last executing test programs:

4m36.216502469s ago: executing program 0 (id=430):
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x3c, 0x66, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xb}, {0xf, 0xa}, {0x0, 0x5}}, [{0x8, 0xb, 0xa122}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="05010100fdad07652d1378a9212c5b299dc570ffcb6a241690f69658e0e687fb69d2362505f8a0d889da77c104dc681bcbc33dc4e0a8e0fdc2705ed9ed43f87b6d931e658155fcd6c459fde2b4423d549fe748842a62a38577f473864ffc819915999851b07b1b181c3871da0000"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)
connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r5, r3, 0x0, 0x8010002b)

4m32.044803122s ago: executing program 0 (id=458):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xf000000}}, 0x1c)

4m30.795902748s ago: executing program 0 (id=466):
r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x400001)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00', <r2=>0x0})
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000080)={'binder1\x00'})
r3 = accept4(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000240)=0x80, 0x80800)
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="9c9bea98c5f36846c0740b4f1d7b13448108a01c2a8ce45caabe4504d2394e1d86cc93b5b7df57e648050df2484957a789fa189dfe310cad35478ad21eb2064acf9999d9fb3a64138929bcd0a3757c0da0992061b902fa27d0b2862aa4448f98e436103daaac87fe83309e50cd2a8de3b7c0a3441b3e5eeb506183f45551ee2f30c280345a14882552b0fab9fe77c40db5d737736f6a35a31281213b1328e88be138b522ad55a45a73cd1db00359aa589952701b841ad5e8e0dbd43859b81cf232c59e", 0xc3}, {&(0x7f0000001380)="7d68e4b0284b0c90771f3243d0de1c1ba93404fc267220062818e44133567abada46c68d808e7a439b7416d372e0d276a5b3cc8ddb9095bd17ddb8e7c1fd7ee5cb6c522952d20942d774445511b4a3801be86e1048dafa321ab5f4c92094ee863630e57036bd1d4aa312ac03a7670dfd570cd45c10cb2f65efb44983b043eb69d1e31736e84e6d070a0509d218cdabcb75764c6126127d80b37157d52a1e811c88fa78097a51fef2b2ef0af23046ad0c0a3e66a9a20f227a5a28eeab72d00018604984da0ba2820668f6ac59e6f12872d60b63f4ba40988b9ded96407264c85b4f27d3aed01d80187f81f12b05ec4fae6192cd73ce", 0xf5}, {&(0x7f0000001480)="759aa643b73d3f1f08ac2d789062440d648212dd7609c95200ce8f9631daabdeb2ed70319ab0b997a2a74ec36bf7c2a7f0abec632b77aea031c7309bafc35153bf57359770b39357b1b5c057e079abec3966cc8a40e32885c4dfaefa8634078bcd5cf7b457eabcc5bc4733e394bc0aa475298a3ca9f691f1451b705aa0148377fd6a1d165bcf6d03d4717e5850fe4d2b88b69db58b566421d53557e7b33b2db4caa7a1f46bdec1141135ea57b0438e90c535", 0xb2}, {&(0x7f0000001540)="55ab657932b8be0d4d8a4c1038bb9da8e82505f35343749cea587a22e323074871010dc595900eac2a55895038904533e12c8d855f351fc45eb515983d87b7a22b67c28220d959d8756110b064b80269af98d6ade4c26bc49b3296952d5a4a87d27b9d0a580eb16ce5b3323d94459312d11d5278537f8a502f516feb68c5a7a50a1aee3ab4296fff7f20aa33d2e4a286d8cc53fba4944e4cb21cfcab59a9a5b2f4cd683f929194903932c8df6c2c6a74c2d8a5eea890d64592c57faa009fc792740666f9c1435955b5c232bd5a6abd9224b06b380ba8f1e81b581feb143e90f62d4513b6a0fe5ae9e6bc6409419d5eb2093b", 0xf2}, {&(0x7f0000001640)="5ea9b9bc7e05290ffcb2a80e5fddfd80463332ab76a846b9ff9b8ce0dce2955ea3ef7b2b972e5fbc3c6305b6e57d12c7af5340cc4f472e6b67d34a33dbd2f1ddcc795d1a31608e5a0aa813deada103d1c05b3241de6987f012b2d62448efbcfb2954aad7681300bb56e84817bca314138e647ae7168dbf84d8cd1a88ebdce68e321954eeeb1c29e9ed2b853a43f45edb4739cae9baee5d82a9370c6d6569150e63fa8d80979f2b24fee98fd5862ee5c918635555659296519c61e2f114d6156d0a21f7d446964bf24aa3743e14d9737e3ec1b0f071776d1b323a784c0ca80e4784af50185cb3ddaabe953440c5e13369a758b4396e187721abae448a84f7c977f7ded494d3f5cbd5cbde42da8f000f3b22e5dec1484b6120c3549c65d31b243064dbef3c4fecd2d0f6a9911dd221fd06b84403ffa294997dd2973272b9b9ee9020ff528df7d8fdcc20f32aaf54b10848c57fb58bcffc082f4e7586d5f3bfd7ed29719ec1d2a39f01e804078289c22275b937a13524784bbb59ffd06e1cb0f658882b4ed2623870e38b203e1c96b171779ddf44a9783c54b92f210cb1c7c95393fa0c9780fe522ce53a4b637330e88aef673c6fee914804e427679928ac3313a834ddff88ecfabff19b24335e8f1e2e231e7607ab06842a90855c7492918c2df2098ff002605de032c3d744923b475d38b7842e70c28f86c24c446e0193c086c8b7f30bd1361a7120c65ea312f2c48a5b0c8818065db262f74040a01a807ea89f126878a340f34c00e756c8a2cbcddc6889b990b26e0c463d8e88cd41890b2da6f7a15f5c1f8ea9d70ec9c478867059edea09e60ef201199b2bd2fd66dfe2d966f27e3c3390f80b05e2f684e5b2f03f1e215b1c1469195d9f9d74e5e3641f21c564356238638334871f5eb5b6ec2e78a5abc8f79e1a91a4d8b7d6541aef878e3df1faf9750a07975e624300b953ca9b14ee2d4d76e986433f97116fab63ece4b3441213d70291045acd707e56cbc047a10dafc51615ac7f97beb5ad1f3a76ad613d7265f3c72f6e18bb0a96b886ef68752bd378abf0bee08969cf44aafc5155c1324405c610eeb484abdc1af53079899f2b0d487063cc6b0d82a950b7e80732947d035c5f9da8a4ac9ab57fb5f4f3fce760c358e91bad0e7e3a5fa2d44bd9146117dad1ed654cb605d3c3c99222bd74d4feabdbce7496af54855253496f50e751ccbe9eb904bdd7e5796dad8c66ee1efc4cd040857ff118ce597e5b5701d620a4f910986b003bea53482e92b7046125da0a683505cdfd01061f51d16f70dbbe99a5fe56ef77185dc5cbe185a8cbf7d053bda685c8721237e6d4e919f3782bb8c5858cee201988872b449e93f96e85629eebe547374f4e4d5d599dde9a06c219cfcd5b82274f858f0ab8fdd143d0acee4a40811cdd301be99e39c7bc5e82da826281c35377fe1ca31ad4cc4374938640bdfda133960f14d2dceb4405c6294321be7c2b95356b23be0732b507dfd6172b500b84ae62e3c73829080f47104222e6067651c5b847fbe0d1567ff2dd1ba911cce6464a947dec0e034a41c55d53a9852cc70a7c11e8e5b776b32965460df9abf4d9e5c5fc6c66b518251a882d0b0e8d3164c4748178cbf1002521212724de3eaa5d8ac20778477978dc16701bc232081d7b69c5559377d410cfe3ca57dfc9c8a9a28c0c48f090b38898c848648ba45dc2d2fada15c17d1819dd59cfcbe4b849d920a1a157397728259f2982f7188f4bc7d34d1eabbb83d66cbb0f54cbc97e68c598c4fa9db8f35e46e00c17c0cb5eeadf453af727e5c77a4be13a810f281dee708fcf393dfd415c3a2c4478a761773a84cf10783627146f9f4c6a9ad08770e52e6e4141abe1eabb7cbcdfd44256837869c37177769251e0f3349fc8cdffaa9712d9effdb677278449a19a2aef2e716a4311eb0d5b833270badf6437f5d6dd48b03a107ae0de53f3391f03e04d4e3f8e28f7354462a4101350cda4d07c2108f5eef4bcae8f2e874a2c60c7f56d00393f56842f7828542e4c4c3ba5a993d9370607c9563739eb43cc5a63232c39a8c71b956841461105c8752df64655ae53aaa0a99313805907d94c719738b0d0a2055c43eab90da19323cb715431e087593e69552f0952eca9bc8af5be8c7ec4a687170ec3eeb371b515b92a2865b5e2b79bb2a886cb03693a1cad4f35fb2dfa3ae1e273fd7def53c6856ca0d9bf3de62cc415266a1747c7847571c93d2a05a193a040b28af069903170f4747a8e22a5ef44ceb9eadf4fa8917cef19bbf1fd4aa7810d18d52d66fbd31a425816e50fbd766f2e67e545811d6f560e5cffe42b6038f89bc5dcd045e5049c5a26ef27e3b66479909aaca698282adc3a1b5f14b5129e080e6c40b975f58a0f58a0ac53a511161206269dcfc4f5146332968e0102fc3c5e63ce114567201fa3b97f83c8693a3353bbf57a2d3db277bae09b487e7460bde1db046e0794f824f9da7192b95fd5afe0afbaceadc085e90c9ca787c44da3b9625be4bff55ee6637dcc5ad888e45e8e6f31ba9acf36a402699e52f270ca4186155e85a360e1c4e752358aa804c612b384bb03159ed529caeeaa0cc95bb75675788be97388c2024b5be12dd892f6ce1ffb65d976858d21848fb6d580914fed03da2414f3e206346f0cc8d1543d00256896f29de80f6b643d2f556e9d8e8c7134b1f3fd785d7ca931dff65ac699b5b2d11d2709061d7b27cfbf191705c46a393adce3530b241d2b790ad06fba27e2b4bd361ae75b3d6fec1c0e58fa3bd642d48281551811aa2a4827841d12fbc5f6d9d9850f9edf8b26467413ddd8826415b77ac27bb32bbf90e2c38a0aad4018fb9568b3cfcfc11c96c3806f253a398827600fef3634ea46d514b43559d84c305826dac069243bf62e4a292fd82f7d05c28c25aa0599fce1e13b6c78979498481f1deb27bff19823b9e89e34c3cdc359d568170fc7a5bc2240694d955ffe3daae21094dfcebbf2c6756cbfd550a0ba57579c56370929c72af743373eb9de3b36730789b682aadff74c41501d5bfdcc81373b074a09ef1ad76231e9aacf2e2eda75b93549d75e14bf25001ea3a83485cc3a495312d0b2fa6faeac97c43493a52769597d0896cd335bccaea769248c60b7728a36ca4ff015c23943075f676fe04a93b943b1e93a5d93c89a9e36e11cf726262ed1754aeb6e25712ae3ce39cd00651a7a310a5d285ac4e7babefda66ac2f52a9a9e76200f89371121d2d90fd18ede9a3d721615d303af3be977e6cce7d94f2d94843e8f7a6aa3174eeee2af5cf8e63ff6e0e09f7fc73a9358f64c13df130ca9dcffc62c2ef82c1cdee178a65586232f8449c7ca95527da82976e93de7c38b4d9c72f0c38db051add9e98c2f29289eb5e50b88f2a4f9fdcef9acd590ac4f0577fa1ce73b260ac0bb339385a803019394eabfc24e1e8ef0012d2094b6988ae531ea32c1334be6d7c2715c00d081c67b9b5a44b9eb46378791323b4e99b425f5156d33a21c8ab03a8f3cba6f3b78ca60ddda2029673700802677725cce04fe6dbcc76a37ae6198d93cf9799490a7b6acd9f84cf87e5108e94c40eafce63e926a9e5457145e694d77ef60c48f6c6092a5aae8d0b95e7c4df9242e2f2bd34aa8d1b21dbfc82e267e2ef7636e95f8c7adcf29061a94dc6e0691e98b61ccbb31c00d9eb9b95b94ca3e571c56e300fa54f70fa21190ce95ed4a8fef9c4e06b3dfdead843e7380fbb5db28925c5ecfc28a181bb1285cdc15ff84df9bd609c2bcad2eeb2bda8f1121ee85da393a71446a28f46e236222dcd9d44ac4a85a6756526c5dd7fcabfa87680b41ce594ec37f93f4436df6c5c9007c25125c438246aca08ad81d17f2924ee2b2702ecbc871f52dd4eb99fc9e24b64cfc81fc7be059166d08fa029ce4252a19820f63b21021418bfcdf7326f2114195c320beda5b9c22c91574f1f62d0a1caa78c1b795e3051e908c66fbc31c5dede292c41a2697cae81ccc18042fe0b320a9743e873c2b8e979ab3953b8af6cea8038bb946c896994fb1efeed3fefa7b647f4a9377bccc5a9b99bb97db87d0c41684ee8e2611db548a6bbd4922a94088b0de1f255bb0c2755dd842be78ebf6558854ff6417120a432bb79bd945b03667eb5680a29b2d89b8b81eb4946de10bbb2f90e8281933308785237e359d4a22284e0ad10166a389d20dacd98f8c5c4573c51cbb88e9f7d0380067567f900969b68d8d2c77bf352d0e76d5c9298e03237a84f3dbb03f27779e01a17cda6294188660dc57bc3c2f0e65021a6f9c8eed5ba77348a7731190d2a4d8da16e2105d59b3448d7c9be32f365c6ca38f91104b3ae7f663e20052e9d0319ed3b5817c69f7be7a7792cd5456e0070560e62df5de4f0a1b57aaf565feae885c9c98205203f42d7c099c65f640422b2af7679cc8cb4bf3fab58834dfb8a7c940d92b263630dee5227fd2657e87d56ac1eafd62f30a7af9e72c2c18498ae0ed49a880137196abbf83afd22d5c7a819f3bf3646b024ccaca44595c118c268e5674eadfc232269b674ff9cf3f4470163082d91a8dd8afdbf1be3c5561f103f19086ed8b8714cbcfc66e7af8e41b46569ffa8a7f7231b96545cc8c120c12953eefcb2303b5546993349c7278b5ea7999bb092a96eafdc5b6f55f34271c65969765b86e77469839e7e2107f8a75cd5f535238cc1d83d8d627592f6a9fd8de6576e3fdf77cada902dd89c9a9d410cb1b5ac65f72be4f7d1b8dae0b76f88e4834b0f7740e5ae8cada0479239d670da7761fef14597b0b47441436c3402a5a3f52dc64f43f6c5892f6d6689e73763fc9c3bdc559cd4027ea538eccc8b543ec8b1651be878e030191d4bd9aa35b6bb35474187788fd3ebc9d676453c20e6819f6f214d0502be2376afdc82f4a8fedd4ce59802aef3081ba4903ebb1eb3e88f6501fc4a09c3f233d3718388bd0dd61b011b3794f69c8ab04730b20581a6edf10f6258981569664c4226721519b4c2fad399c4ef60e7fb771976024c2c5849b92e81a011fdf8760343520ed050031368ebfef69a51291fe04a2deadadffcc08736c9d9854b98e4bae8c418db5e75ce25e0e0c74edb8c6200ab0cc7d627ca559133843ba5c67db4c21e396a1ed8b623335be5799b311e3aae9d5258277c2ca11789d7a1bf7ca2a3b8c69a0f859c33fdb0e8a76af490883d17ca4cdddcccb8074c8299af55b990f4ebc90e11208435a8297436c1d571e6dbbf9e0e1ded8f24e51d0b102fd7414201e90bf9295e15d5e745f59391d3ec8b8c8aa03b5f1c2e4d2c3cd8c7522c1031b56b8ea28e90d30bda3077d268a858b99a11648b1121fb8fcf5aa3bf2a1c3f8eadb1c9a1ecaa307ed9c3b8b77c4c474bb026711ed3265abf85ebcd4c8f2c2e0ed41ea9832c774bc95c4df02ff4b83f8fa1538e31011ac4155922792b180f0929d1912cf72a41c27f8b023b9c23c93df38017d67f2865942f968f4f44cfc3f11bc7c7574430119d4f55b448dd2ffc386fdc54ae69a8b0122b27f99cc55bd522189294323bd0892f64d3fded8f1cc53c3e7ad136291fa28c46218ba730059ac4085307a7e8256a775a0913fe4846054ce575fccd71e901d7f3ce9cbccf4639165795686d3e45b0276595bf947d0f211ce8f2c66d5d4c8582188b9b3b2369d127e35115ba0d91d90365a128c91493a7c8e4442400b78f5b1c274aa2f1dcee411138e9a33eb054cb67b23af4a1f536a29c036a67984fe728db27006922d9f4815f056f26c65d91c7df498cc", 0x1000}], 0x6, &(0x7f0000002680)=[{0xc0, 0x115, 0x3, "b2458b15ffc6a0e7c31c374c511b9ce18aa206a4db0b01eab83ea18c1ef0cabf8a0608a7484344932943fd23e5894322a671a7a29142420bbfc92d13d59906c79d6f87445e8ff1df4be732fa6ad49f8c3258403f8836fbcfe4208dcc21d06a085fffc0ac7b704586e10f953a55ef46e185a6c126c7e8ee12736190e147fbe4d24dcfb4ca839ee0c82f1b794262780c1b80b372a82266a7757510622cab565c1ecc88d2f97362c8bc3b091b9607cd2d8c97fd97"}, {0x100c, 0x110, 0xff, "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"}, {0x88, 0x10f, 0x7f, "00a84797ee109ef514c16b3284bcfaadb153c8d9a4445573a2478fff3d65a39edea559003169bfb33acdac03caada9f60b1c3e444f6653110d4b264fb7e2b45b42363dda2122b06bebc416f7c0347afd43ff972c0af2eeb7d8c3da1f54046a1d7d91444a8367649fcb532d96e5fdf3313a0b175dac1fa7b95d"}, {0xb4, 0x113, 0x6, "ecb9a3611dd05ab63d2fc670b9725b46b9294aab70a46b78af06df603c99ed8abb6d42e380506c1e8894ffcc923bfa569e0f8842b4ea53fd1c75143cd6b12f627bd2ae1a1768039430150c3e9db829351c4d58d7cb0bfc7201e86a20a91f85b80e3ca11965f4953181dee176cf1404fc1adb545a4260d7ea42c7ade2bd2c1e86e3864cc755adb6a4bc549a60dd125853d815be661d64a5e347ea4922be49980e223053c0e361"}], 0x1208}, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000003900)={@empty, 0x80000000, 0x1, 0x0, 0x9, 0x8, 0x5}, 0x20)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003980), r3)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb0bc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40015}, 0x20044014)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a80)={<r6=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000007700)=[{{&(0x7f0000003ac0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000003b40)=""/61, 0x3d}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/76, 0x4c}, {&(0x7f0000004c00)}, {&(0x7f0000004c40)=""/143, 0x8f}], 0x5, &(0x7f0000004d40)=""/4096, 0x1000}, 0x56}, {{&(0x7f0000005d40)=@qipcrtr, 0x80, &(0x7f0000007000)=[{&(0x7f0000005dc0)=""/68, 0x44}, {&(0x7f0000005e40)=""/23, 0x17}, {&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/157, 0x9d}, {&(0x7f0000006f40)=""/143, 0x8f}], 0x5}, 0x81}, {{&(0x7f0000007040)=@rc, 0x80, &(0x7f00000073c0)=[{&(0x7f00000070c0)=""/149, 0x95}, {&(0x7f0000007180)=""/19, 0x13}, {&(0x7f00000071c0)=""/224, 0xe0}, {&(0x7f00000072c0)=""/211, 0xd3}], 0x4, &(0x7f0000007400)=""/190, 0xbe}, 0xbccd}, {{&(0x7f00000074c0)=@sco, 0x80, &(0x7f0000007640)=[{&(0x7f0000007540)=""/216, 0xd8}], 0x1, &(0x7f0000007680)=""/93, 0x5d}, 0xffff}], 0x4, 0x1, &(0x7f0000007780))
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f00000077c0)=0x9)
syz_80211_inject_frame(&(0x7f0000007800), &(0x7f0000007840)=@ctrl_frame=@rts={{}, {0xc}, @broadcast, @broadcast}, 0x10)
syz_80211_inject_frame(&(0x7f0000007880)=@broadcast, &(0x7f00000078c0)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_b, @from_mac, {0x1, 0x3}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x8, @default, 0xd805, @void, @val={0x1, 0x5, [{0x3, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0xb}, {0x1, 0x1}]}, @val={0x3, 0x1, 0xa5}, @val={0x4, 0x6, {0xc, 0x48, 0x3, 0x1}}, @val={0x6, 0x2, 0x89}, @void, @void, @void, [{0xdd, 0x14, "1a59aacbdf5f7e2e7f2710c6c0b36d995e90071c"}, {0xdd, 0x5d, "1a747299a04f02da1f9d50b295c0e477df7eb86c0d50c20f0abd472440bdfafe4efebd74a1b1cadb4041d3570e49ce8de4cdac244edf28d222dd4790651d60cb9aa5f068107f01d19e6b8dc61bf58fddf067eb241d4e8f0ef4007593b5"}, {0xdd, 0x8f, "489ed90f08b0287c4a8bddb550a562a88218d78ac3984968efdbcaf8df3d677f4fb8a559e56f2c6b716c847d8a1c0a19b57ba2a84d4b6f105cdbedb68043bb2d80b4d092f1173be5ab20d86f3363640960721d3a271efef1319a57a9b7f528de90ab71d703021d537a409b00d2d918378d8ada1aa3bf11cf5b548c28fba5112fad231699fed73c3e78f342e5735895"}, {0xdd, 0x7d, "2c0c5a1c10019fcd669bdd94c6400d5951e29ea3e786a6036f00075252889488b98631b72e501785f6ee640d4f926c85cca807926c48d10540f9089e538f4efa110f60812fc5af32fe76167311581ec2118ef646a8725f2edf39dd67f57466490277be08e17303ca1ec65ecb7f60deb8b8e74ccc7b3afec4681dce4ece"}, {0xdd, 0x93, "f8a090c03220b89377f62f1ca5ce4db6c85993a6e1d2de35ba43c559dce04b1b051a4606b18e2b64174d70dca2ad0ee5cb88066d174f75a109f80adfbd6b7194c0f970e46ca2838be8d2dad9f95d5e20b70e9af86c53428d68b54aa5464113c81d4797bb9c1d5355df867903a96b438f9a0e05910cfc8cdf99079fd1d6d0ce2357546b88a12d498873ff0801bd9d2d2aa067d3"}, {0xdd, 0x9e, "452bfd6e4b52412e7109a2ab322d4da095dac320808fcb8a591ff31a0fde0be44f834fcb5ec5a0f5a864c049adae572688bc35dff845d5b5309917274bb68258df08ddc95575f140d845d2d84ea9b441d0ef35fb087ec510e9d8e2a2c6c1e20010547cb38743425edf9625c6380edc85f745e9a8dac94c1d90364e99525a9b73618bea8640fda9899bf9db1738bc7904b025c62061252577863c84159947"}, {0xdd, 0xa1, "b82a3342ffb99214fa09e8d7967b0b50ea34be960240060a4aa4c8a99961b62d614038773d827c7536aa7ba6e4615b2e0c8647f3b12496f9b92202b6c3270e89d8d369a3831d5ee6e637e75a75a269d879951a4b5afe57859fb6496ca66d4d4e21f8a6636d0b1e0f4a65c886d169b5bb9cd4b4647431d1dae3e0a5ad5080c7e031db96f998c75815343996da21ad6738dcab4a706ff44d19befebf21eaedcf19ca"}, {0xdd, 0x60, "8e27cffa5da672445bb7212546a4ba5e1cb6ff992928707b352f5a4440f03d4d5a065a98a25f135af411f9860742e1c0d6d5aee3ab3f2c59a457ad8a373ff1472e589b17a246ae1a821f4ba5600201f95156c84bad88d15de02ed8328f5fa388"}]}, 0x3fd)
read$FUSE(0xffffffffffffffff, &(0x7f0000007cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r3, &(0x7f0000009d00)={r0, r6, 0x1})
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000009d80), r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000009ec0)={&(0x7f0000009d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009e80)={&(0x7f0000009dc0)={0xac, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x2000004}, 0x40000000)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000009f00)={'veth1_vlan\x00'})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000009f80)={0x3, &(0x7f0000009f40)=[{0x7, 0x6, 0xb, 0x5}, {0xfff4, 0xff, 0x5, 0x9}, {0x4, 0xa0, 0x1, 0x8}]})
r11 = pidfd_getfd(r0, r10, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f000000a000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000a040)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f000000a140)={&(0x7f0000009fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f000000a100)={&(0x7f000000a080)={0x54, r12, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7, 0x23}}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x7, @val=0x4, @val=0x1, @val="6abad2638a26d22ba397221408a35098"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1111}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x800)
openat$kvm(0xffffff9c, &(0x7f000000a180), 0x202001, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f000000a200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(r14, &(0x7f000000a300)={&(0x7f000000a1c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000a2c0)={&(0x7f000000a280)={0x28, r15, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)

4m30.267738026s ago: executing program 0 (id=471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x1810c0, 0x0)
mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xb8003, 0x0)
stat(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="08000c8ef60ca31226580251a3c83ece66e2c3a1fc", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="147f", @ANYRES16=0x0, @ANYBLOB="02000000000000008000250000000600060002"], 0x1c}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x21})
r8 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r8, 0x8b32, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4)
r9 = socket$inet6_sctp(0xa, 0x514756dc70d1188d, 0x84)
r10 = socket(0x2, 0x80805, 0x0)
read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020)
sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r11=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r11, 0x5}, 0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000000c0)={r11, 0x41, 0x705ac1bd, 0x8}, &(0x7f0000000240)=0x10)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4m30.066467836s ago: executing program 0 (id=472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x6, 0x8000004, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x800)

4m29.896728772s ago: executing program 0 (id=476):
dup(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="180000003f0000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x74}}, 0x0)
bind$rxrpc(r4, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400150000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c72000e6c72000eea000000000000000f0000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10)
r9 = gettid()
kcmp(r9, r9, 0x6, r0, r8)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x24, 0x8, 0x8, 0xc0b, 0x10000, 0x3, 0x6, 0xffffffff}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

4m29.816296193s ago: executing program 32 (id=476):
dup(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="180000003f0000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x74}}, 0x0)
bind$rxrpc(r4, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400150000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c72000e6c72000eea000000000000000f0000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10)
r9 = gettid()
kcmp(r9, r9, 0x6, r0, r8)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x24, 0x8, 0x8, 0xc0b, 0x10000, 0x3, 0x6, 0xffffffff}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

2m34.270990018s ago: executing program 4 (id=1221):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async)
r2 = getpgid(0x0)
r3 = syz_pidfd_open(r2, 0x0)
pidfd_send_signal(r3, 0x21, 0x0, 0x4) (async)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x25, 0x0, &(0x7f00000000c0)=0xfffffffffffffce4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x100257})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_enter(r5, 0x2004000, 0x2, 0xf, &(0x7f0000000000), 0x18)

2m34.204361454s ago: executing program 4 (id=1223):
io_uring_setup(0x6b22, &(0x7f0000000bc0)={0x0, 0x0, 0x20, 0x3, 0x30e})
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r2 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x8000})
r4 = fcntl$dupfd(r3, 0x406, r3)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7", 0x20}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41ceaf0e9d85e44", 0x2b}], 0x2)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x8902}, 0x400c084)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r4})

2m33.190035619s ago: executing program 4 (id=1227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4)

2m33.07756385s ago: executing program 4 (id=1229):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGABS3F(r5, 0x8018457f, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r7 = socket$pppoe(0x18, 0x1, 0x0)
recvfrom(r7, &(0x7f0000000200)=""/158, 0x9e, 0x21, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r8, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
lseek(r8, 0x0, 0x4)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="0100020000000000000001000000"], 0x14}}, 0x4000800)

2m31.193634886s ago: executing program 4 (id=1242):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000200004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)

2m30.183344363s ago: executing program 4 (id=1244):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000140)={0x0, 0x0, r1}) (async)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x819, 0x205, 0x17, 0x7, 0x0, 0x60, 0x1, 0x0, 0xfffffffffffffffe}})

2m30.183096067s ago: executing program 33 (id=1244):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000140)={0x0, 0x0, r1}) (async)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x819, 0x205, 0x17, 0x7, 0x0, 0x60, 0x1, 0x0, 0xfffffffffffffffe}})

21.235853884s ago: executing program 3 (id=2123):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0xa000000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x8}, 0x94)

21.064731786s ago: executing program 3 (id=2124):
dup(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000090ff000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x74}}, 0x0)
bind$rxrpc(r4, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400150000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c72000e6c72000eea000000000000000f0000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10)
r9 = gettid()
kcmp(r9, r9, 0x6, r0, r8)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x24, 0x8, 0x8, 0xc0b, 0x10000, 0x3, 0x6, 0xffffffff}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

20.234088751s ago: executing program 1 (id=2131):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x397}, &(0x7f0000000180), &(0x7f0000000340))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000f074099d795b17620000000003000000000400000004000000ff010000005f7f5f6100"], &(0x7f0000000a80)=""/81, 0x36, 0x51, 0x0, 0xffff0000}, 0x28)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0x2020)
r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000b80), 0x400001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1a, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000863a0000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001af4ff070200000085100000faffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000000000000686000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x8, 0x57, &(0x7f0000000940)=""/87, 0x41000, 0x1, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000b40)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[r3, r4], &(0x7f0000000c00), 0x10, 0x3}, 0x94)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xcfc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20000109}, 0x1c)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
timer_create(0x6, &(0x7f0000000640)={0x0, 0x18, 0x0, @thr={&(0x7f0000000480), &(0x7f00000005c0)="0e2b850cb7746f1af405d6cc742c46671a848939dbf2cdba1bec3eed4cff3c17f0cb3cda35c961cbf6fdac2b40a4ba55f49e1ad1219660f7e65887cdaa4c009ed06e2f456a50afc7bd8d81bdccf4421939eb74f15d175ff352bdb1ff"}}, &(0x7f0000000680))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100776972656775617264000000040002"], 0x40}, 0x1, 0xd}, 0x0)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)
r6 = fcntl$dupfd(r0, 0x0, r0)
sendmmsg$inet6(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="8de9", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)="89", 0x1}], 0x1}}], 0x2, 0x40081)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/179, 0xb3, 0x0, 0x0}, &(0x7f0000000280)=0x40)
mkdir(&(0x7f0000000180)='./file0\x00', 0xb2)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$media(&(0x7f0000000000), 0x7f, 0x400000)
r9 = syz_open_dev$media(&(0x7f0000000080), 0x7, 0x20040)
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{}, {{<r10=>0x80000000}}]})
syz_open_dev$media(&(0x7f0000000700), 0x35, 0x14200)
ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc01c7c02, &(0x7f00000009c0)={r10, &(0x7f0000000100), &(0x7f0000000780)})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="40a08a7b03ab26f6000eb8914a2fd26fdc000000000000000000003ee200000000000000003556a2ac2faaf828579933fb41cba40972412a3ff1f4b7f02e1c935e89c0faf67c259dea39110492bed25026826d256fd27bfa2c767a672a6a3e85185306fb147cdcf2f40e4cdc99d837a1305a344616f3f41bcac2a631f98bf38e95e14aaadc2f2facb67ff39049737af5d8fb6e17", @ANYRES32=0x0, @ANYBLOB="6000000000400000140012800a00010069706f6962000000040002800a000100aaaaaaaaaa0f0000"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
umount2(&(0x7f0000000240)='./file0\x00', 0xc)

20.034550281s ago: executing program 3 (id=2132):
syz_open_dev$video(&(0x7f0000000000), 0x7f, 0x40000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpgrp(0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x141)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000100000000000000e1913294ae301842588a282d5e138600000000"], 0x48)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/reserved_size', 0x0, 0x50)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'veth0_macvtap\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x7ff}})
ioctl$TCXONC(r2, 0x540a, 0x1)
r4 = mq_open(0x0, 0x80, 0x1f0, 0x0)
connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x2, 0x2, {0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x288c}}}, 0x32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
clock_gettime(0x5, &(0x7f0000000000))
mq_unlink(&(0x7f0000000000)='eth0\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00100000", @ANYRES16=r6, @ANYBLOB="0d030000000000000003130000000c0009800800020004000000"], 0x20}}, 0x0)
close(r4)

19.820947113s ago: executing program 2 (id=2139):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100}) (async)
lseek(r1, 0x0, 0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x551e531b54736393, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000e000000000e6c13489d7ca6ba9ab5f71c47766", @ANYBLOB="9daf", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180002000000000000000000e5ba17725dab943ad908ac93"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x94) (async)
openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x4)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) (async)
openat$procfs(0xffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc04c561a, &(0x7f0000000400)=0x52e2038c55c5052e)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

19.7507662s ago: executing program 2 (id=2141):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r1 = socket(0x1e, 0x4, 0x0)
recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)

19.332978799s ago: executing program 1 (id=2143):
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@local, @multicast2, <r0=>0x0}, &(0x7f0000000380)=0xc)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x340, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+#*%\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ct\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7cbe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/rfkill\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, './*\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaa84}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "97d27793d091fe823c7e434d425c59c509c80c1268beb81cc03d018e70"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x21c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']!+-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x624}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'/@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x87}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$^,)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ife\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ife\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/rfkill\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ct\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}]}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "b14578763fd5d35b816c8258be363d3ce2b40fa0e1e08746"}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2438}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.-\xc3\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ife\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9d5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd87}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}]}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "11a2dacb0b2b7bdf85c3400172774f830df801a8793b622a4afcf56a01f33236a47b05cf42ced83a0aa1f061e67289a0330f820dcf2025922ec6da936b761eaf24247d90ce1e72c40db68c6ea1c921b59aeec3bcc381322c218a348f6b27f4f658a3f2112e510a5fcf8af3c0c45a44830e2560cad6bd3040d21fbd56a28a5dab66e789699c968513224c0222fd59d6f7"}]}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x6)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e})
r7 = accept4$inet(r5, 0x0, &(0x7f0000000280), 0x800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f0000000300))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @any, 0x1, 0x6}}}, 0xe)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x880)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$nci(r1, 0x0, 0x0)

18.780349135s ago: executing program 2 (id=2144):
socket$inet_sctp(0x2, 0x5, 0x84)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503000000000005240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

18.779839529s ago: executing program 2 (id=2145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$video4linux(&(0x7f0000002a80), 0xf7, 0x20040)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="34010000100001000000009f03f86f0000000000000000000000000000000000a714142e0000000000000000004000000000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000001000000000000000000004000000000000000000000000000000000000000000000000025bd7000000000000200000100000000480003006465666c61746500"/236], 0x134}}, 0xc040)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x1}, 0x4040051)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000100)}, 0x87)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$audio1(0xffffff9c, &(0x7f00000004c0), 0xd0083, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000500)=0xffffffff)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7fd}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)

18.724686197s ago: executing program 5 (id=2146):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)

18.66331006s ago: executing program 5 (id=2147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4)

18.564244745s ago: executing program 5 (id=2148):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x68, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000005}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000100)={0xa}, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast2}], 0x10)
sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, &(0x7f0000000280))
execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06<Z\x16\x94\x9a\xe6\x8d\x10Y-\xf9\xd1\x8a\x8e\xc8\x0f\x89<O>\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]})
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mq_notify(r5, &(0x7f0000000300)={0x0, 0x3e, 0x4, @tid=r0})

18.40451874s ago: executing program 1 (id=2149):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000000000000005005300010000"], 0x60}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x6c, r8, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4e}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3d}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x6d}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20014000}, 0x44)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
pipe2(0x0, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x402}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x1f000000)

18.104440951s ago: executing program 1 (id=2150):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x133d, 0x0, 0x8, 0x0, 0x0) (fail_nth: 22)

17.874681467s ago: executing program 1 (id=2151):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x397}, &(0x7f0000000180), &(0x7f0000000340))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000f074099d795b17620000000003000000000400000004000000ff010000005f7f5f6100"], &(0x7f0000000a80)=""/81, 0x36, 0x51, 0x0, 0xffff0000}, 0x28)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0x2020)
r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000b80), 0x400001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1a, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000863a0000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001af4ff070200000085100000faffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000000000000686000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x8, 0x57, &(0x7f0000000940)=""/87, 0x41000, 0x1, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000b40)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[r3, r4], &(0x7f0000000c00), 0x10, 0x3}, 0x94)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xcfc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20000109}, 0x1c)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
timer_create(0x6, &(0x7f0000000640)={0x0, 0x18, 0x0, @thr={&(0x7f0000000480), &(0x7f00000005c0)="0e2b850cb7746f1af405d6cc742c46671a848939dbf2cdba1bec3eed4cff3c17f0cb3cda35c961cbf6fdac2b40a4ba55f49e1ad1219660f7e65887cdaa4c009ed06e2f456a50afc7bd8d81bdccf4421939eb74f15d175ff352bdb1ff"}}, &(0x7f0000000680))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100776972656775617264000000040002"], 0x40}, 0x1, 0xd}, 0x0)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)
r6 = fcntl$dupfd(r0, 0x0, r0)
sendmmsg$inet6(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="8de9", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)="89", 0x1}], 0x1}}], 0x2, 0x40081)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/179, 0xb3, 0x0, 0x0}, &(0x7f0000000280)=0x40)
mkdir(&(0x7f0000000180)='./file0\x00', 0xb2)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$media(&(0x7f0000000000), 0x7f, 0x400000)
r9 = syz_open_dev$media(&(0x7f0000000080), 0x7, 0x20040)
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{}, {{<r10=>0x80000000}}]})
syz_open_dev$media(&(0x7f0000000700), 0x35, 0x14200)
ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc01c7c02, &(0x7f00000009c0)={r10, &(0x7f0000000100), &(0x7f0000000780)})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="40a08a7b03ab26f6000eb8914a2fd26fdc000000000000000000003ee200000000000000003556a2ac2faaf828579933fb41cba40972412a3ff1f4b7f02e1c935e89c0faf67c259dea39110492bed25026826d256fd27bfa2c767a672a6a3e85185306fb147cdcf2f40e4cdc99d837a1305a344616f3f41bcac2a631f98bf38e95e14aaadc2f2facb67ff39049737af5d8fb6e17", @ANYRES32=0x0, @ANYBLOB="6000000000400000140012800a00010069706f6962000000040002800a000100aaaaaaaaaa0f0000"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
umount2(&(0x7f0000000240)='./file0\x00', 0xc)

17.874454297s ago: executing program 2 (id=2152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, 0x0, 0x0, 0x4000014, &(0x7f000005ffe4)={0xa, 0x4e24, 0xfffffffc, @mcast1, 0x9}, 0xffcb)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b)
connect$vsock_stream(r6, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

17.594830419s ago: executing program 5 (id=2153):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r1 = socket(0x1e, 0x4, 0x0)
recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)

17.423424262s ago: executing program 3 (id=2154):
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002fffd00240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)

17.401464399s ago: executing program 2 (id=2155):
creat(0x0, 0xc3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x8, {0x2}, 0x1}, 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x801, 0x6, 0x8000, 0xc, 0x59c, 0xffffffffffffffff})
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup(0x22d1, 0x0)
close(r0)
ioctl$TCSETSW2(r2, 0x5425, 0x0)
unshare(0x68040200)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x3, 0xff}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000)

17.332903663s ago: executing program 3 (id=2156):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)={0x0, <r0=>0x0})
r1 = syz_open_procfs(r0, &(0x7f00000009c0)='net/tcp6\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000070a01020000000000000000000000030900010073797a3900000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x109142)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r7 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f0000000480)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})
ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={0x0, r8, r9, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0]})
futimesat(r6, 0x0, 0x0)
ioctl$CEC_DQEVENT(r6, 0x541b, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
r10 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TCFLSH(r10, 0x400455c8, 0x1)
ioctl$TIOCSETD(r10, 0x5412, 0x0)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0xdb)
connect$bt_rfcomm(r10, &(0x7f0000000400)={0x1f, @none, 0x2}, 0xa)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000340))
read$FUSE(r1, &(0x7f00000082c0)={0x2020}, 0x2020)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)
read$FUSE(r1, &(0x7f0000012400)={0x2020}, 0x2020)

17.015400083s ago: executing program 1 (id=2157):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000340)={@my=0x0})
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002020})
io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="737461636b203a007e1c2d901405008f51686a1b04e567ccd50b2dc767809e2f197b5315feba4faee17a2cde2d8f4b4e866793e4feae2f90d85e0514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa283347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf539a90f32ded6b74ed100700f19499e13f10dac7ed5b000000000000000000000000000000007a5f4b20a1ecda0c"], 0xb3)
readv(r7, 0x0, 0x0)
ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x200}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$pppl2tp(0x18, 0x1, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

16.462303631s ago: executing program 5 (id=2158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x80ffff}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x3f0c7e60d599d4a1}, 0x94)

16.084129984s ago: executing program 5 (id=2159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0xf0, 0x0, 0x4c840}, 0x800)

15.184414305s ago: executing program 3 (id=2160):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040001400000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1.979161567s ago: executing program 34 (id=2157):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000340)={@my=0x0})
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002020})
io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="737461636b203a007e1c2d901405008f51686a1b04e567ccd50b2dc767809e2f197b5315feba4faee17a2cde2d8f4b4e866793e4feae2f90d85e0514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa283347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf539a90f32ded6b74ed100700f19499e13f10dac7ed5b000000000000000000000000000000007a5f4b20a1ecda0c"], 0xb3)
readv(r7, 0x0, 0x0)
ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x200}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$pppl2tp(0x18, 0x1, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

1.976271843s ago: executing program 35 (id=2155):
creat(0x0, 0xc3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x8, {0x2}, 0x1}, 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x801, 0x6, 0x8000, 0xc, 0x59c, 0xffffffffffffffff})
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup(0x22d1, 0x0)
close(r0)
ioctl$TCSETSW2(r2, 0x5425, 0x0)
unshare(0x68040200)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x3, 0xff}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000)

953.919696ms ago: executing program 36 (id=2159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0xf0, 0x0, 0x4c840}, 0x800)

0s ago: executing program 37 (id=2160):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040001400000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

kernel console output (not intermixed with test programs):

equest failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  193.871564][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  193.883180][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  194.027833][ T9311] syzkaller0: entered promiscuous mode
[  194.029630][ T9311] syzkaller0: entered allmulticast mode
[  194.096014][ T9312] wireguard0: entered promiscuous mode
[  194.097915][ T9312] wireguard0: entered allmulticast mode
[  195.443036][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.922'.
[  195.608693][ T9345] netlink: 'syz.2.924': attribute type 1 has an invalid length.
[  195.614304][ T9345] netlink: 224 bytes leftover after parsing attributes in process `syz.2.924'.
[  195.646675][ T9348] netlink: 'syz.3.927': attribute type 8 has an invalid length.
[  195.778839][ T9353] ecryptfs: Unknown parameter 'fd'
[  195.923127][ T7533] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  196.094251][ T7533] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  196.097130][ T7533] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  196.100309][ T7533] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  196.103361][ T7533] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  196.106621][ T7533] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  196.112175][ T7533] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  196.116025][ T7533] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  196.119329][ T7533] usb 8-1: Product: syz
[  196.121078][ T7533] usb 8-1: Manufacturer: syz
[  196.128820][ T7533] cdc_wdm 8-1:1.0: skipping garbage
[  196.130991][ T7533] cdc_wdm 8-1:1.0: skipping garbage
[  196.135974][ T7533] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  196.138470][ T7533] cdc_wdm 8-1:1.0: Unknown control protocol
[  196.454965][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.457042][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.459151][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.461189][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.463303][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.465370][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.467413][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.469506][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.472817][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.474901][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.477104][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.479663][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.482228][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.484868][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.487479][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.490081][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.492796][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.495401][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.497894][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  196.500007][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  196.509954][ T7533] usb 8-1: USB disconnect, device number 12
[  196.510005][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  196.704669][ T9372] 8021q: VLANs not supported on ip6tnl0
[  196.749678][   T40] kauditd_printk_skb: 1027 callbacks suppressed
[  196.749694][   T40] audit: type=1326 audit(2000000094.689:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.773375][   T40] audit: type=1326 audit(2000000094.689:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.780634][   T40] audit: type=1326 audit(2000000094.699:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.788100][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'.
[  196.803091][   T40] audit: type=1326 audit(2000000094.699:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.811761][   T40] audit: type=1326 audit(2000000094.699:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.824965][   T40] audit: type=1326 audit(2000000094.699:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.834001][   T40] audit: type=1326 audit(2000000094.699:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.842488][   T40] audit: type=1326 audit(2000000094.699:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.853511][   T40] audit: type=1326 audit(2000000094.699:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000
[  196.861874][   T40] audit: type=1326 audit(2000000094.699:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.4.931" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000
[  197.033008][ T9383] xt_CT: You must specify a L4 protocol and not use inversions on it
[  197.385532][ T9387] wireguard0: entered promiscuous mode
[  197.387519][ T9387] wireguard0: entered allmulticast mode
[  197.393940][ T9389] netlink: 'syz.4.940': attribute type 1 has an invalid length.
[  197.396884][ T9389] netlink: 224 bytes leftover after parsing attributes in process `syz.4.940'.
[  198.067345][ T9406] usb usb8: usbfs: process 9406 (syz.1.947) did not claim interface 0 before use
[  198.197970][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'.
[  198.432654][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'.
[  199.486886][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'.
[  200.625561][ T9467] sp0: Synchronizing with TNC
[  200.657923][ T9466] sp1: Synchronizing with TNC
[  201.720005][ T9503] set match dimension is over the limit!
[  201.904788][ T9502] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  202.179567][ T9507] tap0: tun_chr_ioctl cmd 2147767521
[  202.571966][ T9531] netlink: 'syz.1.983': attribute type 2 has an invalid length.
[  206.276981][ T9570] netlink: 'syz.1.996': attribute type 1 has an invalid length.
[  206.280094][ T9570] netlink: 224 bytes leftover after parsing attributes in process `syz.1.996'.
[  206.393760][ T9564] sp0: Synchronizing with TNC
[  206.836769][ T9589] netlink: 'syz.4.999': attribute type 1 has an invalid length.
[  206.839499][ T9589] netlink: 224 bytes leftover after parsing attributes in process `syz.4.999'.
[  206.844055][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'.
[  206.889367][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'.
[  207.291974][ T9605] xt_CT: You must specify a L4 protocol and not use inversions on it
[  208.290046][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'.
[  209.995230][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'.
[  210.155998][ T8299] team0: left allmulticast mode
[  210.158231][ T8299] vlan0: left allmulticast mode
[  210.161156][ T8299] bridge0: port 1(team0) entered disabled state
[  210.425833][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'.
[  210.594526][ T8299] bond0 (unregistering): Released all slaves
[  210.717686][ T8299] : left promiscuous mode
[  210.978069][ T8299] tipc: Disabling bearer <eth:team0>
[  210.981029][ T8299] tipc: Left network mode
[  211.465916][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  211.468982][ T9713] netlink: 'syz.2.1030': attribute type 5 has an invalid length.
[  211.471751][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'.
[  211.725740][ T9713] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  211.729093][ T9713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  211.732690][ T9713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  211.736319][ T9713] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  211.740127][ T9713] geneve2: entered promiscuous mode
[  211.743475][ T9713] geneve2: entered allmulticast mode
[  211.762325][ T9726] random: crng reseeded on system resumption
[  213.224804][ T8299] hsr_slave_0: left promiscuous mode
[  213.233821][ T8299] hsr_slave_1: left promiscuous mode
[  213.516249][ T8299] team0 (unregistering): Port device vlan0 removed
[  214.137203][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1041'.
[  215.793361][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  215.797413][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  215.800971][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  215.804411][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  215.807730][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  215.811051][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  215.823783][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  217.186986][ T9825] netlink: 'syz.3.1052': attribute type 39 has an invalid length.
[  217.260047][ T9830] overlayfs: conflicting lowerdir path
[  218.170254][ T9852] 9pnet_fd: Insufficient options for proto=fd
[  218.245963][ T9857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  218.248738][ T9857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  218.251957][ T9857] vhci_hcd vhci_hcd.0: Device attached
[  218.273372][ T9858] vhci_hcd: connection closed
[  218.273544][ T8299] vhci_hcd: stop threads
[  218.288177][ T8299] vhci_hcd: release socket
[  218.291434][ T8299] vhci_hcd: disconnect device
[  218.350652][ T9863] syzkaller0: entered promiscuous mode
[  218.352388][ T9863] syzkaller0: entered allmulticast mode
[  219.311488][ T9877] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007
[  219.441467][ T9880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  219.443652][ T9880] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  219.446680][ T9880] vhci_hcd vhci_hcd.0: Device attached
[  219.459300][ T9881] vhci_hcd: connection closed
[  219.460473][ T8307] vhci_hcd: stop threads
[  219.464108][ T8307] vhci_hcd: release socket
[  219.466167][ T8307] vhci_hcd: disconnect device
[  219.508767][ T9871] netlink: 'syz.1.1062': attribute type 4 has an invalid length.
[  219.670233][ T9889] __nla_validate_parse: 13 callbacks suppressed
[  219.670246][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1066'.
[  219.721488][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'.
[  219.780630][ T9894] =======================================================
[  219.780630][ T9894] WARNING: The mand mount option has been deprecated and
[  219.780630][ T9894]          and is ignored by this kernel. Remove the mand
[  219.780630][ T9894]          option from the mount to silence this warning.
[  219.780630][ T9894] =======================================================
[  219.791655][ T9894] overlayfs: conflicting options: userxattr,redirect_dir=on
[  220.283042][ T6024] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  220.453474][ T6024] usb 9-1: Using ep0 maxpacket: 16
[  220.458363][ T6024] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  220.472413][ T6024] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  220.477716][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.487608][ T6024] usb 9-1: config 0 descriptor??
[  220.505774][ T6024] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input20
[  220.764842][ T9928] netlink: 'syz.4.1070': attribute type 4 has an invalid length.
[  221.544192][ T6024] bcm5974 9-1:0.0: could not read from device
[  221.625946][ T5354] bcm5974 9-1:0.0: could not read from device
[  221.630009][ T6024] input: failed to attach handler mousedev to device input20, error: -5
[  221.633856][ T5354] bcm5974 9-1:0.0: could not read from device
[  221.634286][ T6024] usb 9-1: USB disconnect, device number 5
[  222.177439][ T9957] vlan1: entered promiscuous mode
[  222.179512][ T9957] vlan1: entered allmulticast mode
[  222.181174][ T9957] veth0_vlan: entered allmulticast mode
[  222.280179][ T9960] wireguard0: entered promiscuous mode
[  222.282155][ T9960] wireguard0: entered allmulticast mode
[  222.996632][ T9980] set match dimension is over the limit!
[  223.095934][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  223.098767][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  223.101589][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  223.105118][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  223.107980][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  223.111496][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  223.114806][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  223.117935][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'.
[  224.391777][   T40] kauditd_printk_skb: 90 callbacks suppressed
[  224.391788][   T40] audit: type=1326 audit(2000000122.309:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.403654][   T40] audit: type=1326 audit(2000000122.309:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.416240][   T40] audit: type=1326 audit(2000000122.309:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.422879][   T40] audit: type=1326 audit(2000000122.309:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.446827][T10031] pim6reg: entered allmulticast mode
[  224.749662][   T40] audit: type=1326 audit(2000000122.309:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.757371][   T40] audit: type=1326 audit(2000000122.309:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.769447][   T40] audit: type=1326 audit(2000000122.309:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.778388][   T40] audit: type=1326 audit(2000000122.309:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.871103][T10038] __nla_validate_parse: 13 callbacks suppressed
[  224.871114][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1108'.
[  224.877024][T10038] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1108'.
[  224.880755][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'.
[  224.893079][   T40] audit: type=1326 audit(2000000122.309:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  224.900518][   T40] audit: type=1326 audit(2000000122.309:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.2.1106" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  225.226686][T10026] pim6reg: left allmulticast mode
[  225.412043][T10049] 8021q: VLANs not supported on wg2
[  225.711278][T10063] loop7: detected capacity change from 0 to 7
[  226.153442][T10063] Dev loop7: unable to read RDB block 7
[  226.159364][T10063]  loop7: unable to read partition table
[  226.167598][T10063] loop7: partition table beyond EOD, truncated
[  226.174639][T10063] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  226.308386][T10074] syzkaller0: entered promiscuous mode
[  226.310677][T10074] syzkaller0: entered allmulticast mode
[  227.118634][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'.
[  228.836434][T10138] wireguard0: entered promiscuous mode
[  228.838322][T10138] wireguard0: entered allmulticast mode
[  229.301023][T10156] FAULT_INJECTION: forcing a failure.
[  229.301023][T10156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.305247][T10156] CPU: 1 UID: 0 PID: 10156 Comm: syz.4.1138 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  229.305274][T10156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  229.305280][T10156] Call Trace:
[  229.305285][T10156]  <TASK>
[  229.305289][T10156]  dump_stack_lvl+0x16c/0x1f0
[  229.305326][T10156]  should_fail_ex+0x512/0x640
[  229.305348][T10156]  _copy_from_user+0x2e/0xd0
[  229.305366][T10156]  __sys_bpf+0x21d/0x4d80
[  229.305375][T10156]  ? rcu_is_watching+0x12/0xc0
[  229.305387][T10156]  ? trace_sched_exit_tp+0x40/0x130
[  229.305401][T10156]  ? __pfx___sys_bpf+0x10/0x10
[  229.305408][T10156]  ? __schedule+0x1181/0x5de0
[  229.305422][T10156]  ? ksys_write+0x190/0x250
[  229.305449][T10156]  ? fput+0x70/0xf0
[  229.305458][T10156]  ? ksys_write+0x1ac/0x250
[  229.305476][T10156]  __ia32_sys_bpf+0x76/0xe0
[  229.305486][T10156]  __do_fast_syscall_32+0x7c/0x3a0
[  229.305504][T10156]  do_fast_syscall_32+0x32/0x80
[  229.305519][T10156]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  229.305533][T10156] RIP: 0023:0xf705e579
[  229.305541][T10156] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  229.305551][T10156] RSP: 002b:00000000f500c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  229.305561][T10156] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140
[  229.305568][T10156] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  229.305573][T10156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  229.305579][T10156] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  229.305585][T10156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  229.305603][T10156]  </TASK>
[  230.248124][T10187] vivid-002: =================  START STATUS  =================
[  230.250974][T10187] vivid-002: Radio HW Seek Mode: Bounded
[  230.252850][T10187] vivid-002: Radio Programmable HW Seek: false
[  230.270016][T10187] vivid-002: RDS Rx I/O Mode: Block I/O
[  230.271772][T10187] vivid-002: Generate RBDS Instead of RDS: false
[  230.281834][T10187] vivid-002: RDS Reception: true
[  230.288914][T10187] vivid-002: RDS Program Type: 0 inactive
[  230.290716][T10187] vivid-002: RDS PS Name:  inactive
[  230.292345][T10187] vivid-002: RDS Radio Text:  inactive
[  230.320657][T10187] vivid-002: RDS Traffic Announcement: false inactive
[  230.322813][T10187] vivid-002: RDS Traffic Program: false inactive
[  230.337019][T10187] vivid-002: RDS Music: false inactive
[  230.349778][T10187] vivid-002: ==================  END STATUS  ==================
[  230.685251][    C3] ata1: illegal qc_active transition (00000000->00002000)
[  231.043677][ T1106] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  231.048234][ T1106] ata1.00: configured for UDMA/100
[  231.500611][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'.
[  231.863188][   T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  232.222103][   T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  232.263773][   T29] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  232.269687][   T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  232.273234][   T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  232.276673][   T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  232.281516][   T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  232.284545][   T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  232.287079][   T29] usb 7-1: Product: syz
[  232.288479][   T29] usb 7-1: Manufacturer: syz
[  232.293175][   T29] cdc_wdm 7-1:1.0: skipping garbage
[  232.294910][   T29] cdc_wdm 7-1:1.0: skipping garbage
[  232.298876][   T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  232.300804][   T29] cdc_wdm 7-1:1.0: Unknown control protocol
[  232.721782][T10254] gtp1: entered promiscuous mode
[  232.870661][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'.
[  232.893882][T10263] 9pnet: p9_errstr2errno: server reported unknown error 
[  232.898864][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'.
[  232.965483][T10269] loop7: detected capacity change from 0 to 7
[  233.327814][   T29] usb 7-1: USB disconnect, device number 9
[  233.506083][T10269] Dev loop7: unable to read RDB block 7
[  233.508803][T10269]  loop7: unable to read partition table
[  233.511433][T10269] loop7: partition table beyond EOD, truncated
[  233.516627][T10269] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  234.188381][T10304] syzkaller0: entered promiscuous mode
[  234.193152][T10304] syzkaller0: entered allmulticast mode
[  235.442679][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'.
[  235.896305][T10325] veth1_vlan: left allmulticast mode
[  235.973962][   T40] kauditd_printk_skb: 79 callbacks suppressed
[  235.973979][   T40] audit: type=1326 audit(2000000133.919:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1188" exe="/syz-executor" sig=31 arch=40000003 syscall=172 compat=1 ip=0xf7f12579 code=0x0
[  236.231437][T10352] tipc: Resetting bearer <eth:ip6gre0>
[  236.248901][T10352] tipc: Resetting bearer <eth:team0>
[  236.333092][ T7533] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  236.379260][T10352] vlan0: left promiscuous mode
[  236.381601][T10352] vlan1: left promiscuous mode
[  236.386310][T10352] vlan1: left allmulticast mode
[  236.388468][T10352] veth0_vlan: left allmulticast mode
[  236.420827][T10352] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.425149][T10352] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.428842][T10352] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.432455][T10352] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.456648][T10352] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  236.459557][T10352] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  236.462857][T10352] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  236.467446][T10352] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  236.471691][T10352] geneve2: left promiscuous mode
[  236.473936][T10352] geneve2: left allmulticast mode
[  236.478091][T10352] bridge2: left promiscuous mode
[  236.480327][T10352] bridge2: left allmulticast mode
[  236.482796][T10352] bridge3: left promiscuous mode
[  236.484953][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'.
[  236.489010][T10352] bridge3: left allmulticast mode
[  236.494905][T10352] gtp1: left promiscuous mode
[  236.496247][ T7533] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  236.500591][ T7533] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  236.504152][ T7533] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  236.507201][ T7533] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  236.510626][ T7533] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  236.515487][ T7533] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  236.519055][ T7533] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  236.521545][ T7533] usb 9-1: Product: syz
[  236.522886][ T7533] usb 9-1: Manufacturer: syz
[  236.530518][ T7533] cdc_wdm 9-1:1.0: skipping garbage
[  236.532215][ T7533] cdc_wdm 9-1:1.0: skipping garbage
[  236.541019][ T7533] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  236.544211][ T7533] cdc_wdm 9-1:1.0: Unknown control protocol
[  236.844970][    C3] wdm_int_callback: 28 callbacks suppressed
[  236.844990][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  236.847101][ T6024] usb 9-1: USB disconnect, device number 6
[  236.847452][    C3] wdm_int_callback: 28 callbacks suppressed
[  236.847467][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  236.857090][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  236.962787][T10368] usb usb8: usbfs: process 10368 (syz.3.1199) did not claim interface 0 before use
[  237.007942][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'.
[  237.132727][T10377] netlink: 'syz.2.1202': attribute type 4 has an invalid length.
[  237.370315][T10384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  238.399375][T10405] mkiss: ax0: crc mode is auto.
[  239.068213][T10430] netlink: 'syz.3.1214': attribute type 1 has an invalid length.
[  239.071438][T10430] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1214'.
[  240.334617][T10451] mkiss: ax0: crc mode is auto.
[  240.758077][T10472] loop1: detected capacity change from 0 to 524287999
[  241.586323][T10469] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  241.589401][T10469] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  241.590527][T10478] overlayfs: failed to clone lowerpath
[  241.763626][T10487] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  241.766667][T10487] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1228'.
[  242.023013][ T6024] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  243.614736][ T5967] Bluetooth: hci1: command 0x0c1a tx timeout
[  243.617075][ T5960] Bluetooth: hci3: command 0x041b tx timeout
[  243.731182][T10528] netlink: 'syz.2.1243': attribute type 1 has an invalid length.
[  243.736857][T10528] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1243'.
[  243.824487][ T7241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.827922][ T7241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  243.930564][ T7241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.934171][ T7241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  243.982830][ T7241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.986147][ T7241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  244.073975][ T7241] vlan2 (unregistering): left allmulticast mode
[  244.076541][ T7241] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[  244.080433][ T7241] vlan2 (unregistering): left promiscuous mode
[  244.084840][ T7241] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  244.089367][ T7241] bridge0: port 1(vlan2) entered disabled state
[  244.097992][ T7241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.101179][ T7241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  244.493165][ T7241] team0: Port device bridge2 removed
[  244.567156][ T7241] team0: Port device bridge3 removed
[  244.690321][ T7241] bond0 (unregistering): Released all slaves
[  244.709049][T10535] netlink: 'syz.1.1248': attribute type 11 has an invalid length.
[  244.712695][T10535] netlink: 'syz.1.1248': attribute type 27 has an invalid length.
[  244.718570][T10535] gretap0: left promiscuous mode
[  244.723749][T10535] batman_adv: batadv0: Interface deactivated: ªªªªªª
[  244.749620][T10535] vlan0: left promiscuous mode
[  244.751313][T10535] vlan1: left promiscuous mode
[  244.752875][T10535] vlan1: left allmulticast mode
[  244.755518][T10535] veth0_vlan: left allmulticast mode
[  244.757870][T10535] macvlan0: left allmulticast mode
[  244.774410][T10535] bridge1: left promiscuous mode
[  244.776470][T10535] bridge1: left allmulticast mode
[  244.780674][T10535] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  244.788217][T10535] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  244.791100][T10535] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  244.794318][T10535] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  244.803443][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'.
[  244.811047][T10535] geneve2: left promiscuous mode
[  244.816464][T10535] geneve2: left allmulticast mode
[  244.847784][ T7241] tipc: Disabling bearer <eth:team0>
[  244.850439][ T7241] tipc: Left network mode
[  244.971820][T10539] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.994323][T10539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.137743][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  245.140775][T10553] openvswitch: netlink: Flow actions attr not present in new flow.
[  245.147480][T10553] Bluetooth: MGMT ver 1.23
[  245.158306][ T7241] hsr_slave_0: left promiscuous mode
[  245.161892][ T7241] hsr_slave_1: left promiscuous mode
[  245.186175][ T7241] veth1_macvtap: left promiscuous mode
[  245.192411][ T7241] veth0_macvtap: left promiscuous mode
[  245.195591][ T7241] veth1_vlan: left promiscuous mode
[  245.395492][ T7241] team0 (unregistering): Port device macvlan0 removed
[  245.416070][ T7241] team0 (unregistering): Port device vlan0 removed
[  245.804375][ T5967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.811842][ T5967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.826505][ T5967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.835262][ T5967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.842556][ T5967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.720325][T10553] netlink: 'syz.1.1250': attribute type 29 has an invalid length.
[  246.722783][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'.
[  246.883298][T10583] netlink: 'syz.3.1254': attribute type 1 has an invalid length.
[  246.885727][T10583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1254'.
[  246.911316][T10569] chnl_net:caif_netlink_parms(): no params data found
[  246.995009][T10569] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.997242][T10569] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.999496][T10569] bridge_slave_0: entered allmulticast mode
[  247.004353][T10569] bridge_slave_0: entered promiscuous mode
[  247.007865][T10569] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.022008][T10601] netlink: 'syz.2.1257': attribute type 1 has an invalid length.
[  247.023083][T10569] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.026942][T10569] bridge_slave_1: entered allmulticast mode
[  247.029557][T10569] bridge_slave_1: entered promiscuous mode
[  247.073285][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'.
[  247.098900][T10569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.121963][T10601] 8021q: adding VLAN 0 to HW filter on device bond2
[  247.125457][T10601] bond1: (slave bond2): making interface the new active one
[  247.128112][T10601] bond1: (slave bond2): Enslaving as an active interface with an up link
[  247.133995][T10569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.182382][T10569] team0: Port device team_slave_0 added
[  247.187274][T10569] team0: Port device team_slave_1 added
[  247.238744][T10569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.241768][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.251530][T10569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.256038][T10569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.258213][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.266696][T10569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.325121][T10617] wireguard0: entered promiscuous mode
[  247.326975][T10617] wireguard0: entered allmulticast mode
[  247.933103][ T5967] Bluetooth: hci3: command tx timeout
[  248.171873][T10569] hsr_slave_0: entered promiscuous mode
[  248.175459][T10569] hsr_slave_1: entered promiscuous mode
[  248.178411][T10569] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.181583][T10569] Cannot create hsr debugfs directory
[  248.398068][T10643] bridge7: entered promiscuous mode
[  248.399762][T10643] bridge7: entered allmulticast mode
[  248.480866][T10569] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  248.495672][T10569] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  248.500006][T10569] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  248.505496][T10569] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  248.619968][T10569] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.652370][T10569] 8021q: adding VLAN 0 to HW filter on device team0
[  248.670464][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.673730][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.685022][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.687289][ T8313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.909319][T10569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.108812][T10569] veth0_vlan: entered promiscuous mode
[  249.121385][T10569] veth1_vlan: entered promiscuous mode
[  249.145517][T10569] veth0_macvtap: entered promiscuous mode
[  249.150093][T10569] veth1_macvtap: entered promiscuous mode
[  249.167043][T10569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.184975][T10569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.189229][T10569] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.191921][T10569] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.196950][T10569] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.199725][T10569] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.269841][ T7248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.272385][ T7248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.306568][ T7248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.309040][ T7248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.606038][T10713] netlink: 'syz.1.1268': attribute type 1 has an invalid length.
[  249.608728][T10713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1268'.
[  250.013337][ T5960] Bluetooth: hci3: command tx timeout
[  250.394345][T10698] /dev/sr0: Can't open blockdev
[  250.426739][   T40] audit: type=1326 audit(2000000148.339:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10705 comm="syz.5.1269" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0
[  250.486885][T10712] Cannot find set identified by id 0 to match
[  250.690260][T10728] xt_hashlimit: size too large, truncated to 1048576
[  250.761163][   T40] audit: type=1326 audit(2000000148.699:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.2.1271" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x0
[  250.934668][T10742] set match dimension is over the limit!
[  250.948613][T10744] netlink: 'syz.5.1276': attribute type 10 has an invalid length.
[  250.951107][T10744] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1276'.
[  250.955580][T10744] batman_adv: batadv0: Adding interface: virt_wifi0
[  250.958566][T10744] batman_adv: batadv0: Interface activated: virt_wifi0
[  250.991244][T10748] netlink: 'syz.3.1280': attribute type 10 has an invalid length.
[  250.999288][T10748] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  251.167003][T10764] xt_CT: You must specify a L4 protocol and not use inversions on it
[  251.211957][T10768] macvlan0: entered allmulticast mode
[  251.215421][T10768] veth1_vlan: entered allmulticast mode
[  251.222496][T10768] team0: Port device macvlan0 added
[  251.277584][T10771] netlink: 'syz.5.1287': attribute type 11 has an invalid length.
[  251.486183][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.526912][T10784] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  251.529018][T10784] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  251.531443][T10784] vhci_hcd vhci_hcd.0: Device attached
[  251.613199][ T7533] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  251.735044][T10785] vhci_hcd: connection closed
[  251.735589][ T8313] vhci_hcd: stop threads
[  251.738617][ T8313] vhci_hcd: release socket
[  251.740582][ T8313] vhci_hcd: disconnect device
[  251.774292][ T7537] usb 47-1: new high-speed USB device number 2 using vhci_hcd
[  251.776740][ T7537] usb 47-1: enqueue for inactive port 0
[  251.783360][ T7533] usb 8-1: Using ep0 maxpacket: 8
[  251.786145][ T7533] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  251.788708][ T7533] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  251.791788][ T7533] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  251.795810][ T7533] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  251.798903][ T7533] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  251.803425][ T7533] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  251.806197][ T7533] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.835533][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'.
[  251.843223][ T7537] vhci_hcd: vhci_device speed not set
[  252.093047][ T5967] Bluetooth: hci3: command tx timeout
[  252.493350][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.725961][ T7533] usb 8-1: usb_control_msg returned -71
[  252.734309][ T7533] usbtmc 8-1:16.0: can't read capabilities
[  252.741620][T10812] netlink: 'syz.2.1300': attribute type 4 has an invalid length.
[  252.753654][ T7533] usb 8-1: USB disconnect, device number 13
[  252.895561][ T7707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.132576][T10830] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  253.223379][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.543322][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.663114][ T7533] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  253.694701][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.833011][ T7533] usb 8-1: Using ep0 maxpacket: 16
[  253.836640][ T7533] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  253.840942][ T7533] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  253.844678][ T7533] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.855104][ T7533] usb 8-1: config 0 descriptor??
[  253.859027][ T7533] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21
[  254.120430][T10856] netlink: 'syz.3.1308': attribute type 4 has an invalid length.
[  254.185131][ T5967] Bluetooth: hci3: command tx timeout
[  254.573474][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.733246][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.911953][ T5354] bcm5974 8-1:0.0: could not read from device
[  254.917421][ T7533] bcm5974 8-1:0.0: could not read from device
[  254.923447][ T7533] input: failed to attach handler mousedev to device input21, error: -5
[  254.933425][ T5354] bcm5974 8-1:0.0: could not read from device
[  254.943211][ T7533] usb 8-1: USB disconnect, device number 14
[  254.946298][ T5354] bcm5974 8-1:0.0: could not read from device
[  254.963405][ T6024] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  254.975586][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1314'.
[  254.978437][T10868] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1314'.
[  254.981203][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'.
[  255.116161][ T6024] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  255.119443][ T6024] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  255.122585][ T6024] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  255.130844][ T6024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  255.134425][ T6024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  255.134673][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1316'.
[  255.140407][ T6024] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  255.146599][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  255.148674][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  255.152051][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  255.154991][ T6024] usb 7-1: Product: syz
[  255.156775][ T6024] usb 7-1: Manufacturer: syz
[  255.167492][ T6024] cdc_wdm 7-1:1.0: skipping garbage
[  255.169752][ T6024] cdc_wdm 7-1:1.0: skipping garbage
[  255.181639][ T6024] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  255.184014][ T6024] cdc_wdm 7-1:1.0: Unknown control protocol
[  255.470111][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  255.470637][ T6024] usb 7-1: USB disconnect, device number 10
[  255.472164][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  255.472175][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  255.472309][T10884] cdc_wdm 7-1:1.0: Tx URB error: -19
[  255.623031][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.773755][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'.
[  256.355160][T10910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.358900][T10910] syzkaller0: entered promiscuous mode
[  256.360710][T10910] syzkaller0: entered allmulticast mode
[  256.385618][T10910] tipc: Resetting bearer <eth:syzkaller0>
[  256.483340][T10909] tipc: Resetting bearer <eth:syzkaller0>
[  256.603606][T10909] tipc: Disabling bearer <eth:syzkaller0>
[  256.656942][ T7537] net_ratelimit: 1 callbacks suppressed
[  256.656953][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.726485][   T40] audit: type=1326 audit(2000000154.669:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.731155][T10923] overlayfs: conflicting lowerdir path
[  256.739979][   T40] audit: type=1326 audit(2000000154.679:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.776959][   T40] audit: type=1326 audit(2000000154.689:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.783754][   T40] audit: type=1326 audit(2000000154.689:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.790536][   T40] audit: type=1326 audit(2000000154.689:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.803236][   T40] audit: type=1326 audit(2000000154.689:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.809817][   T40] audit: type=1326 audit(2000000154.689:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.818198][   T40] audit: type=1326 audit(2000000154.689:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.825564][   T40] audit: type=1326 audit(2000000154.699:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.832169][   T40] audit: type=1326 audit(2000000154.699:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.2.1332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000
[  256.897506][T10930] loop7: detected capacity change from 0 to 7
[  256.950734][T10933] netlink: 'syz.1.1336': attribute type 2 has an invalid length.
[  257.003076][ T6024] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  257.154324][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1339'.
[  257.163168][ T6024] usb 10-1: Using ep0 maxpacket: 8
[  257.166814][ T6024] usb 10-1: config 0 interface 0 has no altsetting 0
[  257.169310][ T6024] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  257.172987][ T6024] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.177872][ T6024] usb 10-1: config 0 descriptor??
[  257.209138][T10930] Dev loop7: unable to read RDB block 7
[  257.210968][T10930]  loop7: unable to read partition table
[  257.212811][T10930] loop7: partition table beyond EOD, truncated
[  257.243141][T10930] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  257.601859][ T6024] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  257.693593][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.719307][T10965] wireguard0: entered promiscuous mode
[  257.721262][T10965] wireguard0: entered allmulticast mode
[  257.990009][ T5775] usb 10-1: USB disconnect, device number 2
[  258.122539][T10980] netlink: 'syz.5.1352': attribute type 1 has an invalid length.
[  258.126985][T10980] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1352'.
[  258.734545][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.773079][T10991] 9p: Unknown Cache mode or invalid value fscach
[  258.983154][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.116502][T11008] Cannot find set identified by id 0 to match
[  259.321923][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'.
[  259.391929][T11015] bridge0: entered promiscuous mode
[  259.457049][T11015] vlan2: entered promiscuous mode
[  259.502216][T11015] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  259.776674][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.913176][T11028] usb usb8: usbfs: process 11028 (syz.2.1362) did not claim interface 0 before use
[  260.306848][ T5775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.373451][T11054] bridge_slave_0: left allmulticast mode
[  260.375832][T11054] bridge_slave_0: left promiscuous mode
[  260.395238][T11054] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.406276][T11054] bridge_slave_1: left allmulticast mode
[  260.408545][T11054] bridge_slave_1: left promiscuous mode
[  260.416517][T11054] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.434020][T11054] bond0: (slave bond_slave_0): Releasing backup interface
[  260.454896][T11054] bond0: (slave bond_slave_1): Releasing backup interface
[  260.480093][T11054] team0: Port device team_slave_0 removed
[  260.492655][T11058] trusted_key: encrypted_key: insufficient parameters specified
[  260.507830][T11054] team0: Port device team_slave_1 removed
[  260.510090][T11054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.512453][T11054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.515823][T11054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.518211][T11054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.522169][T11054] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  260.524329][T11054] batman_adv: batadv0: Removing interface: virt_wifi0
[  260.529348][T11054] veth1_vlan: left allmulticast mode
[  260.533415][T11054] team0: Port device macvlan0 removed
[  260.568003][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.595714][T11055] team0: Mode changed to "activebackup"
[  260.599969][T11062] vlan0: entered promiscuous mode
[  260.616538][T11062] team0: Port device vlan0 added
[  260.623086][T11054] tipc: Started in network mode
[  260.624690][T11054] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  260.628407][T11054] tipc: Enabled bearer <eth:team0>, priority 0
[  260.723073][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'.
[  260.814669][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.839114][T11074] uprobe: syz.5.1372:11074 failed to unregister, leaking uprobe
[  260.904463][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.907124][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.982920][T11081] syzkaller0: entered promiscuous mode
[  260.985223][T11081] syzkaller0: entered allmulticast mode
[  261.623707][ T9009] tipc: Node number set to 11578026
[  262.049751][ T7536] net_ratelimit: 1 callbacks suppressed
[  262.049767][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.500278][T11106] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1378'.
[  262.634178][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'.
[  262.825908][ T5775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.917098][T11129] netlink: 'syz.5.1384': attribute type 4 has an invalid length.
[  262.919547][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1384'.
[  263.453263][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.538339][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.977810][T11157] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1390'.
[  264.011087][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.040221][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'.
[  264.240684][T11171] xt_hashlimit: size too large, truncated to 1048576
[  264.575336][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.391344][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'.
[  265.399089][T11214] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  265.402367][T11214] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  265.405359][T11214] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  265.407973][T11214] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  265.622808][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.179667][ T8312] Bluetooth: hci4: Frame reassembly failed (-84)
[  266.182759][ T8312] Bluetooth: hci4: Frame reassembly failed (-84)
[  266.653197][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.673111][   T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  266.863034][   T29] usb 7-1: Using ep0 maxpacket: 16
[  266.867073][   T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  266.872366][   T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  266.876376][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.881968][   T29] usb 7-1: config 0 descriptor??
[  266.890834][   T29] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22
[  267.139707][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.159262][T11236] netlink: 'syz.2.1401': attribute type 4 has an invalid length.
[  267.584718][T11253] netlink: 'syz.5.1407': attribute type 1 has an invalid length.
[  267.587737][T11253] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1407'.
[  267.693167][ T7533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.253105][ T5967] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  268.253306][ T5960] Bluetooth: hci4: command 0x1003 tx timeout
[  268.457840][ T5354] bcm5974 7-1:0.0: could not read from device
[  268.464920][   T29] bcm5974 7-1:0.0: could not read from device
[  268.467397][ T5354] bcm5974 7-1:0.0: could not read from device
[  268.472005][   T29] input: failed to attach handler mousedev to device input22, error: -5
[  268.476911][ T5354] bcm5974 7-1:0.0: could not read from device
[  268.479058][   T29] usb 7-1: USB disconnect, device number 11
[  269.243294][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.840150][   T29] IPVS: starting estimator thread 0...
[  269.923080][T11284] IPVS: using max 43 ests per chain, 103200 per kthread
[  270.177035][ T5775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.200509][T11294] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  270.202586][T11294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  270.205236][T11294] vhci_hcd vhci_hcd.0: Device attached
[  270.214033][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'.
[  270.289712][T11297] random: crng reseeded on system resumption
[  270.493145][   T29] usb 44-1: SetAddress Request (2) to port 0
[  270.495843][   T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  271.205350][ T7536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.514437][T11321] netlink: 'syz.5.1423': attribute type 4 has an invalid length.
[  271.619241][T11330] 9pnet_fd: Insufficient options for proto=fd
[  271.632098][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.636335][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.639794][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.684996][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.687612][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.809583][T11335] overlayfs: conflicting lowerdir path
[  271.927707][T11335] tipc: Resetting bearer <eth:team0>
[  272.077858][T11335] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.080899][T11335] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.084497][T11335] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.087449][T11335] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.522682][ T7241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.527091][ T7241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.588833][ T5960] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  273.673782][T11371] netlink: 'syz.5.1440': attribute type 10 has an invalid length.
[  273.681143][T11371] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1440'.
[  273.688836][T11371] batman_adv: batadv0: Adding interface: virt_wifi0
[  273.691678][T11371] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[  273.953334][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.956515][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.959719][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.962555][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.965735][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.968346][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.975005][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.979989][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.982650][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.988729][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.991990][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  273.998239][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.000879][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.005736][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.008704][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.011396][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.017900][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.020486][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.027717][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.030497][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.035826][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.038589][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.041252][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.046765][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.049404][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.051976][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.056466][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.059134][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.061696][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.066107][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.069012][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.071742][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.075121][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.081415][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.086162][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.089153][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.091921][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.095825][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.100100][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.102687][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0
[  274.130168][ T9009] hid-generic 0000:007F:FFFFFFFE.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  274.176760][T11384] binder: BINDER_SET_CONTEXT_MGR already set
[  274.181186][T11384] binder: 11383:11384 ioctl 4018620d 80000040 returned -16
[  275.200536][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  275.200575][   T40] audit: type=1326 audit(2000000173.139:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.214775][T11389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  275.217645][T11389] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  275.221593][   T40] audit: type=1326 audit(2000000173.149:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.230606][T11389] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  275.233335][T11414] wireguard0: entered promiscuous mode
[  275.233638][   T40] audit: type=1326 audit(2000000173.149:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.235578][T11389] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  275.244074][   T40] audit: type=1326 audit(2000000173.149:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.245543][T11414] wireguard0: entered allmulticast mode
[  275.254325][   T40] audit: type=1326 audit(2000000173.149:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.265314][   T40] audit: type=1326 audit(2000000173.149:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.273817][T11389] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  275.276727][   T40] audit: type=1326 audit(2000000173.149:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.284917][   T40] audit: type=1326 audit(2000000173.149:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.313063][   T40] audit: type=1326 audit(2000000173.149:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.360338][   T40] audit: type=1326 audit(2000000173.299:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.3.1451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  275.509508][T11429] netlink: 'syz.2.1455': attribute type 1 has an invalid length.
[  275.512839][T11429] net_ratelimit: 5 callbacks suppressed
[  275.512852][T11429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.552271][T11426] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(15)
[  275.554364][T11426] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  275.558336][T11426] vhci_hcd vhci_hcd.0: Device attached
[  275.631747][T11430] vhci_hcd: connection closed
[  275.632611][ T8278] vhci_hcd: stop threads
[  275.637248][ T8278] vhci_hcd: release socket
[  275.639622][ T8278] vhci_hcd: disconnect device
[  275.702045][T11443] usb usb8: usbfs: process 11443 (syz.2.1459) did not claim interface 0 before use
[  276.490642][T11473] set match dimension is over the limit!
[  276.583047][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout
[  276.876660][T11483] netlink: 'syz.5.1467': attribute type 1 has an invalid length.
[  276.880145][T11483] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1467'.
[  276.896999][T11483] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  276.899869][T11483] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  276.903210][T11483] vhci_hcd vhci_hcd.0: Device attached
[  277.153088][ T7536] usb 47-1: new high-speed USB device number 3 using vhci_hcd
[  277.294384][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout
[  277.401486][T11493] netlink: 'syz.2.1469': attribute type 1 has an invalid length.
[  277.404891][T11493] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1469'.
[  277.480325][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'.
[  277.655172][T11484] vhci_hcd: connection reset by peer
[  277.659701][ T8298] vhci_hcd: stop threads
[  277.661212][ T8298] vhci_hcd: release socket
[  277.662915][ T8298] vhci_hcd: disconnect device
[  277.897722][T11507] xt_CT: You must specify a L4 protocol and not use inversions on it
[  278.174350][ T7241] wlan0: Trigger new scan to find an IBSS to join
[  278.624670][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'.
[  278.653117][ T5967] Bluetooth: hci1: command 0x0c1a tx timeout
[  279.221156][T11532] fuse: Bad value for 'fd'
[  279.385553][ T5967] Bluetooth: hci3: command 0x0c1a tx timeout
[  279.390308][T11519] 9pnet_fd: p9_fd_create_tcp (11519): problem connecting socket to 127.0.0.1
[  279.650111][T11553] overlayfs: conflicting lowerdir path
[  280.343412][ T9009] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  280.490478][T11576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1491'.
[  280.515888][ T9009] usb 8-1: Using ep0 maxpacket: 16
[  280.793894][ T9009] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  280.797932][ T9009] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  281.106369][ T9009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.110484][ T9009] usb 8-1: config 0 descriptor??
[  281.116477][ T9009] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input23
[  281.213266][ T8313] wlan0: Trigger new scan to find an IBSS to join
[  281.453076][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout
[  281.493892][T11595] netlink: 'syz.3.1485': attribute type 4 has an invalid length.
[  281.610157][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'.
[  281.613431][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1499'.
[  281.619355][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'.
[  281.622713][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1499'.
[  281.966206][T11611] vlan1: entered promiscuous mode
[  281.968997][T11611] vlan1: entered allmulticast mode
[  281.971277][T11611] veth0_vlan: entered allmulticast mode
[  281.973836][T11611] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  282.283061][ T7536] vhci_hcd: vhci_device speed not set
[  282.903083][ T5354] bcm5974 8-1:0.0: could not read from device
[  282.908680][ T9009] bcm5974 8-1:0.0: could not read from device
[  282.912049][ T5354] bcm5974 8-1:0.0: could not read from device
[  282.917042][ T9009] input: failed to attach handler mousedev to device input23, error: -5
[  282.924544][ T5354] bcm5974 8-1:0.0: could not read from device
[  282.930281][ T5354] bcm5974 8-1:0.0: could not read from device
[  282.933822][ T9009] usb 8-1: USB disconnect, device number 15
[  283.002316][T11620] wireguard0: entered promiscuous mode
[  283.004569][T11620] wireguard0: entered allmulticast mode
[  283.472630][T11624] tmpfs: Unknown parameter 'grpquota_bit'
[  283.543414][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout
[  284.301960][T11648] binder: BINDER_SET_CONTEXT_MGR already set
[  284.304408][T11648] binder: 11647:11648 ioctl 4018620d 80000040 returned -16
[  284.311278][T11648] binder: 11647:11648 ioctl c0306201 80000240 returned -11
[  284.343223][ T8313] wlan0: Trigger new scan to find an IBSS to join
[  285.137952][T11665] bridge7: entered promiscuous mode
[  285.139695][T11665] bridge7: entered allmulticast mode
[  285.333267][ T8298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.352481][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'.
[  286.592813][T11708] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  286.594972][T11708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  286.601342][T11708] vhci_hcd vhci_hcd.0: Device attached
[  286.745903][T11708] 9pnet: Could not find request transport: Kdæ)W

[  286.845879][ T7536] usb 47-1: new high-speed USB device number 4 using vhci_hcd
[  286.849910][T11709] vhci_hcd: connection reset by peer
[  286.854358][ T7251] vhci_hcd: stop threads
[  286.858434][ T7251] vhci_hcd: release socket
[  286.861131][ T7251] vhci_hcd: disconnect device
[  287.991093][T11731] trusted_key: encrypted_key: insufficient parameters specified
[  287.999128][T11731] netlink: 'syz.2.1529': attribute type 10 has an invalid length.
[  288.140735][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'.
[  288.279728][T11736] netlink: 'syz.2.1531': attribute type 1 has an invalid length.
[  288.282237][T11736] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1531'.
[  289.763718][ T1106] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  289.766373][ T1106] ata1: failed to read log page 10h (errno=-5)
[  289.768802][ T1106] ata1.00: exception Emask 0x1 SAct 0x10000 SErr 0x0 action 0x0
[  289.771792][ T1106] ata1.00: irq_stat 0x40000000
[  289.774075][ T1106] ata1.00: failed command: WRITE FPDMA QUEUED
[  289.776527][ T1106] ata1.00: cmd 61/18:80:46:0e:10/00:00:00:00:00/40 tag 16 ncq dma 12288 out
[  289.776527][ T1106]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  289.781846][ T1106] ata1.00: status: { DRDY }
[  289.783977][ T1106] ata1.00: error: { ABRT }
[  289.786392][ T1106] ata1.00: configured for UDMA/100
[  289.788266][ T1106] ata1: EH complete
[  289.840533][T11768] netlink: 'syz.2.1543': attribute type 10 has an invalid length.
[  289.843979][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1543'.
[  289.939417][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'.
[  289.985542][T11778] netlink: 'syz.2.1546': attribute type 1 has an invalid length.
[  289.988724][T11778] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1546'.
[  291.007017][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1541'.
[  291.327685][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'.
[  291.331385][T11811] netlink: 'syz.1.1550': attribute type 5 has an invalid length.
[  291.335413][T11811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1550'.
[  291.378875][T11813] syzkaller0: entered promiscuous mode
[  291.381083][T11813] syzkaller0: entered allmulticast mode
[  291.923144][ T7536] vhci_hcd: vhci_device speed not set
[  292.513139][   T61] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  292.675184][   T61] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  292.678091][   T61] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  292.681428][   T61] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  292.684504][   T61] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  292.687997][   T61] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  292.693747][   T61] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  292.696748][   T61] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  292.699383][   T61] usb 10-1: Product: syz
[  292.700782][   T61] usb 10-1: Manufacturer: syz
[  292.708784][   T61] cdc_wdm 10-1:1.0: skipping garbage
[  292.710585][   T61] cdc_wdm 10-1:1.0: skipping garbage
[  292.717978][   T61] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  292.720168][   T61] cdc_wdm 10-1:1.0: Unknown control protocol
[  293.051848][T11840] usb usb8: usbfs: process 11840 (syz.2.1562) did not claim interface 0 before use
[  293.064756][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  293.065314][ T7533] usb 10-1: USB disconnect, device number 3
[  293.066883][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  293.070960][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  293.133998][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'.
[  294.296652][T11859] trusted_key: encrypted_key: keylen parameter is missing
[  294.300867][T11857] trusted_key: encrypted_key: keylen parameter is missing
[  294.602432][T11863] wireguard0: entered promiscuous mode
[  294.605392][T11863] wireguard0: entered allmulticast mode
[  294.831698][T11865] 9pnet: Unknown protocol version 9p20u
[  295.717068][T11879] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  295.822555][T11883] trusted_key: syz.1.1576 sent an empty control message without MSG_MORE.
[  296.027202][T11888] netlink: 'syz.2.1577': attribute type 1 has an invalid length.
[  296.029672][T11888] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1577'.
[  296.329848][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1573'.
[  296.333837][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1573'.
[  298.079072][T11930] bridge3: entered promiscuous mode
[  298.080780][T11930] bridge3: entered allmulticast mode
[  298.087719][T11930] team0: Port device bridge3 added
[  298.299174][T11943] syzkaller0: entered promiscuous mode
[  298.300933][T11943] syzkaller0: entered allmulticast mode
[  299.844897][T11965] usb usb8: usbfs: process 11965 (syz.3.1600) did not claim interface 0 before use
[  299.991593][T11977] netlink: 'syz.5.1605': attribute type 10 has an invalid length.
[  299.996915][T11977] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1605'.
[  300.002163][T11977] batman_adv: batadv0: Interface activated: virt_wifi0
[  300.080115][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'.
[  300.515960][T11991] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  300.518026][T11991] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  300.531897][T11991] vhci_hcd vhci_hcd.0: Device attached
[  300.600465][T11994] wireguard0: entered promiscuous mode
[  300.602297][T11994] wireguard0: entered allmulticast mode
[  300.988808][T11992] vhci_hcd: connection closed
[  300.994651][ T8313] vhci_hcd: stop threads
[  300.998588][ T8313] vhci_hcd: release socket
[  301.014110][ T8313] vhci_hcd: disconnect device
[  301.085849][T12001] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  301.088126][T12001] batman_adv: batadv0: Removing interface: virt_wifi0
[  301.092663][T12001] team0: Port device vlan0 removed
[  301.096604][T12001] team0: Port device bridge3 removed
[  301.107733][T12001] team0: Unable to change to the same mode the team is in
[  301.269793][T12007] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave
[  301.275272][T12007] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1)
[  301.376311][T12013] netlink: 'syz.5.1617': attribute type 12 has an invalid length.
[  301.764465][T12022] random: crng reseeded on system resumption
[  302.719685][T12039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1624'.
[  302.726185][T12039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1624'.
[  303.013906][T12043] ubi: mtd0 is already attached to ubi8
[  303.223168][ T9009] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  303.244553][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1628'.
[  303.247417][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1628'.
[  303.354948][T12051] xt_CT: No such helper "snmp"
[  303.373136][ T9009] usb 7-1: Using ep0 maxpacket: 16
[  303.376792][ T9009] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  303.382035][ T9009] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  303.386612][ T9009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.390659][ T9009] usb 7-1: config 0 descriptor??
[  303.397913][ T9009] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25
[  303.700828][T12048] netlink: 'syz.2.1627': attribute type 4 has an invalid length.
[  303.794592][T12059] xt_CT: You must specify a L4 protocol and not use inversions on it
[  303.962377][T12064] netlink: 'syz.5.1631': attribute type 1 has an invalid length.
[  303.967839][T12064] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1631'.
[  304.182187][T12068] can0: slcan on ttyS3.
[  304.293704][T12068] can0 (unregistered): slcan off ttyS3.
[  304.301220][ T5354] bcm5974 7-1:0.0: could not read from device
[  304.306822][ T9009] bcm5974 7-1:0.0: could not read from device
[  304.313690][ T5354] bcm5974 7-1:0.0: could not read from device
[  304.318938][ T9009] input: failed to attach handler mousedev to device input25, error: -5
[  304.322359][ T5354] bcm5974 7-1:0.0: could not read from device
[  304.333316][ T9009] usb 7-1: USB disconnect, device number 12
[  304.334457][ T5354] bcm5974 7-1:0.0: could not read from device
[  304.456584][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1635'.
[  304.752269][    C3] ata1: illegal qc_active transition (00000000->00002000)
[  305.077131][ T1106] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  305.081091][ T1106] ata1.00: configured for UDMA/100
[  305.123552][ T7536] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  305.273025][ T7536] usb 7-1: Using ep0 maxpacket: 16
[  305.276272][ T7536] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  305.280653][ T7536] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  305.284575][ T7536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.291212][ T7536] usb 7-1: config 0 descriptor??
[  305.300272][ T7536] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input26
[  305.567391][T12099] netlink: 'syz.2.1639': attribute type 4 has an invalid length.
[  305.618407][T12105] netlink: 'syz.3.1643': attribute type 1 has an invalid length.
[  305.734535][T12105] 8021q: adding VLAN 0 to HW filter on device bond1
[  305.754611][T12107] 8021q: adding VLAN 0 to HW filter on device bond1
[  305.760688][T12107] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  305.788105][T12107] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  305.804002][T12113] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  305.811856][T12113] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  305.824659][T12105] tmpfs: Bad value for 'mpol'
[  305.873829][T12117] netlink: 'syz.5.1645': attribute type 1 has an invalid length.
[  305.876618][T12117] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1645'.
[  306.466104][ T5354] bcm5974 7-1:0.0: could not read from device
[  306.471498][ T7536] bcm5974 7-1:0.0: could not read from device
[  306.491474][ T5354] bcm5974 7-1:0.0: could not read from device
[  306.551917][ T7536] input: failed to attach handler mousedev to device input26, error: -5
[  306.609260][ T5354] bcm5974 7-1:0.0: could not read from device
[  306.630293][ T7536] usb 7-1: USB disconnect, device number 13
[  307.231679][T12156] macvlan2: entered allmulticast mode
[  307.462196][ T5960] Bluetooth: hci1: Unknown advertising packet type: 0x73
[  307.462268][ T5960] Bluetooth: hci1: Malformed LE Event: 0x0d
[  307.897185][T12188] wireguard0: entered promiscuous mode
[  307.899073][T12188] wireguard0: entered allmulticast mode
[  307.943855][T12191] loop1: detected capacity change from 0 to 524287999
[  308.706013][T12186] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  308.708101][T12186] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  308.769194][T12202] program syz.1.1674 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  309.755782][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1682'.
[  309.943540][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout
[  310.040755][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'.
[  310.194622][ T8298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.197049][ T8298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.388635][T12240] netlink: 'syz.3.1685': attribute type 1 has an invalid length.
[  310.391639][T12240] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1685'.
[  310.733117][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout
[  311.267803][T12258] xt_CT: You must specify a L4 protocol and not use inversions on it
[  311.707512][T12261] netlink: 'syz.3.1692': attribute type 21 has an invalid length.
[  312.019915][T12288] netlink: 'syz.2.1699': attribute type 1 has an invalid length.
[  312.023486][T12288] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1699'.
[  312.028435][T12287] can0: slcan on ttyS3.
[  312.030581][T12284] kvm: apic: phys broadcast and lowest prio
[  312.069428][T12290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1702'.
[  312.073446][T12290] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1702'.
[  312.076728][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'.
[  312.983233][T12315] xt_hashlimit: Unknown mode mask 100000, kernel too old?
[  313.175963][T12326] netlink: 'syz.1.1713': attribute type 1 has an invalid length.
[  313.180250][T12326] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1713'.
[  313.879418][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'.
[  313.882414][T12339] bridge0: entered promiscuous mode
[  314.415337][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'.
[  314.842760][T12358] team0: Port device vlan0 removed
[  314.845338][T12358] bond0: (slave netdevsim0): Releasing backup interface
[  314.866522][T12358] team0: Unable to change to the same mode the team is in
[  314.869537][T12358] vlan0: entered promiscuous mode
[  314.903660][T12363] macsec1: entered promiscuous mode
[  315.108468][T12371] random: crng reseeded on system resumption
[  315.671987][T12373] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave
[  315.677249][T12373] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1)
[  316.584155][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  316.587518][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  316.823200][ T5967] Bluetooth: hci3: command 0x0c1a tx timeout
[  317.049178][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'.
[  317.100065][T12405] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19)
[  317.102161][T12405] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  317.105780][T12405] vhci_hcd vhci_hcd.0: Device attached
[  317.108472][T12405] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  317.111986][T12406] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(24)
[  317.114113][T12406] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  317.118349][T12405] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(27)
[  317.118379][T12406] vhci_hcd vhci_hcd.0: Device attached
[  317.120526][T12405] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  317.122610][T12406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  317.125370][T12405] vhci_hcd vhci_hcd.0: Device attached
[  317.130340][T12406] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(31)
[  317.132477][T12406] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  317.135532][T12406] vhci_hcd vhci_hcd.0: Device attached
[  317.138429][T12405] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  317.142272][T12406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  317.150483][T12411] vhci_hcd: connection closed
[  317.152004][ T7244] vhci_hcd: stop threads
[  317.156438][T12409] vhci_hcd: connection closed
[  317.157218][T12407] vhci_hcd: connection closed
[  317.158870][ T7244] vhci_hcd: release socket
[  317.162034][ T7244] vhci_hcd: disconnect device
[  317.165740][ T7244] vhci_hcd: stop threads
[  317.167728][ T7244] vhci_hcd: release socket
[  317.169645][ T7244] vhci_hcd: disconnect device
[  317.173541][ T7244] vhci_hcd: stop threads
[  317.175368][ T7244] vhci_hcd: release socket
[  317.177215][ T7244] vhci_hcd: disconnect device
[  317.252173][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1740'.
[  317.683274][ T9009] usb 41-4: new high-speed USB device number 4 using vhci_hcd
[  317.719494][T12414] vhci_hcd: connection reset by peer
[  317.744520][ T8312] vhci_hcd: stop threads
[  317.745966][ T8312] vhci_hcd: release socket
[  317.748123][ T8312] vhci_hcd: disconnect device
[  317.986478][T12436] vlan1: entered promiscuous mode
[  317.989552][T12436] vlan1: entered allmulticast mode
[  317.991809][T12436] veth0_vlan: entered allmulticast mode
[  317.994270][T12436] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  318.296528][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.299535][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.302486][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.306369][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.309289][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.312188][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.315169][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.318069][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'.
[  318.632426][T12460] netlink: 'syz.1.1755': attribute type 5 has an invalid length.
[  318.758778][T12461] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  319.235684][T12473] xt_CT: You must specify a L4 protocol and not use inversions on it
[  319.464185][T12472] ubi: mtd0 is already attached to ubi8
[  321.337691][T12496] random: crng reseeded on system resumption
[  321.496381][   T40] kauditd_printk_skb: 48 callbacks suppressed
[  321.496391][   T40] audit: type=1326 audit(2000000219.429:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1766" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x0
[  321.624699][T12511] set match dimension is over the limit!
[  321.877955][T12514] netlink: 'syz.5.1768': attribute type 1 has an invalid length.
[  322.027896][T12519] netlink: 'syz.2.1770': attribute type 4 has an invalid length.
[  322.076030][T12525] usb usb8: usbfs: process 12525 (syz.2.1773) did not claim interface 0 before use
[  322.706079][T12550] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave
[  322.710947][T12550] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1)
[  322.803802][ T9009] vhci_hcd: vhci_device speed not set
[  324.103321][ T9009] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  324.143067][ T7536] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  324.255511][ T9009] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  324.274567][ T9009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.279028][ T9009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.285422][ T9009] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  324.292762][ T9009] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  324.293539][ T7536] usb 10-1: Using ep0 maxpacket: 16
[  324.300395][ T7536] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  324.302982][ T9009] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  324.306378][ T7536] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  324.309044][ T9009] usb 8-1: Manufacturer: syz
[  324.313926][ T9009] usb 8-1: config 0 descriptor??
[  324.317273][ T7536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.337745][ T7536] usb 10-1: config 0 descriptor??
[  324.348277][ T7536] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input27
[  324.574545][T12580] syzkaller0: entered promiscuous mode
[  324.576569][T12580] syzkaller0: entered allmulticast mode
[  324.660857][T12587] netlink: 'syz.5.1790': attribute type 4 has an invalid length.
[  326.343082][T12600] __nla_validate_parse: 15 callbacks suppressed
[  326.343100][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'.
[  326.351238][ T9009] usbhid 8-1:0.0: can't add hid device: -71
[  326.353402][ T9009] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  326.360881][ T9009] usb 8-1: USB disconnect, device number 16
[  326.415499][ T7536] bcm5974 10-1:0.0: could not read from device
[  326.418257][ T5354] bcm5974 10-1:0.0: could not read from device
[  326.421339][ T7536] input: failed to attach handler mousedev to device input27, error: -5
[  326.431311][ T5354] bcm5974 10-1:0.0: could not read from device
[  326.438341][ T5354] bcm5974 10-1:0.0: could not read from device
[  326.441950][ T7536] usb 10-1: USB disconnect, device number 4
[  326.749446][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'.
[  326.752284][T12615] netlink: 'syz.2.1799': attribute type 5 has an invalid length.
[  326.756882][T12615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1799'.
[  327.215906][T12625] loop2: detected capacity change from 0 to 7
[  327.230875][T12625]  loop2: [CUMANA/ADFS] p1 [ADFS] p1
[  327.232796][T12625] loop2: partition table partially beyond EOD, truncated
[  327.235188][T12625] loop2: p1 size 2989602745 extends beyond EOD, truncated
[  327.690630][ T5369]  loop2: [CUMANA/ADFS] p1 [ADFS] p1
[  327.700085][T12630] block nbd1: shutting down sockets
[  327.702251][ T5369] loop2: partition table partially beyond EOD, truncated
[  327.711260][ T5369] loop2: p1 size 2989602745 extends beyond EOD, truncated
[  327.779454][ T9694] udevd[9694]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  329.246406][T12647] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  329.248500][T12647] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  329.253227][T12647] vhci_hcd vhci_hcd.0: Device attached
[  329.494566][T12664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1815'.
[  329.545019][ T6005] usb 48-1: SetAddress Request (2) to port 0
[  329.566049][ T6005] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  329.589682][T12668] bridge8: entered promiscuous mode
[  329.591948][T12668] bridge8: entered allmulticast mode
[  329.601686][T12668] team0: Port device bridge8 added
[  329.759976][T12648] vhci_hcd: connection reset by peer
[  329.761918][ T8312] vhci_hcd: stop threads
[  329.763483][ T8312] vhci_hcd: release socket
[  329.765069][ T8312] vhci_hcd: disconnect device
[  330.673694][ T1468] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  330.710980][T12699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1825'.
[  330.717463][T12699] batadv_slave_0: entered allmulticast mode
[  330.828700][ T1468] usb 10-1: config index 0 descriptor too short (expected 31, got 27)
[  330.832182][ T1468] usb 10-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0
[  330.838724][ T1468] usb 10-1: config 1 interface 0 has no altsetting 0
[  330.843777][ T1468] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[  330.847537][ T1468] usb 10-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[  330.851202][ T1468] usb 10-1: Product: syz
[  330.853682][ T1468] usb 10-1: Manufacturer: syz
[  330.855599][ T1468] usb 10-1: SerialNumber: syz
[  331.300707][T12726] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave
[  331.305200][T12726] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1)
[  332.759092][T12756] xt_TPROXY: Can be used only with -p tcp or -p udp
[  333.093331][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1845'.
[  333.099443][T12760] netlink: 'syz.1.1845': attribute type 12 has an invalid length.
[  334.033200][T12772] team0: Port device bridge8 removed
[  334.035298][T12776] team0: Unable to change to the same mode the team is in
[  334.161485][ T1468] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  334.168202][ T1468] usb 10-1: USB disconnect, device number 5
[  334.277910][ T1468] usblp0: removed
[  334.280278][T12804] netlink: 'syz.5.1854': attribute type 4 has an invalid length.
[  334.283426][T12773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1847'.
[  334.301487][T12807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1855'.
[  334.449210][T12811] wireguard0: entered promiscuous mode
[  334.451083][T12811] wireguard0: entered allmulticast mode
[  334.733467][ T6005] usb 48-1: device descriptor read/8, error -110
[  335.183063][ T6005] usb usb48-port1: attempt power cycle
[  335.489588][T12829] netlink: 'syz.1.1862': attribute type 9 has an invalid length.
[  335.901617][ T6005] usb usb48-port1: unable to enumerate USB device
[  335.903770][ T7536] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  336.053075][ T7536] usb 8-1: Using ep0 maxpacket: 16
[  336.055941][ T7536] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  336.059900][ T7536] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  336.062588][ T7536] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.070330][ T7536] usb 8-1: config 0 descriptor??
[  336.076441][ T7536] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input28
[  336.385620][T12842] netlink: 'syz.3.1863': attribute type 4 has an invalid length.
[  337.162765][T12870] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  337.562666][ T5354] bcm5974 8-1:0.0: could not read from device
[  337.567758][ T7536] bcm5974 8-1:0.0: could not read from device
[  337.573864][ T5354] bcm5974 8-1:0.0: could not read from device
[  337.579887][ T7536] input: failed to attach handler mousedev to device input28, error: -5
[  337.583766][ T5354] bcm5974 8-1:0.0: could not read from device
[  337.584909][ T7536] usb 8-1: USB disconnect, device number 17
[  337.593324][ T9694] bcm5974 8-1:0.0: could not read from device
[  337.822549][T12883] xt_hashlimit: Unknown mode mask 20000000, kernel too old?
[  337.859758][T12886] bond0: entered promiscuous mode
[  337.911412][T12890] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1876'.
[  338.005321][T12896] serio: Serial port ptm1
[  338.608250][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'.
[  339.138480][T12918] bridge4: entered promiscuous mode
[  339.138504][T12918] bridge4: entered allmulticast mode
[  339.142067][T12918] team0: Port device bridge4 added
[  339.695075][T12920] nbd3: detected capacity change from 0 to 63
[  339.726196][T12920] block nbd3: NBD_DISCONNECT
[  339.727994][T12920] block nbd3: Disconnected due to user request.
[  339.731611][T12920] block nbd3: shutting down sockets
[  339.770549][    C2] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.773748][    C2] Buffer I/O error on dev nbd3, logical block 0, async page read
[  339.773813][    C3] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.780278][    C3] Buffer I/O error on dev nbd3, logical block 1, async page read
[  339.781464][T12931] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1889'.
[  339.783927][    C3] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.783948][    C3] Buffer I/O error on dev nbd3, logical block 2, async page read
[  339.784011][    C3] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.784053][    C3] Buffer I/O error on dev nbd3, logical block 3, async page read
[  339.784155][ T9694] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.784202][ T9694] Buffer I/O error on dev nbd3, logical block 0, async page read
[  339.784297][ T9694] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.784310][ T9694] Buffer I/O error on dev nbd3, logical block 1, async page read
[  339.784363][ T9694] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.784374][ T9694] Buffer I/O error on dev nbd3, logical block 2, async page read
[  339.784437][ T9694] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.818162][ T9694] Buffer I/O error on dev nbd3, logical block 3, async page read
[  339.820764][ T9694] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.826610][ T9694] Buffer I/O error on dev nbd3, logical block 0, async page read
[  339.829099][ T9694] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.837931][ T9694] Buffer I/O error on dev nbd3, logical block 1, async page read
[  339.842496][ T9694] ldm_validate_partition_table(): Disk read failed.
[  339.845999][ T9694] Dev nbd3: unable to read RDB block 0
[  339.848842][ T9694]  nbd3: unable to read partition table
[  339.863737][ T9694] ldm_validate_partition_table(): Disk read failed.
[  339.866784][ T9694] Dev nbd3: unable to read RDB block 0
[  339.869314][ T9694]  nbd3: unable to read partition table
[  339.869869][T12933] usb usb8: usbfs: process 12933 (syz.1.1890) did not claim interface 0 before use
[  340.000078][T12938] random: crng reseeded on system resumption
[  341.175751][T12970] tty tty1: ldisc open failed (-12), clearing slot 0
[  342.681294][T13022] fuse: Bad value for 'rootmode'
[  343.256958][T13037] wireguard0: entered promiscuous mode
[  343.258911][T13037] wireguard0: entered allmulticast mode
[  343.374308][T13042] syz.3.1922 (13042): /proc/13041/oom_adj is deprecated, please use /proc/13041/oom_score_adj instead.
[  343.461030][T13047] netlink: 'syz.3.1924': attribute type 3 has an invalid length.
[  343.464629][T13047] netlink: 5108 bytes leftover after parsing attributes in process `syz.3.1924'.
[  343.467588][T13047] netlink: 'syz.3.1924': attribute type 3 has an invalid length.
[  343.470086][T13047] netlink: 5108 bytes leftover after parsing attributes in process `syz.3.1924'.
[  343.809504][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'.
[  343.812687][T13057] netlink: 'syz.3.1925': attribute type 5 has an invalid length.
[  343.815560][T13057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1925'.
[  344.056027][T13078] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1933'.
[  344.241141][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'.
[  344.413594][T13087] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1936'.
[  344.429874][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1936'.
[  346.092440][T13110] syzkaller0: entered promiscuous mode
[  346.103016][T13110] syzkaller0: entered allmulticast mode
[  346.139575][T13113] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1943'.
[  346.443080][ T7536] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  346.593189][ T7536] usb 10-1: Using ep0 maxpacket: 16
[  346.618442][ T7536] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  346.629713][ T7536] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  346.638835][ T7536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.683016][ T7536] usb 10-1: config 0 descriptor??
[  346.842027][ T7536] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input29
[  347.386443][T13134] netlink: 'syz.5.1945': attribute type 4 has an invalid length.
[  348.567117][ T7536] bcm5974 10-1:0.0: could not read from device
[  348.574521][ T5354] bcm5974 10-1:0.0: could not read from device
[  348.585262][ T7536] input: failed to attach handler mousedev to device input29, error: -5
[  348.589037][ T5354] bcm5974 10-1:0.0: could not read from device
[  348.595345][ T7536] usb 10-1: USB disconnect, device number 6
[  348.708577][   T40] audit: type=1326 audit(2000000246.649:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.720062][   T40] audit: type=1326 audit(2000000246.649:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.727272][   T40] audit: type=1326 audit(2000000246.659:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.735998][   T40] audit: type=1326 audit(2000000246.659:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.744347][   T40] audit: type=1326 audit(2000000246.659:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.752547][   T40] audit: type=1326 audit(2000000246.659:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.759862][   T40] audit: type=1326 audit(2000000246.659:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.766471][   T40] audit: type=1326 audit(2000000246.659:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.773087][   T40] audit: type=1326 audit(2000000246.659:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.784527][   T40] audit: type=1326 audit(2000000246.659:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.3.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  348.883104][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  349.037440][   T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  349.041013][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.043941][   T10] usb 7-1: Product: syz
[  349.045233][   T10] usb 7-1: Manufacturer: syz
[  349.046744][   T10] usb 7-1: SerialNumber: syz
[  349.051120][   T10] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  349.071631][ T5775] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  349.320127][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'.
[  349.344620][ T6024] usb 7-1: USB disconnect, device number 14
[  349.812835][T13180] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  349.814909][T13180] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  349.817677][T13180] vhci_hcd vhci_hcd.0: Device attached
[  350.078168][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1963'.
[  350.080947][T13190] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1963'.
[  350.083843][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'.
[  350.095724][ T5775] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  350.100089][ T5775] ath9k_htc: Failed to initialize the device
[  350.104551][ T6024] usb 7-1: ath9k_htc: USB layer deinitialized
[  350.133605][ T1468] usb 42-1: SetAddress Request (2) to port 0
[  350.136021][ T1468] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  350.361958][T13181] vhci_hcd: connection reset by peer
[  350.366304][ T8298] vhci_hcd: stop threads
[  350.367735][ T8298] vhci_hcd: release socket
[  350.369279][ T8298] vhci_hcd: disconnect device
[  351.398527][T13216] random: crng reseeded on system resumption
[  352.358024][T13227] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1973'.
[  352.835353][T13242] trusted_key: encrypted_key: master key parameter 'cœYõ
Ù?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid
[  352.844897][T13242] netlink: 'syz.1.1978': attribute type 3 has an invalid length.
[  352.847337][T13242] netlink: 'syz.1.1978': attribute type 1 has an invalid length.
[  352.849602][T13242] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1978'.
[  352.856002][T13242] trusted_key: encrypted_key: master key parameter '' is invalid
[  352.909709][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'.
[  354.182011][T13282] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  354.185805][T13282] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  354.185998][T13282] vhci_hcd vhci_hcd.0: Device attached
[  354.254971][T13284] vhci_hcd: connection closed
[  354.255274][ T7244] vhci_hcd: stop threads
[  354.258633][ T7244] vhci_hcd: release socket
[  354.260556][ T7244] vhci_hcd: disconnect device
[  355.163054][ T6024] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  355.213302][ T1468] usb 42-1: device descriptor read/8, error -110
[  355.332320][ T6024] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  355.340978][ T6024] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  355.353211][ T6024] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  355.356712][ T6024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  355.360191][ T6024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  355.365031][ T6024] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  355.367824][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  355.370872][ T6024] usb 7-1: Product: syz
[  355.372288][ T6024] usb 7-1: Manufacturer: syz
[  355.393517][ T6024] cdc_wdm 7-1:1.0: skipping garbage
[  355.395182][ T6024] cdc_wdm 7-1:1.0: skipping garbage
[  355.397680][ T6024] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  355.399861][ T6024] cdc_wdm 7-1:1.0: Unknown control protocol
[  355.408175][   T40] kauditd_printk_skb: 29 callbacks suppressed
[  355.408228][   T40] audit: type=1326 audit(2000000253.349:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.425668][   T40] audit: type=1326 audit(2000000253.349:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.433196][   T40] audit: type=1326 audit(2000000253.349:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.440028][   T40] audit: type=1326 audit(2000000253.349:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.446878][   T40] audit: type=1326 audit(2000000253.349:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.453803][   T40] audit: type=1326 audit(2000000253.349:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.460407][   T40] audit: type=1326 audit(2000000253.359:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.467098][   T40] audit: type=1326 audit(2000000253.359:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.474956][   T40] audit: type=1326 audit(2000000253.359:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.482175][   T40] audit: type=1326 audit(2000000253.359:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf710e579 code=0x7ffc0000
[  355.605024][ T1468] usb usb42-port1: attempt power cycle
[  355.692171][    C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  355.694269][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  355.696335][    C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  355.698542][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  355.698784][    C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  355.703763][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  355.706901][    C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  355.709619][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  355.712172][ T9009] usb 7-1: USB disconnect, device number 15
[  355.715030][    C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  355.715047][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  355.715061][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  355.783383][ T6024] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  355.938136][ T6024] usb 10-1: not running at top speed; connect to a high speed hub
[  355.941617][ T6024] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.948140][ T6024] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  355.953569][ T6024] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  355.956412][ T6024] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.958947][ T6024] usb 10-1: Product: ��꿖昨鋒醷ܫ晙䀿ᜥ喥窘�洰얈详粖뭭꿀�葠徹䕻ෟ햞�ᨸર⯞⨩ᔫ鶽ᴿꆈ醵렙ꋋ�ᔤ�኿�힦텚簅멇궂乢㋷䞨�㨾졉팙�ᖳ�
[  355.965821][ T6024] usb 10-1: Manufacturer: 훸퇻Υ嘺蔿䭼վ
[  355.967818][ T6024] usb 10-1: SerialNumber: á°—
[  356.054784][T13329] wireguard0: entered promiscuous mode
[  356.056723][T13329] wireguard0: entered allmulticast mode
[  356.203932][T13339] netlink: 'syz.3.2006': attribute type 1 has an invalid length.
[  356.206434][T13339] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2006'.
[  356.206538][ T1468] usb usb42-port1: unable to enumerate USB device
[  356.942418][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'.
[  357.459897][T13363] netlink: 'syz.2.2014': attribute type 9 has an invalid length.
[  358.438311][ T6024] usb 10-1: 0:2 : does not exist
[  358.465681][T13377] wireguard0: entered promiscuous mode
[  358.467522][T13377] wireguard0: entered allmulticast mode
[  358.488612][ T6024] usb 10-1: USB disconnect, device number 7
[  358.503474][T13382] xt_hashlimit: Unknown mode mask 88000000, kernel too old?
[  358.567656][ T9694] udevd[9694]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  358.618950][T13391] netlink: 'syz.5.2018': attribute type 1 has an invalid length.
[  358.621420][T13391] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2018'.
[  359.186174][T13399] loop1: detected capacity change from 0 to 524287999
[  359.795550][T13395] program syz.2.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  359.931618][T13397] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  359.938091][T13397] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  360.734762][T13444] netlink: 'syz.2.2031': attribute type 1 has an invalid length.
[  360.737336][T13444] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2031'.
[  360.891438][T13449] input: syz0 as /devices/virtual/input/input30
[  361.213048][T13431] Bluetooth: hci1: command 0x0c1a tx timeout
[  361.421295][T13458] usb usb8: usbfs: process 13458 (syz.3.2035) did not claim interface 0 before use
[  362.023112][T13431] Bluetooth: hci3: command 0x0c1a tx timeout
[  362.855320][T13481] batman_adv: batadv0: Removing interface: ªªªªªª
[  362.879624][T13481] bond0: (slave netdevsim0): Releasing backup interface
[  362.895628][T13481] vlan2: left allmulticast mode
[  362.897122][T13481] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  362.899335][T13481] vlan2: left promiscuous mode
[  362.901125][T13481] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  362.930852][T13481] bridge0: port 1(vlan2) entered disabled state
[  362.999231][T13484] sock: sock_set_timeout: `syz.3.2043' (pid 13484) tries to set negative timeout
[  363.000090][T13481] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  363.553160][ T7533] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  363.715280][ T7533] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  363.718638][ T7533] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  363.721629][ T7533] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  363.724539][ T7533] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.731771][T13506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  363.736827][ T7533] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  363.935385][T13506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2050'.
[  363.946991][T13506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2050'.
[  364.049232][ T6024] usb 8-1: USB disconnect, device number 18
[  364.093137][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout
[  364.114327][T13527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2057'.
[  364.118214][T13527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2057'.
[  364.120960][T13527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2057'.
[  364.583675][ T9009] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  364.736966][ T9009] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  364.741432][ T9009] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.742310][T13546] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  364.746192][ T9009] usb 7-1: config 0 interface 0 has no altsetting 0
[  364.749781][T13546] Cannot find add_set index 3 as target
[  364.751617][ T9009] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  364.759983][ T9009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.767858][ T9009] usb 7-1: config 0 descriptor??
[  364.854573][T13546] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  364.857821][T13546] netlink: 'syz.1.2064': attribute type 3 has an invalid length.
[  364.985590][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2068'.
[  365.124091][ T9009] usbhid 7-1:0.0: can't add hid device: -71
[  365.126341][ T9009] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  365.142675][ T9009] usb 7-1: USB disconnect, device number 16
[  365.488025][   T40] kauditd_printk_skb: 44 callbacks suppressed
[  365.488039][   T40] audit: type=1326 audit(2000262663.429:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13576 comm="syz.2.2073" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x0
[  365.694963][T13584] set match dimension is over the limit!
[  366.562800][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'.
[  367.285053][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2089'.
[  367.590885][T13631] can0 (unregistered): slcan off ttyS3.
[  367.929399][T13639] netlink: 'syz.2.2092': attribute type 1 has an invalid length.
[  367.931920][T13639] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2092'.
[  370.053007][ T9009] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  370.055576][T13704] netlink: 'syz.5.2103': attribute type 1 has an invalid length.
[  370.058992][T13704] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2103'.
[  370.205193][ T9009] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  370.207882][ T9009] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  370.213063][ T9009] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  370.215841][ T9009] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  370.219181][ T9009] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  370.224004][ T9009] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  370.226956][ T9009] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  370.229500][ T9009] usb 7-1: Product: syz
[  370.230883][ T9009] usb 7-1: Manufacturer: syz
[  370.240470][ T9009] cdc_wdm 7-1:1.0: skipping garbage
[  370.242213][ T9009] cdc_wdm 7-1:1.0: skipping garbage
[  370.244589][ T9009] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  370.246525][ T9009] cdc_wdm 7-1:1.0: Unknown control protocol
[  370.548510][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  370.548664][ T9009] usb 7-1: USB disconnect, device number 17
[  370.550564][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  370.550575][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  370.550651][T13711] cdc_wdm 7-1:1.0: Tx URB error: -19
[  370.555321][T13715] syzkaller0: entered promiscuous mode
[  370.560903][T13715] syzkaller0: entered allmulticast mode
[  371.987617][T13720] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  372.053975][T13734] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2113'.
[  372.188369][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'.
[  372.576847][ T7533] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x7
[  372.579852][ T7533] hid-generic 00A0:0008:0003.000C: item fetching failed at offset 14/15
[  372.582678][ T7533] hid-generic 00A0:0008:0003.000C: probe with driver hid-generic failed with error -22
[  372.624432][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'.
[  372.629650][T13759] netlink: 'syz.1.2114': attribute type 5 has an invalid length.
[  372.632754][T13759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2114'.
[  373.364289][T13770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  373.392131][T13770] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  373.428705][T13776] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2122'.
[  373.433042][T13775] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2122'.
[  374.640904][T13805] netlink: 'syz.1.2131': attribute type 1 has an invalid length.
[  374.644353][T13805] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2131'.
[  374.807255][T13808] netlink: 'syz.3.2132': attribute type 39 has an invalid length.
[  374.822906][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2133'.
[  374.828897][T13810] bridge0: entered promiscuous mode
[  374.958666][T13818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2137'.
[  375.686213][T13851] .: renamed from bond0
[  376.139972][T13862] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2147'.
[  376.450221][T13867] kernel profiling enabled (shift: 17)
[  376.587202][T13875] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  377.017850][T13883] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2151'.
[  378.017033][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  378.019248][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  379.533105][ T5960] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  388.895575][ T6885] sched: DL replenish lagged too much
[  392.990983][T13431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  392.994815][T13431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  392.998160][T13431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  393.000770][T13431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  393.003595][T13431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  393.125287][ T5967] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  393.129913][ T5967] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  393.135355][ T5967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  393.138599][ T5967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  393.141356][ T5967] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  394.033958][T13431] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  394.047005][T13431] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  394.049973][T13431] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  394.053067][T13431] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  394.056399][T13431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  394.833829][ T1416] ==================================================================
[  394.836344][ T1416] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630
[  394.838599][ T1416] Read of size 1 at addr ffff88804b196490 by task aoe_tx0/1416
[  394.842370][ T1416] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  394.843191][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  394.843205][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  394.843212][ T1416] Call Trace:
[  394.843216][ T1416]  <TASK>
[  394.843221][ T1416]  dump_stack_lvl+0x116/0x1f0
[  394.843892][ T1416]  print_report+0xcd/0x610
[  394.843902][ T1416]  ? __virt_addr_valid+0x81/0x610
[  394.843913][ T1416]  ? __phys_addr+0xe8/0x180
[  394.843925][ T1416]  ? handle_tx+0x5dc/0x630
[  394.843934][ T1416]  kasan_report+0xe0/0x110
[  394.843947][ T1416]  ? handle_tx+0x5dc/0x630
[  394.843957][ T1416]  handle_tx+0x5dc/0x630
[  394.843968][ T1416]  dev_hard_start_xmit+0x97/0x740
[  394.843983][ T1416]  __dev_queue_xmit+0x7eb/0x43e0
[  394.844002][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  394.844017][ T1416]  ? finish_task_switch.isra.0+0x221/0xc10
[  394.844029][ T1416]  ? rcu_is_watching+0x12/0xc0
[  394.844040][ T1416]  ? __pfx___dev_queue_xmit+0x10/0x10
[  394.844054][ T1416]  ? __lock_acquire+0xb8a/0x1c90
[  394.844072][ T1416]  ? __lock_acquire+0xb8a/0x1c90
[  394.844087][ T1416]  ? do_raw_spin_lock+0x12c/0x2b0
[  394.844103][ T1416]  ? find_held_lock+0x2b/0x80
[  394.844114][ T1416]  ? skb_dequeue+0x126/0x180
[  394.844128][ T1416]  ? find_held_lock+0x2b/0x80
[  394.844139][ T1416]  ? rcu_is_watching+0x12/0xc0
[  394.844150][ T1416]  tx+0xcc/0x190
[  394.844161][ T1416]  ? __pfx_tx+0x10/0x10
[  394.844170][ T1416]  kthread+0x1e4/0x3e0
[  394.844179][ T1416]  ? find_held_lock+0x2b/0x80
[  394.844189][ T1416]  ? __pfx_kthread+0x10/0x10
[  394.844198][ T1416]  ? __pfx_default_wake_function+0x10/0x10
[  394.844210][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  394.844224][ T1416]  ? __kthread_parkme+0x19e/0x250
[  394.844237][ T1416]  ? __pfx_kthread+0x10/0x10
[  394.844245][ T1416]  kthread+0x3c2/0x780
[  394.844260][ T1416]  ? __pfx_kthread+0x10/0x10
[  394.844274][ T1416]  ? rcu_is_watching+0x12/0xc0
[  394.844287][ T1416]  ? __pfx_kthread+0x10/0x10
[  394.844301][ T1416]  ret_from_fork+0x5d7/0x6f0
[  394.844315][ T1416]  ? __pfx_kthread+0x10/0x10
[  394.844330][ T1416]  ret_from_fork_asm+0x1a/0x30
[  394.844344][ T1416]  </TASK>
[  394.844348][ T1416] 
[  394.909887][ T1416] Allocated by task 10380:
[  394.911283][ T1416]  kasan_save_stack+0x33/0x60
[  394.912757][ T1416]  kasan_save_track+0x14/0x30
[  394.914232][ T1416]  __kasan_kmalloc+0xaa/0xb0
[  394.915680][ T1416]  alloc_tty_struct+0x96/0x8c0
[  394.917223][ T1416]  tty_init_dev.part.0+0x1e/0x500
[  394.918814][ T1416]  tty_open+0xa50/0xf90
[  394.920148][ T1416]  chrdev_open+0x231/0x6a0
[  394.921702][ T1416]  do_dentry_open+0x744/0x1c10
[  394.923232][ T1416]  vfs_open+0x82/0x3f0
[  394.924518][ T1416]  path_openat+0x1de4/0x2cb0
[  394.925954][ T1416]  do_filp_open+0x20b/0x470
[  394.927409][ T1416]  do_sys_openat2+0x11b/0x1d0
[  394.928891][ T1416]  __ia32_compat_sys_openat+0x16d/0x210
[  394.930656][ T1416]  __do_fast_syscall_32+0x7c/0x3a0
[  394.932268][ T1416]  do_fast_syscall_32+0x32/0x80
[  394.933808][ T1416]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  394.935773][ T1416] 
[  394.936537][ T1416] Freed by task 7536:
[  394.937805][ T1416]  kasan_save_stack+0x33/0x60
[  394.939291][ T1416]  kasan_save_track+0x14/0x30
[  394.940778][ T1416]  kasan_save_free_info+0x3b/0x60
[  394.942384][ T1416]  __kasan_slab_free+0x51/0x70
[  394.943892][ T1416]  kfree+0x2b4/0x4d0
[  394.945137][ T1416]  process_one_work+0x9cf/0x1b70
[  394.946686][ T1416]  worker_thread+0x6c8/0xf10
[  394.948194][ T1416]  kthread+0x3c2/0x780
[  394.949497][ T1416]  ret_from_fork+0x5d7/0x6f0
[  394.950960][ T1416]  ret_from_fork_asm+0x1a/0x30
[  394.952463][ T1416] 
[  394.953236][ T1416] Last potentially related work creation:
[  394.954992][ T1416]  kasan_save_stack+0x33/0x60
[  394.956503][ T1416]  kasan_record_aux_stack+0xa7/0xc0
[  394.958138][ T1416]  insert_work+0x36/0x230
[  394.959506][ T1416]  __queue_work+0x97e/0x10f0
[  394.960995][ T1416]  queue_work_on+0x1a4/0x1f0
[  394.962460][ T1416]  release_tty+0x4de/0x5d0
[  394.963865][ T1416]  tty_release_struct+0xb7/0xe0
[  394.965405][ T1416]  tty_release+0xe2d/0x1430
[  394.966851][ T1416]  __fput+0x3ff/0xb70
[  394.968111][ T1416]  task_work_run+0x150/0x240
[  394.969584][ T1416]  do_exit+0x86c/0x2bd0
[  394.970909][ T1416]  do_group_exit+0xd3/0x2a0
[  394.972341][ T1416]  get_signal+0x2673/0x26d0
[  394.973774][ T1416]  arch_do_signal_or_restart+0x8f/0x790
[  394.975493][ T1416]  exit_to_user_mode_loop+0x84/0x110
[  394.977150][ T1416]  __do_fast_syscall_32+0x2ac/0x3a0
[  394.978775][ T1416]  do_fast_syscall_32+0x32/0x80
[  394.980316][ T1416]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  394.982329][ T1416] 
[  394.983092][ T1416] The buggy address belongs to the object at ffff88804b196000
[  394.983092][ T1416]  which belongs to the cache kmalloc-cg-2k of size 2048
[  394.987463][ T1416] The buggy address is located 1168 bytes inside of
[  394.987463][ T1416]  freed 2048-byte region [ffff88804b196000, ffff88804b196800)
[  394.991701][ T1416] 
[  394.992457][ T1416] The buggy address belongs to the physical page:
[  394.994434][ T1416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b190
[  394.997132][ T1416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  394.999726][ T1416] memcg:ffff88806bef9701
[  395.001078][ T1416] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[  395.003443][ T1416] page_type: f5(slab)
[  395.004704][ T1416] raw: 04fff00000000040 ffff88801b84c140 ffffea0001bf7c00 dead000000000002
[  395.007364][ T1416] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88806bef9701
[  395.010015][ T1416] head: 04fff00000000040 ffff88801b84c140 ffffea0001bf7c00 dead000000000002
[  395.012664][ T1416] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88806bef9701
[  395.015332][ T1416] head: 04fff00000000003 ffffea00012c6401 00000000ffffffff 00000000ffffffff
[  395.018013][ T1416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  395.020717][ T1416] page dumped because: kasan: bad access detected
[  395.022719][ T1416] page_owner tracks the page as allocated
[  395.024485][ T1416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5965, tgid 5965 (syz-executor), ts 46205761870, free_ts 44230295144
[  395.030946][ T1416]  post_alloc_hook+0x1c0/0x230
[  395.032467][ T1416]  get_page_from_freelist+0x1321/0x3890
[  395.034228][ T1416]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  395.036098][ T1416]  alloc_pages_mpol+0x1fb/0x550
[  395.037636][ T1416]  new_slab+0x23b/0x330
[  395.038938][ T1416]  ___slab_alloc+0xd9c/0x1940
[  395.040432][ T1416]  __slab_alloc.constprop.0+0x56/0xb0
[  395.042123][ T1416]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[  395.044128][ T1416]  kmemdup_noprof+0x29/0x60
[  395.045568][ T1416]  neigh_sysctl_register+0xb2/0x670
[  395.047221][ T1416]  addrconf_sysctl_register+0xb9/0x1f0
[  395.048929][ T1416]  ipv6_add_dev+0xb39/0x15f0
[  395.050402][ T1416]  addrconf_notify+0x53e/0x19e0
[  395.051923][ T1416]  notifier_call_chain+0xbc/0x410
[  395.053516][ T1416]  call_netdevice_notifiers_info+0xbe/0x140
[  395.055366][ T1416]  register_netdevice+0x182e/0x2270
[  395.057047][ T1416] page last free pid 23 tgid 23 stack trace:
[  395.058902][ T1416]  __free_frozen_pages+0x7fe/0x1180
[  395.060540][ T1416]  __folio_put+0x329/0x450
[  395.061946][ T1416]  skb_release_data+0x7fb/0x9c0
[  395.063488][ T1416]  napi_consume_skb+0x1b7/0x220
[  395.065012][ T1416]  e1000_unmap_and_free_tx_resource+0x144/0x200
[  395.066965][ T1416]  e1000_clean+0x4a0/0x2670
[  395.068390][ T1416]  __napi_poll.constprop.0+0xb7/0x550
[  395.070077][ T1416]  net_rx_action+0xa9f/0xfe0
[  395.071525][ T1416]  handle_softirqs+0x219/0x8e0
[  395.073034][ T1416]  run_ksoftirqd+0x3a/0x60
[  395.074461][ T1416]  smpboot_thread_fn+0x3f7/0xae0
[  395.076006][ T1416]  kthread+0x3c2/0x780
[  395.077303][ T1416]  ret_from_fork+0x5d7/0x6f0
[  395.078765][ T1416]  ret_from_fork_asm+0x1a/0x30
[  395.080290][ T1416] 
[  395.081060][ T1416] Memory state around the buggy address:
[  395.082808][ T1416]  ffff88804b196380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.085277][ T1416]  ffff88804b196400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.087755][ T1416] >ffff88804b196480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.090339][ T1416]                          ^
[  395.091791][ T1416]  ffff88804b196500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.094266][ T1416]  ffff88804b196580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.096771][ T1416] ==================================================================
[  395.099349][ T1416] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  395.099359][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  395.099372][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  395.099379][ T1416] Call Trace:
[  395.099384][ T1416]  <TASK>
[  395.099388][ T1416]  dump_stack_lvl+0x3d/0x1f0
[  395.099408][ T1416]  panic+0x71c/0x800
[  395.099423][ T1416]  ? __pfx_panic+0x10/0x10
[  395.099437][ T1416]  ? irqentry_exit+0x3b/0x90
[  395.099452][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  395.099467][ T1416]  ? handle_tx+0x5dc/0x630
[  395.099478][ T1416]  ? check_panic_on_warn+0x1f/0xb0
[  395.099494][ T1416]  ? handle_tx+0x5dc/0x630
[  395.099503][ T1416]  check_panic_on_warn+0xab/0xb0
[  395.099518][ T1416]  end_report+0x107/0x170
[  395.099528][ T1416]  kasan_report+0xee/0x110
[  395.099538][ T1416]  ? handle_tx+0x5dc/0x630
[  395.099548][ T1416]  handle_tx+0x5dc/0x630
[  395.099560][ T1416]  dev_hard_start_xmit+0x97/0x740
[  395.099574][ T1416]  __dev_queue_xmit+0x7eb/0x43e0
[  395.099589][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  395.099603][ T1416]  ? finish_task_switch.isra.0+0x221/0xc10
[  395.099616][ T1416]  ? rcu_is_watching+0x12/0xc0
[  395.099627][ T1416]  ? __pfx___dev_queue_xmit+0x10/0x10
[  395.099641][ T1416]  ? __lock_acquire+0xb8a/0x1c90
[  395.099655][ T1416]  ? __lock_acquire+0xb8a/0x1c90
[  395.099671][ T1416]  ? do_raw_spin_lock+0x12c/0x2b0
[  395.099687][ T1416]  ? find_held_lock+0x2b/0x80
[  395.099698][ T1416]  ? skb_dequeue+0x126/0x180
[  395.099710][ T1416]  ? find_held_lock+0x2b/0x80
[  395.099720][ T1416]  ? rcu_is_watching+0x12/0xc0
[  395.099732][ T1416]  tx+0xcc/0x190
[  395.099743][ T1416]  ? __pfx_tx+0x10/0x10
[  395.099753][ T1416]  kthread+0x1e4/0x3e0
[  395.099762][ T1416]  ? find_held_lock+0x2b/0x80
[  395.099773][ T1416]  ? __pfx_kthread+0x10/0x10
[  395.099782][ T1416]  ? __pfx_default_wake_function+0x10/0x10
[  395.099793][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  395.099808][ T1416]  ? __kthread_parkme+0x19e/0x250
[  395.099826][ T1416]  ? __pfx_kthread+0x10/0x10
[  395.099839][ T1416]  kthread+0x3c2/0x780
[  395.099857][ T1416]  ? __pfx_kthread+0x10/0x10
[  395.099878][ T1416]  ? rcu_is_watching+0x12/0xc0
[  395.099890][ T1416]  ? __pfx_kthread+0x10/0x10
[  395.099905][ T1416]  ret_from_fork+0x5d7/0x6f0
[  395.099921][ T1416]  ? __pfx_kthread+0x10/0x10
[  395.099936][ T1416]  ret_from_fork_asm+0x1a/0x30
[  395.099950][ T1416]  </TASK>
[  395.102221][ T1416] Kernel Offset: disabled

VM DIAGNOSIS:
01:24:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85584895 RDI=ffffffff9b0ac980 RBP=ffffffff9b0ac940 RSP=ffffc900079ef458
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b0ac940 R15=ffffffff85584830
RIP=ffffffff855848bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097520000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f5075da4 CR3=000000000e382000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000140be23 RBX=0000000000000001 RCX=ffffffff8b847c69 RDX=0000000000000000
RSI=ffffffff8de2c794 RDI=ffffffff8c157960 RBP=ffffed1003bd2488 RSP=ffffc9000046fdf8
R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001
R12=0000000000000001 R13=ffff88801de92440 R14=ffffffff90a9a150 R15=0000000000000000
RIP=ffffffff8b8467cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097620000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f72b2d48 CR3=000000000e382000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=1ffff1100a14be40 RBX=ffff888050a5f420 RCX=ffffffff81cacac8 RDX=ffffffffa0203954
RSI=00000000f70fe579 RDI=0000000000000006 RBP=ffff888050a5f420 RSP=ffffc90003a0f4d0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=00000000f70fe579 R13=dffffc0000000000 R14=0000000000000000 R15=ffffffffa0203954
RIP=ffffffff81bb5860 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097720000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7495004 CR3=000000004b199000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=000000000005cffb RCX=dffffc0000000000 RDX=ffff8880273f0000
RSI=ffffffff822ce685 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900034bf748
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff88804118fe70 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81bb5ef0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097820000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f46e40 CR3=0000000052036000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73e3ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000