5816] go7007: probe of 6-1:73.24 failed with error -12
[  585.268164][ T5816] usb 6-1: USB disconnect, device number 4
[  585.479238][T10440] IPv6: syztnl0: Disabled Multicast RS
[  585.574781][T10433] Bluetooth: hci2: unexpected event for opcode 0x004b
[  594.031633][T10523] process 'syz.5.1484' launched './file2' with NULL argv: empty string added
[  596.488871][T10552] lo speed is unknown, defaulting to 1000
[  597.361938][T10567] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1498'.
[  598.699106][T10574] netlink: 'syz.3.1500': attribute type 10 has an invalid length.
[  598.809635][T10574] team0: Port device netdevsim0 added
[  601.737947][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'.
[  604.468888][T10622] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1513'.
[  604.479111][T10622] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1513'.
[  604.489036][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1513'.
[  606.940376][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1522'.
[  610.461549][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  610.661728][ T5902] usb 6-1: Using ep0 maxpacket: 32
[  610.747173][ T5902] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  610.831118][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0
[  610.878508][ T5902] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  610.929848][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.992181][ T5902] usb 6-1: config 0 descriptor??
[  612.417377][ T5902] dragonrise 0003:0079:0011.0004: unknown main item tag 0x2
[  612.429628][ T5902] dragonrise 0003:0079:0011.0004: unknown main item tag 0x7
[  612.458785][ T5902] dragonrise 0003:0079:0011.0004: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0
[  612.781473][ T5902] usb 6-1: USB disconnect, device number 5
[  612.854289][T10694] trusted_key: syz.3.1535 sent an empty control message without MSG_MORE.
[  615.259287][T10713] input: syz0 as /devices/virtual/input/input10
[  615.344610][T10433] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  615.963499][T10732] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  616.067004][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'.
[  619.338386][T10785] smc: net device vlan1 applied user defined pnetid SYZ2
[  619.540092][T10784] lo speed is unknown, defaulting to 1000
[  622.825537][   T34] tipc: Left network mode
[  623.359788][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'.
[  623.661728][   T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  623.891447][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.902333][   T23] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  623.971365][   T23] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  624.031401][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.071508][   T23] usb 6-1: config 0 descriptor??
[  624.086827][   T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  624.746309][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  624.753067][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  625.026052][   T34] hsr_slave_0: left promiscuous mode
[  625.032246][   T34] hsr_slave_1: left promiscuous mode
[  625.059362][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.112676][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.363150][   T34] bridge_slave_1: left allmulticast mode
[  625.368888][   T34] bridge_slave_1: left promiscuous mode
[  625.434899][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.476939][   T34] bridge_slave_0: left allmulticast mode
[  625.509926][   T34] bridge_slave_0: left promiscuous mode
[  625.542212][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.318066][    T9] usb 6-1: USB disconnect, device number 6
[  626.622358][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  627.666647][   T34] team0 (unregistering): Port device team_slave_1 removed
[  627.847528][   T34] team0 (unregistering): Port device team_slave_0 removed
[  628.054733][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  628.238625][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  629.282648][   T34] bond0 (unregistering): Released all slaves
[  629.494051][T10922] netlink: 'syz.3.1585': attribute type 2 has an invalid length.
[  631.621028][T10958] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1595'.
[  637.319374][T11031] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  637.554819][T11031] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  639.871620][   T23] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  640.084723][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  640.133918][   T23] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  640.166715][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.219392][   T23] usb 6-1: config 0 descriptor??
[  640.775979][   T23] usb 6-1: string descriptor 0 read error: -71
[  640.985018][   T23] cypress_m8 6-1:0.0: DeLorme Earthmate USB converter detected
[  641.236312][   T23] earthmate ttyUSB0: required endpoint is missing
[  641.447231][   T23] usb 6-1: USB disconnect, device number 7
[  641.522538][   T23] cypress_m8 6-1:0.0: device disconnected
[  648.082274][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'.
[  648.643956][T11149] loop5: detected capacity change from 0 to 2048
[  651.415699][T11175] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  651.446672][T11175] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  653.231704][T10433] Bluetooth: hci0: command 0x0406 tx timeout
[  654.437510][T11220] loop5: detected capacity change from 0 to 2048
[  656.262470][T11241] netdevsim0 speed is unknown, defaulting to 1000
[  656.269024][T11241] netdevsim0 speed is unknown, defaulting to 1000
[  656.276559][T11241] netdevsim0 speed is unknown, defaulting to 1000
[  656.286717][T11241] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  656.300623][T11241] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  656.434918][T11241] netdevsim0 speed is unknown, defaulting to 1000
[  656.442928][T11241] netdevsim0 speed is unknown, defaulting to 1000
[  656.450188][T11241] netdevsim0 speed is unknown, defaulting to 1000
[  656.457501][T11241] netdevsim0 speed is unknown, defaulting to 1000
[  660.015791][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1666'.
[  661.893800][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1664'.
[  669.700306][T11333] loop5: detected capacity change from 0 to 8
[  670.005627][T11333] SQUASHFS error: zlib decompression failed, data probably corrupt
[  670.013836][T11333] SQUASHFS error: Failed to read block 0x9b: -5
[  670.020238][T11333] SQUASHFS error: Unable to read metadata cache entry [99]
[  670.027788][T11333] SQUASHFS error: Unable to read inode 0x127
[  671.531775][T10433] Bluetooth: hci1: unexpected event for opcode 0x0c7d
[  672.956127][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1678'.
[  673.908031][   T28] audit: type=1800 audit(1784665434.162:36): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.1689" name="/newroot/91/bus" dev="tmpfs" ino=488 res=0 errno=0
[  674.868219][T11389] loop5: detected capacity change from 0 to 8
[  674.966716][T11389] SQUASHFS error: zlib decompression failed, data probably corrupt
[  674.974972][T11389] SQUASHFS error: Failed to read block 0x9b: -5
[  674.982408][T11389] SQUASHFS error: Unable to read metadata cache entry [99]
[  674.989768][T11389] SQUASHFS error: Unable to read inode 0x127
[  676.771886][ T6731] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  677.016989][ T6731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  677.045357][ T6731] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  677.067023][ T6731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.116396][ T6731] usb 6-1: config 0 descriptor??
[  677.378488][ T6731] usb 6-1: string descriptor 0 read error: -71
[  677.392552][ T6731] cypress_m8 6-1:0.0: DeLorme Earthmate USB converter detected
[  677.403878][ T6731] earthmate ttyUSB0: required endpoint is missing
[  677.430333][ T6731] usb 6-1: USB disconnect, device number 8
[  677.465797][ T6731] cypress_m8 6-1:0.0: device disconnected
[  679.141644][  T172] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  679.350956][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'.
[  679.360652][T11448] 
[  679.363013][T11448] ======================================================
[  679.370045][T11448] WARNING: possible circular locking dependency detected
[  679.377075][T11448] syzkaller #0 Not tainted
[  679.381508][T11448] ------------------------------------------------------
[  679.388536][T11448] syz.2.1708/11448 is trying to acquire lock:
[  679.394616][T11448] ffff888141654eb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x72/0xa0
[  679.405179][T11448] 
[  679.405179][T11448] but task is already holding lock:
[  679.412561][T11448] ffff88807a016690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0
[  679.422882][T11448] 
[  679.422882][T11448] which lock already depends on the new lock.
[  679.422882][T11448] 
[  679.433302][T11448] 
[  679.433302][T11448] the existing dependency chain (in reverse order) is:
[  679.442334][T11448] 
[  679.442334][T11448] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}:
[  679.450629][T11448]        __mutex_lock+0x135/0xc80
[  679.455768][T11448]        __netlink_dump_start+0xf4/0x7a0
[  679.461431][T11448]        ip_set_dump+0x15c/0x1f0
[  679.466444][T11448]        nfnetlink_rcv_msg+0xcaf/0x1290
[  679.472048][T11448]        netlink_rcv_skb+0x235/0x4c0
[  679.477376][T11448]        nfnetlink_rcv+0x2c9/0x2490
[  679.482603][T11448]        netlink_unicast+0x7b1/0x930
[  679.487916][T11448]        netlink_sendmsg+0x8d0/0xbf0
[  679.493233][T11448]        ____sys_sendmsg+0x61b/0x980
[  679.498649][T11448]        ___sys_sendmsg+0x2a6/0x360
[  679.503877][T11448]        __se_sys_sendmsg+0x1d0/0x2c0
[  679.509284][T11448]        do_syscall_64+0x55/0xb0
[  679.514330][T11448]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  679.520844][T11448] 
[  679.520844][T11448] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}:
[  679.528695][T11448]        __mutex_lock+0x135/0xc80
[  679.533746][T11448]        ip_set_nfnl_get_byindex+0x67/0x230
[  679.539659][T11448]        set_match_v1_checkentry+0x71/0x230
[  679.545643][T11448]        xt_check_match+0x49d/0xc60
[  679.550869][T11448]        __nft_match_init+0x671/0x8b0
[  679.556310][T11448]        nf_tables_newrule+0x176e/0x2870
[  679.561990][T11448]        nfnetlink_rcv+0x1133/0x2490
[  679.567322][T11448]        netlink_unicast+0x7b1/0x930
[  679.572662][T11448]        netlink_sendmsg+0x8d0/0xbf0
[  679.577982][T11448]        ____sys_sendmsg+0x61b/0x980
[  679.583292][T11448]        ___sys_sendmsg+0x2a6/0x360
[  679.588560][T11448]        __se_sys_sendmsg+0x1d0/0x2c0
[  679.593985][T11448]        do_syscall_64+0x55/0xb0
[  679.598983][T11448]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  679.605454][T11448] 
[  679.605454][T11448] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}:
[  679.613798][T11448]        __lock_acquire+0x37ef/0x7d80
[  679.619273][T11448]        lock_acquire+0x19e/0x420
[  679.624340][T11448]        __mutex_lock+0x135/0xc80
[  679.629416][T11448]        nf_tables_dumpreset_obj+0x72/0xa0
[  679.635276][T11448]        netlink_dump+0x738/0xec0
[  679.640360][T11448]        __netlink_dump_start+0x57c/0x7a0
[  679.646127][T11448]        nft_netlink_dump_start_rcu+0xdb/0x1a0
[  679.652328][T11448]        nf_tables_getobj_reset+0x1e1/0x630
[  679.658277][T11448]        nfnetlink_rcv_msg+0x89c/0x1290
[  679.663927][T11448]        netlink_rcv_skb+0x235/0x4c0
[  679.669260][T11448]        nfnetlink_rcv+0x2c9/0x2490
[  679.674505][T11448]        netlink_unicast+0x7b1/0x930
[  679.679829][T11448]        netlink_sendmsg+0x8d0/0xbf0
[  679.685676][T11448]        ____sys_sendmsg+0x61b/0x980
[  679.691007][T11448]        ___sys_sendmsg+0x2a6/0x360
[  679.696338][T11448]        __se_sys_sendmsg+0x1d0/0x2c0
[  679.701761][T11448]        do_syscall_64+0x55/0xb0
[  679.706739][T11448]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  679.713198][T11448] 
[  679.713198][T11448] other info that might help us debug this:
[  679.713198][T11448] 
[  679.723459][T11448] Chain exists of:
[  679.723459][T11448]   &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER
[  679.723459][T11448] 
[  679.737949][T11448]  Possible unsafe locking scenario:
[  679.737949][T11448] 
[  679.745425][T11448]        CPU0                    CPU1
[  679.750819][T11448]        ----                    ----
[  679.756209][T11448]   lock(nlk_cb_mutex-NETFILTER);
[  679.761310][T11448]                                lock(nfnl_subsys_ipset);
[  679.768463][T11448]                                lock(nlk_cb_mutex-NETFILTER);
[  679.776041][T11448]   lock(&nft_net->commit_mutex);
[  679.781106][T11448] 
[  679.781106][T11448]  *** DEADLOCK ***
[  679.781106][T11448] 
[  679.789283][T11448] 1 lock held by syz.2.1708/11448:
[  679.794507][T11448]  #0: ffff88807a016690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0
[  679.805197][T11448] 
[  679.805197][T11448] stack backtrace:
[  679.811123][T11448] CPU: 0 PID: 11448 Comm: syz.2.1708 Not tainted syzkaller #0
[  679.818623][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  679.828714][T11448] Call Trace:
[  679.832084][T11448]  <TASK>
[  679.835102][T11448]  dump_stack_lvl+0x18c/0x250
[  679.839876][T11448]  ? load_image+0x420/0x420
[  679.844478][T11448]  ? show_regs_print_info+0x20/0x20
[  679.849720][T11448]  ? print_circular_bug+0x12b/0x1a0
[  679.854959][T11448]  check_noncircular+0x2fc/0x400
[  679.859934][T11448]  ? print_deadlock_bug+0x5d0/0x5d0
[  679.865165][T11448]  ? lockdep_lock+0xf5/0x230
[  679.869792][T11448]  ? _find_first_zero_bit+0xd6/0x100
[  679.875184][T11448]  __lock_acquire+0x37ef/0x7d80
[  679.880083][T11448]  ? __lock_acquire+0x1262/0x7d80
[  679.885137][T11448]  ? verify_lock_unused+0x140/0x140
[  679.890371][T11448]  ? __stack_depot_save+0x575/0x660
[  679.895671][T11448]  ? kasan_set_track+0x4e/0x70
[  679.900499][T11448]  lock_acquire+0x19e/0x420
[  679.905036][T11448]  ? nf_tables_dumpreset_obj+0x72/0xa0
[  679.910534][T11448]  ? __might_sleep+0xe0/0xe0
[  679.915192][T11448]  ? read_lock_is_recursive+0x20/0x20
[  679.920599][T11448]  __mutex_lock+0x135/0xc80
[  679.925133][T11448]  ? nf_tables_dumpreset_obj+0x72/0xa0
[  679.930637][T11448]  ? __kmem_cache_alloc_node+0x194/0x250
[  679.936313][T11448]  ? nft_pernet+0x23/0x230
[  679.940766][T11448]  ? nf_tables_dumpreset_obj+0x72/0xa0
[  679.946257][T11448]  ? __lock_acquire+0x7d80/0x7d80
[  679.951313][T11448]  ? mutex_lock_nested+0x20/0x20
[  679.956291][T11448]  ? __alloc_skb+0x138/0x2c0
[  679.960928][T11448]  ? nft_pernet+0x23/0x230
[  679.965376][T11448]  ? nft_pernet+0x23/0x230
[  679.969819][T11448]  nf_tables_dumpreset_obj+0x72/0xa0
[  679.975146][T11448]  netlink_dump+0x738/0xec0
[  679.979693][T11448]  ? lock_chain_count+0x20/0x20
[  679.984575][T11448]  ? netlink_lookup+0x200/0x200
[  679.989491][T11448]  ? audit_tree_destroy_watch+0x20/0x20
[  679.995113][T11448]  ? nf_tables_dumpreset_obj_start+0x114/0x180
[  680.001327][T11448]  __netlink_dump_start+0x57c/0x7a0
[  680.006567][T11448]  ? nft_netlink_dump_start_rcu+0xbb/0x1a0
[  680.012406][T11448]  nft_netlink_dump_start_rcu+0xdb/0x1a0
[  680.018072][T11448]  nf_tables_getobj_reset+0x1e1/0x630
[  680.023481][T11448]  ? nfnl_pernet+0x23/0x230
[  680.028017][T11448]  ? nf_tables_delobj+0x10b0/0x10b0
[  680.033250][T11448]  ? nf_tables_getobj_single+0x600/0x600
[  680.038920][T11448]  ? nf_tables_dumpreset_obj_start+0x180/0x180
[  680.045109][T11448]  ? nf_tables_dump_obj+0xd00/0xd00
[  680.050346][T11448]  ? __nla_parse+0x40/0x50
[  680.054805][T11448]  ? nf_tables_delobj+0x10b0/0x10b0
[  680.060032][T11448]  nfnetlink_rcv_msg+0x89c/0x1290
[  680.065092][T11448]  ? nfnetlink_rcv_msg+0x228/0x1290
[  680.070339][T11448]  ? nfnetlink_unbind+0x160/0x160
[  680.075396][T11448]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  680.081418][T11448]  ? __schedule+0x15b6/0x4660
[  680.086119][T11448]  ? netlink_unicast+0x77b/0x930
[  680.091170][T11448]  ? netlink_sendmsg+0x8d0/0xbf0
[  680.096152][T11448]  ? mark_lock+0x94/0x320
[  680.100515][T11448]  netlink_rcv_skb+0x235/0x4c0
[  680.105334][T11448]  ? nfnetlink_unbind+0x160/0x160
[  680.110490][T11448]  ? netlink_ack+0x1160/0x1160
[  680.115293][T11448]  ? apparmor_capable+0x137/0x1a0
[  680.120398][T11448]  ? bpf_lsm_capable+0x9/0x10
[  680.125129][T11448]  ? security_capable+0x89/0xb0
[  680.130023][T11448]  nfnetlink_rcv+0x2c9/0x2490
[  680.134738][T11448]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  680.140749][T11448]  ? __lock_acquire+0x7d80/0x7d80
[  680.145805][T11448]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  680.151731][T11448]  ? lockdep_hardirqs_on+0x98/0x150
[  680.156960][T11448]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  680.162538][T11448]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  680.168467][T11448]  ? _raw_spin_unlock+0x40/0x40
[  680.173350][T11448]  ? __dev_queue_xmit+0x275/0x3630
[  680.178557][T11448]  ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30
[  680.185188][T11448]  ? rcu_read_unlock_special+0x4d0/0x4d0
[  680.190853][T11448]  ? __skb_clone+0x5c/0x6c0
[  680.195399][T11448]  ? netlink_deliver_tap+0x2e/0x1b0
[  680.200629][T11448]  ? __lock_acquire+0x7d80/0x7d80
[  680.205686][T11448]  ? __rcu_read_unlock+0x7c/0xd0
[  680.210656][T11448]  ? netlink_deliver_tap+0x2e/0x1b0
[  680.215889][T11448]  netlink_unicast+0x7b1/0x930
[  680.220696][T11448]  netlink_sendmsg+0x8d0/0xbf0
[  680.225502][T11448]  ? netlink_getsockopt+0x590/0x590
[  680.230735][T11448]  ? apparmor_socket_sendmsg+0x170/0x330
[  680.236397][T11448]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  680.241717][T11448]  ? security_socket_sendmsg+0x80/0xa0
[  680.247209][T11448]  ? netlink_getsockopt+0x590/0x590
[  680.252447][T11448]  ____sys_sendmsg+0x61b/0x980
[  680.257251][T11448]  ? __asan_memset+0x22/0x40
[  680.261879][T11448]  ? __sys_sendmsg_sock+0x30/0x30
[  680.266937][T11448]  ? __import_iovec+0x5f2/0x850
[  680.271825][T11448]  ? import_iovec+0x73/0xa0
[  680.276363][T11448]  ___sys_sendmsg+0x2a6/0x360
[  680.281080][T11448]  ? __sys_sendmsg+0x2b0/0x2b0
[  680.285906][T11448]  __se_sys_sendmsg+0x1d0/0x2c0
[  680.290797][T11448]  ? __x64_sys_sendmsg+0x80/0x80
[  680.295794][T11448]  ? lockdep_hardirqs_on+0x98/0x150
[  680.301047][T11448]  do_syscall_64+0x55/0xb0
[  680.305515][T11448]  ? clear_bhb_loop+0x40/0x90
[  680.310226][T11448]  ? clear_bhb_loop+0x40/0x90
[  680.314933][T11448]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  680.320861][T11448] RIP: 0033:0x7f840e59de99
[  680.325359][T11448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  680.345085][T11448] RSP: 002b:00007f840f381028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  680.353530][T11448] RAX: ffffffffffffffda RBX: 00007f840e826180 RCX: 00007f840e59de99
[  680.361527][T11448] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 0000000000000006
[  680.369695][T11448] RBP: 00007f840e633eaf R08: 0000000000000000 R09: 0000000000000000
[  680.377700][T11448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  680.385697][T11448] R13: 00007f840e826218 R14: 00007f840e826180 R15: 00007ffed3bf2db8
[  680.393883][T11448]  </TASK>
[  680.439825][  T172] usb 6-1: config 0 has an invalid interface number: 199 but max is 1
[  680.483797][  T172] usb 6-1: config 0 has no interface number 1
[  680.509072][  T172] usb 6-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[  680.533906][  T172] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  680.559138][  T172] usb 6-1: config 0 interface 199 has no altsetting 0
[  680.586244][  T172] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  680.607497][  T172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  680.628378][  T172] usb 6-1: SerialNumber: syz
[  680.654593][  T172] usb 6-1: config 0 descriptor??
[  680.677175][  T172] usb 6-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  680.701825][  T172] usb 6-1: No valid video chain found.
[  681.088498][   T23] usb 6-1: USB disconnect, device number 9
[  686.194224][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  686.200602][ T1291] ieee802154 phy1 wpan1: encryption failed: -22