last executing test programs:

58.051607744s ago: executing program 2 (id=559):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0xc, 0x2fa11, 0x401}, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)

57.052479328s ago: executing program 2 (id=567):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a42804000000fffe1400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

56.969660372s ago: executing program 2 (id=569):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100677372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

56.901464167s ago: executing program 2 (id=572):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x39)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a00000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=<r3=>0x0)
ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
sendfile(r4, r4, 0x0, 0x23)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$inet_udp(0x2, 0x2, 0x0)

55.905516812s ago: executing program 2 (id=578):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x9d)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000130001002bbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000a004}, 0x40010)
mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x1)
socket(0x25, 0x801, 0x7)
openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x80)
lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x1)
syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)

54.922069782s ago: executing program 2 (id=584):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6_sctp(0xa, 0x2, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}]}, &(0x7f0000000080)=0xc) (async)
r2 = userfaultfd(0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x82, 0x24, 0x4ee4e6a52ff5613f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sync() (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841) (async)
recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async)
sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1) (async)
recvmsg$unix(r8, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x40000001) (async)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f00002ba000/0x1000)=nil})
ioctl$KVM_NMI(r10, 0xae9a) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x8814, 0xfffffffc, 0x4, 0xce024d, 0x4, 0x4}, 0x9c) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=r11, @ANYBLOB="00000000000000002800128008000100677265001c00028006000e000111"], 0x48}}, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={[{@uuid_off}]})

47.580048225s ago: executing program 3 (id=639):
set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x1f, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x1f, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) (async)
sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) (async)

47.483215586s ago: executing program 3 (id=640):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000200000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

47.483049381s ago: executing program 3 (id=641):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffd}, 0x1c)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write(r0, &(0x7f0000000040)="102f", 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="ba37bc6e74cc160f3f46dd21efc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffd}, 0x1c) (async)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
write(r0, &(0x7f0000000040)="102f", 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="ba37bc6e74cc160f3f46dd21efc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

47.482889289s ago: executing program 3 (id=642):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6)
getsockopt(r0, 0x6, 0x8, &(0x7f0000000000)=""/19, &(0x7f0000000080)=0x13)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd25, 0x25cfdbfb, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x4010)
fcntl$setpipe(r0, 0x407, 0x8000)

46.581095701s ago: executing program 3 (id=647):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='\\', 0x1)
r1 = syz_clone(0x4948000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa883986dd607428dd00283afffe8000007b283d9d1126ab390000000000001400000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e2"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x30}}, 0x0)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

46.523227853s ago: executing program 3 (id=648):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000fdff0000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

39.311893026s ago: executing program 32 (id=584):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6_sctp(0xa, 0x2, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}]}, &(0x7f0000000080)=0xc) (async)
r2 = userfaultfd(0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x82, 0x24, 0x4ee4e6a52ff5613f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sync() (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841) (async)
recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async)
sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1) (async)
recvmsg$unix(r8, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x40000001) (async)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f00002ba000/0x1000)=nil})
ioctl$KVM_NMI(r10, 0xae9a) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x8814, 0xfffffffc, 0x4, 0xce024d, 0x4, 0x4}, 0x9c) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=r11, @ANYBLOB="00000000000000002800128008000100677265001c00028006000e000111"], 0x48}}, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={[{@uuid_off}]})

31.485037434s ago: executing program 33 (id=648):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000fdff0000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

9.11188476s ago: executing program 0 (id=824):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a26000000000a01040000000000000000050000000900010073797a3000000000040002400000000154000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000280004800800024000000012080001400000000014000300776c616e3000000000000000000000001400000011000100"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)

9.111635359s ago: executing program 0 (id=825):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
lsetxattr$security_ima(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000280), &(0x7f0000000000)=@ng={0x4, 0x22}, 0x2, 0x1) (async)
lsetxattr$security_ima(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000280), &(0x7f0000000000)=@ng={0x4, 0x22}, 0x2, 0x1)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4)
socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xfffffffc}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x8)

8.322519181s ago: executing program 0 (id=832):
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x3, 0x0)
pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0)

8.322387418s ago: executing program 0 (id=833):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0000012dbd7000fbdbdf2500000400000000000800010403"], 0x20}}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

8.06235717s ago: executing program 0 (id=834):
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$fb1(0xffffffffffffff9c, 0x0, 0x101100, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0)
write(r2, &(0x7f00000004c0), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b70600eaffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xac, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206"}, 0x4c)
fsmount(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48)
dup(0xffffffffffffffff)

7.421649519s ago: executing program 0 (id=838):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x94, &(0x7f00000000c0)={0x80000000000, 0x800, 0x11}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000ffff2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a9110100201000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r3, @ANYBLOB="a4702da0", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0xec3b, 0x1000, 0x7, 0xa009, 0xffffffffffffffff, 0x2, '\x00', r3, r7, 0x0, 0x2, 0x4, 0x2, @value=r7}, 0x50)
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000bc0)={0x80000004, r7})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x3, 0x2, 0x3, 0x6, 0xbc, 0x5}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r8, 0x8b32, &(0x7f0000000040))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x70, 0x10, 0x403, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x10}, @IFLA_BR_MCAST_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r11, 0x4bfb, &(0x7f0000000380))
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0xa, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000680)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000800)=[{}, {}, {0x0, <r12=>0x80000000}, {}, {}], 0x9, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
fsmount(r4, 0x0, 0xb76814038e4e8d52)
ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc01c7c02, &(0x7f0000000b80)={r12, &(0x7f0000000ac0), &(0x7f0000000b00)})

6.691725399s ago: executing program 4 (id=840):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000500000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

6.449505231s ago: executing program 4 (id=846):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0000012dbd7000fbdbdf2500000400000000000800010403"], 0x20}}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

6.443432638s ago: executing program 4 (id=847):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x1, 0x7, 0x4, 0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe0000000072030000fffffffeb5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRES16], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
msgget$private(0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000004c0)={<r10=>0x0, 0x50000000}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000580)={r10, 0xe6}, &(0x7f00000005c0)=0x8)
add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff)
openat$vhost_vsock(0xffffff9c, &(0x7f0000000400), 0x2, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r12, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)

4.00424387s ago: executing program 4 (id=855):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0000012dbd7000fbdbdf2500000400000000000800010403"], 0x20}}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

4.002305764s ago: executing program 4 (id=856):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18)
mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ef)
mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0)
lseek(r2, 0xfffffffffffffffe, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)="76656e646f80e22a723a6d6f1bede58a8c72951a8d9997987210b3e164656c3a", 0x20)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000080)={0x0})
sched_setscheduler(r4, 0x5, &(0x7f00000002c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, <r7=>0xffffffffffffffff}, 0x4)
ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f00000001c0)={0xd, 0x4})
r8 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000000))
fcntl$setstatus(r8, 0x4, 0x40000)
socket$inet(0x2, 0x6, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x27, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9ff3, 0x0, 0x0, 0x0, 0x8000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r6}, 0x94)

3.821023274s ago: executing program 4 (id=859):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)
sendto$inet6(r0, &(0x7f00000003c0)="a687337ce816ca484e8bacdb1f07bacd5e6f9d3a9ce7a660", 0x18, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
shutdown(r0, 0x1)

3.816859611s ago: executing program 5 (id=860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x10009, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x57, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x6, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x700, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x80, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x3, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0x80ffffff, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x7, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x2, 0x5, 0x2, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x63e, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x1, 0x859, 0x80aedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x3, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x6, 0x4, 0x6, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x5, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x3, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x2, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804)

3.742815158s ago: executing program 1 (id=861):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0)
r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0)
ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x815)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000100)={0x3, 0x84})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680))
listxattr(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r9, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)

3.661244555s ago: executing program 5 (id=862):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2", 0x68)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000040)={'pim6reg0\x00', @ifru_ivalue=0x5})
mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247e88ce2bc3640e7"])
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044)

2.818768012s ago: executing program 1 (id=863):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0x2}]})
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f00000010c0))
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r7, 0x0, 0x0, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0x7}, 0x1c)
setsockopt(r8, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
getgroups(0x44, &(0x7f0000000040))
sendmsg$NFT_BATCH(r10, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000170a01020000000000000000000c0007"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)

2.232518121s ago: executing program 5 (id=864):
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r5 = socket$igmp(0x2, 0x3, 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c032b2040485d39327f860831"], 0xf)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450)
openat$proc_mixer(0xffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0x42, 0x0)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.868723137s ago: executing program 1 (id=865):
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r5 = socket$igmp(0x2, 0x3, 0x2)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c032b2040485d39327f860831"], 0xf)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000a81cb03ab60260dbd1212f28365600000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900010073797a310000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001403da44f9208000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xec}}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450)
openat$proc_mixer(0xffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0x42, 0x0)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.26239925s ago: executing program 5 (id=866):
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$fb1(0xffffffffffffff9c, 0x0, 0x101100, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0)
write(r2, &(0x7f00000004c0), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xac, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206"}, 0x4c)
fsmount(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48)
dup(0xffffffffffffffff)

945.476298ms ago: executing program 1 (id=867):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r0=>0x0}, &(0x7f0000000200)=0xc)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x844001, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@name}, {@name={'name', 0x3d, '+}%'}}, {@nofavordynmods}, {}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, ']$%\\)('}}, {@uid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', r0}}]})
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', 0x0, 0x1008840, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x2000800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$snddsp(&(0x7f000024d000/0x1000)=nil, 0x1000, 0x1000008, 0x40010, 0xffffffffffffffff, 0xd000)
sched_setattr(0x0, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)

372.551395ms ago: executing program 5 (id=868):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000700000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

272.530442ms ago: executing program 5 (id=869):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r0}, 0x4)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="68faff00c5d73ee39bdd1299c359d65d52f2ba428e38537f7fc1aae8905ee3a69f901a443536e5373559753d23022fda7ffbea79ade87894aabfcf43cecfa7f63137cabd", @ANYRES16=r1, @ANYBLOB="000828bd7000ffdbdf25010000000000000009410000004c00180000000562726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = inotify_init()
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
read(r4, &(0x7f0000000900), 0x100)
read(r4, &(0x7f0000000b00), 0x100)
read(r4, &(0x7f0000000d00), 0x100)
read(r4, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20602, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'virt_wifi0\x00', 0x400})
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0x0, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x1f4, 0x218, 0x0, {}, [@common=@inet=@sctp={{0x144}, {[0x4e23, 0x4e21], [0x4e23, 0x4e24], [0x7, 0x6, 0x0, 0x5, 0x10001, 0x5, 0x7, 0xa, 0x40000000, 0x7, 0x101, 0x4, 0x7f, 0x3, 0x4, 0x1, 0x5, 0x7, 0x10, 0x1e1f490, 0x40, 0xfffffffb, 0x9, 0x5, 0x2, 0xb, 0x6, 0x3ff, 0x4, 0xff, 0x5, 0xa, 0x5, 0x1, 0x1ff, 0x2ad8, 0x2, 0x2, 0x7, 0x1, 0x9, 0x0, 0x802, 0x7, 0x3ff, 0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffa, 0x1, 0x80000000, 0xe95, 0xfffffff8, 0x0, 0x8, 0xff, 0x7ff, 0x8, 0x0, 0x4, 0x8, 0x4], 0x0, [{0x7, 0x3, 0x6}, {0x6, 0xbe, 0x2b}, {0x6, 0x4, 0x2}, {0x61, 0x7, 0x5}], 0x3, 0x4}}, @common=@set={{0x40}, {{0x0, [0x4, 0x2, 0x2, 0x4, 0x5, 0x4], 0x0, 0x1}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x94, 0xf0, 0x0, {}, [@common=@inet=@socket2={{0x24}, 0x6}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 0x0, 0x7, [0x3b, 0x2e, 0x7, 0x2, 0x30, 0xc, 0x6, 0x1f, 0x2c, 0xc, 0x0, 0x1, 0x2b, 0x4, 0x3e, 0x1c], 0x1, 0x3, 0x7ff}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x2}}, @common=@ah={{0x2c}, {[0x5, 0x671], 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x508)
r6 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000100)=0x1e)
getpeername$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

441.53µs ago: executing program 1 (id=870):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

0s ago: executing program 1 (id=871):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r2, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x30, 0x61, 0x3f, 0xfffff004}]})
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'erspan0\x00', <r6=>0x0, 0x7800, 0x40, 0x1, 0x6, {{0x10, 0x4, 0x0, 0x3b, 0x40, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast2, @private=0x8010100, {[@timestamp={0x44, 0x8, 0x59, 0x0, 0x9, [0xfffffff2]}, @timestamp={0x44, 0xc, 0x5d, 0x0, 0x2, [0x80000000, 0x9]}, @timestamp_addr={0x44, 0x14, 0xea, 0x1, 0x8, [{@broadcast}, {@loopback, 0x10}]}, @ra={0x94, 0x4, 0x1}]}}}}})
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r6, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)

kernel console output (not intermixed with test programs):

./file0fusehJ-���s�[   66.532296][ T6292] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.720022][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'.
[   66.982448][ T5747] Bluetooth: hci1: unexpected event for opcode 0x202b
[   66.989077][ T6305] x_tables: duplicate underflow at hook 1
[   66.991635][ T6305] hub 8-0:1.0: USB hub found
[   66.993615][ T6305] hub 8-0:1.0: 1 port detected
[   67.238857][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.318680][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout
[   67.328703][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout
[   68.115462][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'.
[   68.505145][ T6355] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.090492][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'.
[   69.151570][ T6379] netlink: 6 bytes leftover after parsing attributes in process `syz.0.121'.
[   69.232996][ T6384] tmpfs: Unknown parameter 'nr_inod'
[   69.249393][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   69.318728][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.398738][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout
[   69.398759][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout
[   69.489821][ T5747] Bluetooth: hci1: unexpected event for opcode 0x202b
[   69.598424][ T6389] x_tables: duplicate underflow at hook 1
[   69.635060][ T6389] hub 8-0:1.0: USB hub found
[   69.673729][ T6389] hub 8-0:1.0: 1 port detected
[   69.805912][ T6393] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   70.244083][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'.
[   70.656952][ T6408] sctp_transport_update_pmtu: 102 callbacks suppressed
[   70.656991][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.664755][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.668330][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.672201][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.677721][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.681470][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.688202][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.694031][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.698722][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.703641][ T6408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   70.884538][ T6417] loop5: detected capacity change from 0 to 7
[   70.897216][ T6417] Dev loop5: unable to read RDB block 7
[   70.903326][ T6417]  loop5: AHDI p1
[   70.904811][ T6417] loop5: partition table partially beyond EOD, truncated
[   70.921773][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[   70.924251][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[   71.087852][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'.
[   71.141538][ T5747] Bluetooth: hci0: unexpected event for opcode 0x4ad0
[   71.451023][   T43] audit: type=1800 audit(1785695758.611:12): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="bus" dev="ramfs" ino=8939 res=0 errno=0
[   71.861186][ T5747] Bluetooth: hci1: unexpected event for opcode 0x2003
[   71.923764][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.927457][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.991777][ T6455] loop5: detected capacity change from 0 to 7
[   71.996670][ T6455] Dev loop5: unable to read RDB block 7
[   71.998638][ T6455]  loop5: AHDI p1
[   71.999822][ T6455] loop5: partition table partially beyond EOD, truncated
[   72.034831][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.100742][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'.
[   72.107718][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'.
[   72.125665][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.315418][ T5747] Bluetooth: hci0: unexpected event for opcode 0x202b
[   72.356031][ T6469] x_tables: duplicate underflow at hook 1
[   72.366508][ T6469] hub 8-0:1.0: USB hub found
[   72.369485][ T6469] hub 8-0:1.0: 1 port detected
[   72.380092][ T6461] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   72.388817][ T5827] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.398072][ T5827] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.401236][ T5827] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.404369][ T5827] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.672645][ T6475] NILFS (nullb0): couldn't find nilfs on the device
[   73.126404][ T6497] tmpfs: Unknown parameter 'nr_inod'
[   73.144266][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[   73.148963][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.156593][ T6494] 8021q: adding VLAN 0 to HW filter on device team0
[   73.165203][ T6494] bond1: (slave team0): Enslaving as an active interface with an up link
[   73.241583][ T6500] netlink: 6 bytes leftover after parsing attributes in process `syz.1.156'.
[   73.467539][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.472002][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.492834][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'.
[   73.549486][ T3966] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   73.670764][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'.
[   73.686981][ T6514] bond2: option lacp_rate: invalid value (2)
[   73.708617][ T3966] usb 6-1: Using ep0 maxpacket: 16
[   73.714389][ T3966] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[   73.717285][ T3966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.719916][ T3966] usb 6-1: Product: syz
[   73.721264][ T3966] usb 6-1: Manufacturer: syz
[   73.722915][ T3966] usb 6-1: SerialNumber: syz
[   73.740514][ T6514] bond2 (unregistering): Released all slaves
[   73.777427][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'.
[   74.547944][ T6504] netlink: 'syz.1.158': attribute type 1 has an invalid length.
[   74.774279][ T3966] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[   74.780122][ T3966] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   74.783449][ T3966] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[   74.786636][ T3966] usb 6-1: media controller created
[   74.793193][ T3966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   74.794702][ T6504] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.996142][ T5747] Bluetooth: hci2: unexpected event for opcode 0x202b
[   75.032098][ T3966] zl10353_read_register: readreg error (reg=127, ret==-110)
[   75.036204][ T6534] x_tables: duplicate underflow at hook 1
[   75.040825][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv1
[   75.042257][ T6534] hub 8-0:1.0: USB hub found
[   75.045831][ T6534] hub 8-0:1.0: 1 port detected
[   75.127349][ T6533] bond1: (slave batadv1): making interface the new active one
[   75.200423][ T6533] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   75.413698][ T3966] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[   75.760155][ T6504] bond1 (unregistering): (slave batadv1): Releasing active interface
[   75.764897][ T6504] bond1 (unregistering): Released all slaves
[   75.836453][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'.
[   75.842673][   T10] usb 6-1: USB disconnect, device number 2
[   75.843872][ T6550] bond0: entered promiscuous mode
[   75.846251][ T6550] bond_slave_0: entered promiscuous mode
[   75.848516][ T6550] bond_slave_1: entered promiscuous mode
[   75.852062][ T6550] gretap0: entered promiscuous mode
[   76.176569][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'.
[   76.183984][   T56] cfg80211: failed to load regulatory.db
[   76.339577][ T6563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   76.432359][ T6571] loop5: detected capacity change from 0 to 7
[   76.441731][ T6571] Dev loop5: unable to read RDB block 7
[   76.444159][ T6571]  loop5: AHDI p1
[   76.445719][ T6571] loop5: partition table partially beyond EOD, truncated
[   76.818290][ T6585] tmpfs: Unknown parameter 'nr_inod'
[   76.844619][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[   77.545135][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.186'.
[   77.762594][ T6608] netlink: 6 bytes leftover after parsing attributes in process `syz.3.191'.
[   78.206921][ T6623] tmpfs: Unknown parameter 'nr_inod'
[   78.219909][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[   78.983256][ T6636] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'.
[   79.038471][ T6638] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.044284][ T6638] bond1: (slave team0): Releasing backup interface
[   79.063778][ T6631] retu-mfd 0-0001: could not read Retu revision: -6
[   79.068278][ T6638] 8021q: adding VLAN 0 to HW filter on device team0
[   79.071406][ T6631] i2c i2c-0: new_device: Instantiated device retu at 0x01
[   79.073974][ T6638] bond2: (slave team0): Enslaving as an active interface with an up link
[   79.100376][ T6631] retu-mfd 0-0002: could not read Tahvo revision: -6
[   79.104186][ T6631] i2c i2c-0: new_device: Instantiated device tahvo at 0x02
[   79.169591][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   79.263415][ T6662] tmpfs: Unknown parameter 'nr_inod'
[   79.265628][ T6660] process 'syz.0.208' launched '/dev/fd/13' with NULL argv: empty string added
[   79.273570][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'.
[   80.067407][ T5747] Bluetooth: hci3: unexpected event for opcode 0x202b
[   80.070873][ T6659] x_tables: duplicate underflow at hook 1
[   80.079090][ T6659] hub 8-0:1.0: USB hub found
[   80.081087][ T6659] hub 8-0:1.0: 1 port detected
[   80.359399][ T5747] Bluetooth: hci1: unexpected event for opcode 0x202b
[   80.364947][ T6679] x_tables: duplicate underflow at hook 1
[   80.369092][ T6679] hub 8-0:1.0: USB hub found
[   80.371291][ T6679] hub 8-0:1.0: 1 port detected
[   80.578746][ T5829] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   80.738679][ T5829] usb 6-1: Using ep0 maxpacket: 16
[   80.743047][ T5829] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[   80.746052][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.749574][ T5829] usb 6-1: Product: syz
[   80.750938][ T5829] usb 6-1: Manufacturer: syz
[   80.752695][ T5829] usb 6-1: SerialNumber: syz
[   80.980929][ T5829] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[   80.988423][ T5829] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   80.994406][ T5829] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[   81.000821][ T5829] usb 6-1: media controller created
[   81.007856][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   81.008799][ T6693] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.184895][ T6678] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   81.255891][ T6678] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.256091][ T6717] tmpfs: Unknown parameter 'nr_inod'
[   81.269105][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'.
[   81.386376][ T5829] zl10353_read_register: readreg error (reg=127, ret==-110)
[   81.421747][ T6716] 8021q: adding VLAN 0 to HW filter on device batadv2
[   81.433591][ T6716] bond1: (slave batadv2): making interface the new active one
[   81.438265][ T6716] bond1: (slave batadv2): Enslaving as an active interface with an up link
[   81.510694][ T6678] bond1 (unregistering): (slave batadv2): Releasing active interface
[   81.530326][ T6678] bond1 (unregistering): Released all slaves
[   81.557251][ T5747] Bluetooth: hci2: unexpected event for opcode 0x202b
[   81.563004][ T6722] x_tables: duplicate underflow at hook 1
[   81.572397][ T6722] hub 8-0:1.0: USB hub found
[   81.576537][ T6722] hub 8-0:1.0: 1 port detected
[   82.055742][ T5829] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[   82.057350][ T6740] netlink: 6 bytes leftover after parsing attributes in process `syz.0.224'.
[   82.063387][ T5829] usb 6-1: USB disconnect, device number 3
[   82.243347][   T43] audit: type=1326 audit(1785695769.401:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.255828][   T43] audit: type=1326 audit(1785695769.411:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.267244][   T43] audit: type=1326 audit(1785695769.411:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.279866][   T43] audit: type=1326 audit(1785695769.411:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.293510][   T43] audit: type=1326 audit(1785695769.411:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.308316][   T43] audit: type=1326 audit(1785695769.411:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.318641][   T43] audit: type=1326 audit(1785695769.421:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.332037][   T43] audit: type=1326 audit(1785695769.421:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.349079][   T43] audit: type=1326 audit(1785695769.431:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.385167][   T43] audit: type=1326 audit(1785695769.541:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[   82.459620][ T5747] Bluetooth: hci0: unexpected event for opcode 0x4ad0
[   82.549337][ T6766] Invalid ioctl command number [0 >= 10]
[   83.378805][ T6784] tmpfs: Unknown parameter 'nr_inod'
[   83.472129][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[   83.480249][ T6789] netlink: 6 bytes leftover after parsing attributes in process `syz.0.238'.
[   84.480424][ T6801] loop5: detected capacity change from 0 to 7
[   84.492123][ T6801] Dev loop5: unable to read RDB block 7
[   84.493953][ T6801]  loop5: AHDI p1
[   84.495174][ T6801] loop5: partition table partially beyond EOD, truncated
[   84.531427][ T6803] netlink: 'syz.2.246': attribute type 63 has an invalid length.
[   84.590678][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.249'.
[   84.602825][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'.
[   84.618650][ T2984] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   84.788704][ T2984] usb 8-1: Using ep0 maxpacket: 16
[   84.797403][ T2984] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[   84.800667][ T2984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.803206][ T2984] usb 8-1: Product: syz
[   84.804564][ T2984] usb 8-1: Manufacturer: syz
[   84.806164][ T2984] usb 8-1: SerialNumber: syz
[   84.934910][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   85.020975][ T2984] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[   85.030058][ T2984] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.037675][ T2984] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[   85.045640][ T2984] usb 8-1: media controller created
[   85.052975][ T2984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.103487][ T6840] loop5: detected capacity change from 0 to 7
[   85.107776][ T6840] Dev loop5: unable to read RDB block 7
[   85.109642][ T6840]  loop5: AHDI p1
[   85.110859][ T6840] loop5: partition table partially beyond EOD, truncated
[   85.150331][ T6842] netlink: 'syz.0.257': attribute type 63 has an invalid length.
[   85.219869][ T6796] netlink: 'syz.3.241': attribute type 1 has an invalid length.
[   85.238317][ T6796] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.245263][ T6849] netlink: 6 bytes leftover after parsing attributes in process `syz.0.260'.
[   85.252582][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv1
[   85.257072][ T6796] bond2: (slave batadv1): making interface the new active one
[   85.262319][ T6796] bond2: (slave batadv1): Enslaving as an active interface with an up link
[   85.268835][ T2984] zl10353_read_register: readreg error (reg=127, ret==-110)
[   85.275342][ T6796] bond2 (unregistering): (slave batadv1): Releasing active interface
[   85.283146][ T6796] bond2 (unregistering): Released all slaves
[   85.435667][ T2984] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[   85.439698][ T2984] usb 8-1: USB disconnect, device number 3
[   85.640372][ T6853] program syz.0.261 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.763442][ T6853] infiniband syz0: set down
[   85.765017][ T6853] infiniband syz0: added bond_slave_1
[   85.775646][ T6853] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   85.781233][ T6853] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   85.786354][ T6853] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   85.803454][ T6857] netlink: 'syz.1.263': attribute type 8 has an invalid length.
[   85.805932][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'.
[   85.808118][ T6853] RDS/IB: syz0: added
[   85.810183][ T6853] smc: adding ib device syz0 with port count 1
[   85.812203][ T6853] smc:    ib device syz0 port 1 has no pnetid
[   85.828388][ T6857] bond0: entered promiscuous mode
[   85.830091][ T6857] bond_slave_0: entered promiscuous mode
[   85.831968][ T6857] bond_slave_1: entered promiscuous mode
[   85.837604][ T6857] gretap0: entered promiscuous mode
[   85.840927][ T6857] veth1_to_team: entered promiscuous mode
[   85.843208][ T6857] debugfs: 'hsr1' already exists in 'hsr'
[   85.845013][ T6857] Cannot create hsr debugfs directory
[   85.846802][ T6857] hsr1: entered promiscuous mode
[   86.075310][ T6862] i2c i2c-1: new_device: Instantiated device tps6598x at 0x03
[   86.120395][ T6867] loop5: detected capacity change from 0 to 7
[   86.122833][ T6867] Dev loop5: unable to read RDB block 7
[   86.124649][ T6867]  loop5: AHDI p1
[   86.125873][ T6867] loop5: partition table partially beyond EOD, truncated
[   86.487025][ T6896] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.499177][ T6896] bond2: (slave team0): Releasing backup interface
[   86.502327][ T6892] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   86.507786][ T6896] 8021q: adding VLAN 0 to HW filter on device team0
[   86.510841][ T6892] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   86.511984][ T6896] bond3: (slave team0): Enslaving as an active interface with an up link
[   86.520619][ T6892] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   86.526881][ T6892] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   87.016465][ T5747] Bluetooth: hci2: adv larger than maximum supported
[   87.184250][ T6928] input: syz0 as /devices/virtual/input/input7
[   87.371899][ T6933] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.558638][   T43] kauditd_printk_skb: 217 callbacks suppressed
[   87.558650][   T43] audit: type=1326 audit(1785695774.711:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.577796][   T43] audit: type=1326 audit(1785695774.711:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7fc00000
[   87.585245][   T43] audit: type=1326 audit(1785695774.711:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.593123][   T43] audit: type=1326 audit(1785695774.711:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.600877][   T43] audit: type=1326 audit(1785695774.711:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.608811][   T43] audit: type=1326 audit(1785695774.711:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.619880][   T43] audit: type=1326 audit(1785695774.711:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.628169][   T43] audit: type=1326 audit(1785695774.711:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.635051][   T43] audit: type=1326 audit(1785695774.711:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.645099][   T43] audit: type=1326 audit(1785695774.711:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.0.277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7fc00000
[   87.679577][ T6948] netlink: 'syz.1.287': attribute type 1 has an invalid length.
[   87.748185][ T6948] bond2: entered promiscuous mode
[   87.759843][ T6948] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.778074][ T6948] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.782380][ T6948] bond2: (slave ipip0): The slave device specified does not support setting the MAC address
[   87.785945][ T6948] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[   87.793043][ T6948] bond2: (slave ipip0): making interface the new active one
[   87.795563][ T6948] ipip0: entered promiscuous mode
[   87.804328][ T6948] bond2: (slave ipip0): Enslaving as an active interface with an up link
[   87.987922][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
��
���� 
 �
/dev/fusefd=0x0000000000000007,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)��F�nw�����
G\,\z�hm�S��p�vKQ������4���A�ׁ���r�)�^>�r��������I˿ލ8���C�d�۹����)>u�4�%Ba���A�
�y�v-cӬ�zZ��M��J�����M�*g��N�����i�ʮ�)�iU���ن�K�$�����$���?���/�Iq���T|�m��/���قyS:�s�-xP�f��[   88.088762][ T5747] Bluetooth: hci3: unexpected event for opcode 0x4ad0
./file0fuseh�-���s�[   88.325287][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.296'.
[   88.438708][ T5747] Bluetooth: hci1: command 0x0c1a tx timeout
[   88.518671][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout
[   88.598681][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout
[   88.610797][ T6982] netlink: 6 bytes leftover after parsing attributes in process `syz.0.299'.
[   88.675017][ T6989] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   88.677244][ T6989] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   88.682746][ T6990] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9)
[   88.684941][ T6990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   88.687783][ T6990] vhci_hcd vhci_hcd.0: Device attached
[   88.688239][ T6989] vhci_hcd vhci_hcd.0: Device attached
[   88.695006][ T6991] vhci_hcd: connection closed
[   88.695248][ T6993] vhci_hcd: connection closed
[   88.698418][ T5827] vhci_hcd vhci_hcd.0: stop threads
[   88.702818][ T5827] vhci_hcd vhci_hcd.0: release socket
[   88.704919][ T5827] vhci_hcd vhci_hcd.0: disconnect device
[   88.707487][ T5827] vhci_hcd vhci_hcd.0: stop threads
[   88.711391][ T5827] vhci_hcd vhci_hcd.0: release socket
[   88.713434][ T5827] vhci_hcd vhci_hcd.0: disconnect device
[   89.076969][ T6998] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[   89.079105][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   89.082060][ T6998] vhci_hcd vhci_hcd.0: Device attached
[   89.088321][ T6998] netlink: 'syz.1.303': attribute type 12 has an invalid length.
[   89.181496][ T7000] vhci_hcd: connection closed
[   89.182904][ T5827] vhci_hcd vhci_hcd.1: stop threads
[   89.186273][ T5827] vhci_hcd vhci_hcd.1: release socket
[   89.187977][ T5827] vhci_hcd vhci_hcd.1: disconnect device
[   89.251015][ T7005] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   89.253282][ T7005] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   89.257083][ T7005] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   89.265631][ T7005] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   89.740356][ T7017] loop5: detected capacity change from 0 to 7
[   89.745812][ T7017] Dev loop5: unable to read RDB block 7
[   89.748160][ T7017]  loop5: AHDI p1
[   89.750009][ T7017] loop5: partition table partially beyond EOD, truncated
[   89.907429][ T7022] tmpfs: Unknown parameter 'nr_inod'
[   89.914887][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'.
[   90.275150][ T7030] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   90.277207][ T7030] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   90.290956][ T7030] vhci_hcd vhci_hcd.0: Device attached
[   90.302653][ T7031] vhci_hcd: connection closed
[   90.302838][ T5827] vhci_hcd vhci_hcd.3: stop threads
[   90.308700][ T5827] vhci_hcd vhci_hcd.3: release socket
[   90.311789][ T5827] vhci_hcd vhci_hcd.3: disconnect device
[   90.521422][ T5747] Bluetooth: hci1: unexpected event for opcode 0x202b
[   90.567922][ T7034] x_tables: duplicate underflow at hook 1
[   90.578688][ T7034] hub 8-0:1.0: USB hub found
[   90.581577][ T7034] hub 8-0:1.0: 1 port detected
[   90.845560][ T7042] program syz.2.317 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.388736][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout
[   91.388981][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout
[   91.392836][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout
[   92.115890][ T7055] tmpfs: Unknown parameter 'nr_inod'
[   92.133097][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   92.190872][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'.
[   92.405524][ T7068] tmpfs: Unknown parameter 'nr_inod'
[   92.420517][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'.
[   92.495746][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'.
[   93.435545][ T7074] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.624558][ T7096] netlink: 18 bytes leftover after parsing attributes in process `syz.0.336'.
[   93.756893][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'.
[   93.815471][ T6169] IPVS: starting estimator thread 0...
[   93.854380][ T7111] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   93.860673][   T43] kauditd_printk_skb: 16 callbacks suppressed
[   93.860685][   T43] audit: type=1800 audit(1785695781.021:266): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.341" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[   93.948652][ T7112] IPVS: using max 42 ests per chain, 100800 per kthread
[   94.392983][ T7121] netlink: 'syz.3.344': attribute type 1 has an invalid length.
[   94.405311][ T7122] vlan2: entered allmulticast mode
[   94.408883][ T7122] veth0_to_bond: entered allmulticast mode
[   94.488375][ T7121] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.519636][ T7132] netlink: 18 bytes leftover after parsing attributes in process `syz.3.346'.
[   94.553897][ T7126] 8021q: adding VLAN 0 to HW filter on device bond3
[   94.651674][ T7139] siw: device registration error -23
[   94.741521][ T5746] Bluetooth: hci3: unexpected event for opcode 0x4ad0
[   95.712341][ T7180] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.131909][ T7187] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   96.134776][ T7187] 
@0�: renamed from bond_slave_1 (while UP)
[   96.734877][ T7199] tmpfs: Unknown parameter 'nr_inod'
[   96.779031][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'.
[   96.801857][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.365'.
[   96.820086][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'.
[   96.829422][ T7202] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   96.835206][ T7207] loop5: detected capacity change from 0 to 7
[   96.855647][ T7207] Dev loop5: unable to read RDB block 7
[   96.879675][ T7207]  loop5: AHDI p1
[   96.892663][ T7207] loop5: partition table partially beyond EOD, truncated
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   97.022972][ T7215] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.485360][ T5746] Bluetooth: hci0: unexpected event for opcode 0x202b
[   97.495089][ T7229] x_tables: duplicate underflow at hook 1
[   97.501263][ T7229] hub 8-0:1.0: USB hub found
[   97.503643][ T7229] hub 8-0:1.0: 1 port detected
[   97.532531][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.374'.
[   97.901360][ T7237] xt_hashlimit: overflow, try lower: 18446744073709551614/64
[   98.001119][ T7242] usb usb9: usbfs: process 7242 (syz.1.377) did not claim interface 12 before use
[   98.409045][ T7262] 8021q: adding VLAN 0 to HW filter on device bond5
[   98.438042][ T7264] warning: `syz.2.381' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.456474][ T7264] netlink: 'syz.2.381': attribute type 13 has an invalid length.
[   99.259506][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   99.264213][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   99.267470][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   99.270790][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   99.273892][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   99.673010][ T7275] syz.1.383 (7275): drop_caches: 3
[  100.170269][ T7292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.390'.
[  100.174800][ T7292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.390'.
[  100.275159][ T7298] pim6reg: entered allmulticast mode
[  100.349243][ T7294] pim6reg: left allmulticast mode
��
���� 
 �
/dev/fusefd=0x0000000000000005,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)��F�nw�����
�
�,�(./file0fusehA
-���s�[  101.909406][ T7314] netlink: 44 bytes leftover after parsing attributes in process `syz.0.396'.
[  101.979809][ T7316] "syz.1.397" (7316) uses obsolete ecb(arc4) skcipher
[  102.147580][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[  102.155131][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[  102.995641][ T7338] 9pnet_virtio: no channels available for device syz
[  103.059255][ T7332] FAULT_INJECTION: forcing a failure.
[  103.059255][ T7332] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.070661][ T7332] CPU: 2 UID: 0 PID: 7332 Comm: syz.0.402 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  103.070688][ T7332] Tainted: [L]=SOFTLOCKUP
[  103.070695][ T7332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.070704][ T7332] Call Trace:
[  103.070710][ T7332]  <TASK>
[  103.070717][ T7332]  dump_stack_lvl+0x100/0x190
[  103.070747][ T7332]  should_fail_ex.cold+0x5/0xa
[  103.070767][ T7332]  _copy_from_user+0x2e/0xd0
[  103.070796][ T7332]  snd_seq_ioctl+0x1bf/0x410
[  103.070823][ T7332]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  103.070860][ T7332]  ? __fget_files+0x21f/0x3d0
[  103.070881][ T7332]  snd_seq_ioctl_compat+0x13b/0x300
[  103.070899][ T7332]  ? __pfx_snd_seq_ioctl_compat+0x10/0x10
[  103.070915][ T7332]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  103.070943][ T7332]  __do_fast_syscall_32+0xe7/0x970
[  103.070968][ T7332]  ? lockdep_hardirqs_on+0x78/0x100
[  103.070991][ T7332]  do_fast_syscall_32+0x32/0x70
[  103.071013][ T7332]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  103.071033][ T7332] RIP: 0023:0xf70befec
[  103.071051][ T7332] Code: Unable to access opcode bytes at 0xf70befc2.
[  103.071059][ T7332] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  103.071076][ T7332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004040534e
[  103.071086][ T7332] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000
[  103.071095][ T7332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  103.071104][ T7332] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  103.071113][ T7332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  103.071133][ T7332]  </TASK>
[  103.144038][ T7342] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size.
[  103.656320][ T7357] raw_sendmsg: syz.2.407 forgot to set AF_INET. Fix it!
[  103.729327][ T7357] ceph: No mds server is up or the cluster is laggy
[  103.748970][ T5746] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  103.796302][ T7360] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  103.856148][ T5746] Bluetooth: hci0: unexpected event for opcode 0x2011
[  103.863239][   T56] libceph: connect (1)[c::]:6789 error -101
[  103.867475][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  104.353655][ T7385] FAULT_INJECTION: forcing a failure.
[  104.353655][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.362056][ T7385] CPU: 1 UID: 0 PID: 7385 Comm: syz.1.416 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.362074][ T7385] Tainted: [L]=SOFTLOCKUP
[  104.362078][ T7385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.362085][ T7385] Call Trace:
[  104.362090][ T7385]  <TASK>
[  104.362094][ T7385]  dump_stack_lvl+0x100/0x190
[  104.362113][ T7385]  should_fail_ex.cold+0x5/0xa
[  104.362128][ T7385]  _copy_from_user+0x2e/0xd0
[  104.362147][ T7385]  kstrtouint_from_user+0xd6/0x1d0
[  104.362160][ T7385]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  104.362173][ T7385]  ? __lock_acquire+0x49f/0x1a40
[  104.362199][ T7385]  proc_fail_nth_write+0x83/0x220
[  104.362216][ T7385]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  104.362235][ T7385]  vfs_write+0x2aa/0x1050
[  104.362246][ T7385]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  104.362263][ T7385]  ? __pfx_vfs_write+0x10/0x10
[  104.362272][ T7385]  ? find_held_lock+0x2b/0x80
[  104.362286][ T7385]  ? __fget_files+0x215/0x3d0
[  104.362299][ T7385]  ? __fget_files+0x21f/0x3d0
[  104.362313][ T7385]  ksys_write+0x12a/0x250
[  104.362323][ T7385]  ? __pfx_ksys_write+0x10/0x10
[  104.362337][ T7385]  do_int80_emulation+0x14b/0x720
[  104.362355][ T7385]  asm_int80_emulation+0x1a/0x20
[  104.362367][ T7385] RIP: 0023:0xf71373eb
[  104.362376][ T7385] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  104.362387][ T7385] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  104.362398][ T7385] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f53ed5d0
[  104.362404][ T7385] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  104.362410][ T7385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  104.362416][ T7385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  104.362422][ T7385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  104.362436][ T7385]  </TASK>
[  104.484388][ T7389] __nla_validate_parse: 8 callbacks suppressed
[  104.484400][ T7389] netlink: 228 bytes leftover after parsing attributes in process `syz.0.419'.
[  104.632411][ T7400] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  105.663536][ T7413] netlink: 'syz.3.427': attribute type 2 has an invalid length.
[  106.404246][ T5746] Bluetooth: hci3: unexpected event for opcode 0x202b
[  106.455439][ T7434] x_tables: duplicate underflow at hook 1
[  106.459260][ T7434] hub 8-0:1.0: USB hub found
[  106.462184][ T7434] hub 8-0:1.0: 1 port detected
[  107.076346][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'.
[  107.127626][ T7467] openvswitch: netlink: ct_state flags 0001010a unsupported
[  107.355974][ T5746] Bluetooth: hci1: adv larger than maximum supported
[  107.392179][ T7475] Driver unsupported XDP return value 0 on prog  (id 79) dev N/A, expect packet loss!
[  107.962739][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'.
[  107.965695][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.448'.
[  107.973567][ T7483] netlink: 1220 bytes leftover after parsing attributes in process `syz.2.448'.
[  107.979400][ T7483] netlink: 1220 bytes leftover after parsing attributes in process `syz.2.448'.
[  108.788501][ T5746] Bluetooth: hci2: unexpected event for opcode 0x202b
[  109.040795][ T7506] x_tables: duplicate underflow at hook 1
[  109.044553][ T7506] hub 8-0:1.0: USB hub found
[  109.053629][ T7506] hub 8-0:1.0: 1 port detected
[  109.059024][ T7515] input: syz0 as /devices/virtual/input/input8
[  109.308813][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  109.458643][   T24] usb 6-1: Using ep0 maxpacket: 16
[  109.467183][   T24] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  109.471471][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.477056][   T24] usb 6-1: Product: syz
[  109.481356][   T24] usb 6-1: Manufacturer: syz
[  109.483386][   T24] usb 6-1: SerialNumber: syz
[  109.516767][ T7532] e1000e 0000:00:02.0 eth1: removed PHC
[  109.563369][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'.
[  109.618056][ T7548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  109.620866][ T7548] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  109.624732][ T7548] vhci_hcd vhci_hcd.0: Device attached
[  109.632265][ T7532] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  109.685158][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'.
[  109.689178][ T7548] netlink: 'syz.3.463': attribute type 21 has an invalid length.
[  109.712868][   T24] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  109.730371][ T7543] team0 (unregistering): Port device team_slave_0 removed
[  109.737058][ T7543] team0 (unregistering): Port device team_slave_1 removed
[  109.746334][ T7549] vhci_hcd: cannot find the pending unlink 6
[  109.749522][   T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  109.755188][   T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  109.763070][   T24] usb 6-1: media controller created
[  109.801150][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.882016][ T7544] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller
[  109.895473][ T7544] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU)
[  109.903980][ T7518] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[  109.909079][ T5532] usb 44-1: SetAddress Request (2) to port 0
[  109.911165][ T5532] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  109.913017][ T7561] tmpfs: Bad value for 'mpol'
[  109.924993][ T7549] vhci_hcd: connection closed
[  109.926421][   T13] vhci_hcd vhci_hcd.3: stop threads
[  109.930059][   T13] vhci_hcd vhci_hcd.3: release socket
[  109.930245][ T7518] 8021q: adding VLAN 0 to HW filter on device bond6
[  109.932935][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  109.938849][ T5532] usb 44-1: enqueue for inactive port 0
[  109.947947][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv3
[  109.954458][ T7518] bond6: (slave batadv3): making interface the new active one
[  109.960500][ T7518] bond6: (slave batadv3): Enslaving as an active interface with an up link
[  109.977537][ T7518] bond6 (unregistering): (slave batadv3): Releasing active interface
[  109.982940][ T7518] bond6 (unregistering): Released all slaves
[  110.018955][   T24] zl10353_read_register: readreg error (reg=127, ret==-110)
[  110.070705][   T24] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  110.076386][   T24] usb 6-1: USB disconnect, device number 4
[  110.357210][ T5532] usb usb44-port1: attempt power cycle
[  110.744144][ T7609] loop5: detected capacity change from 0 to 7
[  110.755453][ T7609] Dev loop5: unable to read RDB block 7
[  110.757048][ T5746] Bluetooth: hci1: adv larger than maximum supported
[  110.760176][ T7609]  loop5: AHDI p1
[  110.772602][ T7609] loop5: partition table partially beyond EOD, truncated
[  110.896308][ T7616] netlink: 'syz.3.479': attribute type 1 has an invalid length.
[  110.908386][ T7616] 8021q: adding VLAN 0 to HW filter on device bond3
[  110.917490][ T7616] netlink: 'syz.3.479': attribute type 10 has an invalid length.
[  110.920178][ T7616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.479'.
[  110.924998][ T7616] dummy0: entered promiscuous mode
[  110.963576][ T5532] usb usb44-port1: unable to enumerate USB device
[  111.282572][ T5746] Bluetooth: hci3: unexpected event for opcode 0x202b
[  111.304549][ T7630] x_tables: duplicate underflow at hook 1
[  111.316711][ T7630] hub 8-0:1.0: USB hub found
[  111.319186][ T7630] hub 8-0:1.0: 1 port detected
[  111.981440][ T7640] tmpfs: Unknown parameter 'nr_inod'
[  111.987928][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'.
[  112.938301][ T7644] cdns3-pci-usbss 0000:00:02.0: probe with driver cdns3-pci-usbss failed with error -22
[  113.196249][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  113.205721][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  113.209305][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  113.212480][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  113.215697][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  113.526509][ T7672] lo: Caught tx_queue_len zero misconfig
[  113.652689][ T5746] Bluetooth: hci1: unexpected event for opcode 0x202b
[  113.696918][ T7674] x_tables: duplicate underflow at hook 1
[  113.714517][ T7674] hub 8-0:1.0: USB hub found
[  113.719596][ T7674] hub 8-0:1.0: 1 port detected
[  113.892727][ T7677] netlink: 80 bytes leftover after parsing attributes in process `syz.1.495'.
[  114.621991][ T7680] __nla_validate_parse: 2 callbacks suppressed
[  114.622003][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  114.639256][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  114.664852][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  114.671755][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  115.237569][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[  115.243424][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[  115.247174][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[  115.251009][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[  115.254251][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[  115.271894][ T7684] 9pnet_virtio: no channels available for device syz
[  115.873077][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'.
[  116.668083][ T7707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  116.670169][ T7707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  116.672855][ T7707] vhci_hcd vhci_hcd.0: Device attached
[  116.681947][ T7708] vhci_hcd: connection closed
[  116.682125][   T12] vhci_hcd vhci_hcd.2: stop threads
[  116.685703][   T12] vhci_hcd vhci_hcd.2: release socket
[  116.687446][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  117.070653][ T7716] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[  117.395423][ T7731] 9pnet_virtio: no channels available for device syz
[  118.570900][ T5746] Bluetooth: hci3: unexpected event for opcode 0x202b
[  118.593159][ T7751] x_tables: duplicate underflow at hook 1
[  118.597802][ T7751] hub 8-0:1.0: USB hub found
[  118.600440][ T7751] hub 8-0:1.0: 1 port detected
[  118.705683][ T7758] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  119.512419][ T7771] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  119.533942][ T7771] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  119.536474][ T7771] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[  119.539437][ T7771] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  119.543066][ T7771] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  119.573437][ T7771] pci 0000:00:01.0: Adding to iommu group 1
[  119.584343][ T7771] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  119.586580][ T7771] pci 0000:00:01.0: vgaarb: bridge control possible
[  119.588833][ T7771] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  119.619079][ T7771] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  119.643263][ T7771] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  119.683642][ T7771] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  119.708300][ T7771] [drm] Found bochs VGA, ID 0xb0c5.
[  119.710125][ T7771] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  119.787036][ T7771] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  119.810710][ T7785] tmpfs: Unknown parameter 'nr_inod'
[  119.821521][ T7785] __nla_validate_parse: 9 callbacks suppressed
[  119.821539][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'.
[  119.835359][ T7784] 8021q: VLANs not supported on ipvlan0
[  119.879248][ T7771] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  120.744356][ T7798] netlink: 6 bytes leftover after parsing attributes in process `syz.3.531'.
[  120.801081][ T5746] Bluetooth: hci3: unexpected event for opcode 0x202b
[  120.830590][ T7800] x_tables: duplicate underflow at hook 1
[  120.840868][ T7800] hub 8-0:1.0: USB hub found
[  120.843413][ T7800] hub 8-0:1.0: 1 port detected
[  121.018659][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'.
[  121.083085][ T7813] wg2: Caught tx_queue_len zero misconfig
[  121.353994][ T7821] tipc: Started in network mode
[  121.357251][ T7821] tipc: Node identity 0010000000000000002, cluster identity 1
[  121.364836][ T7821] Invalid ELF header magic: != ELF
[  121.377145][ T7821] overlayfs: overlapping lowerdir path
[  121.978674][ T2984] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.125491][ T7835] netlink: 6 bytes leftover after parsing attributes in process `syz.3.543'.
[  122.225868][ T7838] tmpfs: Unknown parameter 'nr_inod'
[  122.231226][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'.
[  122.248916][ T7830] dvmrp0: entered allmulticast mode
[  122.261242][ T7830] netlink: 'syz.0.542': attribute type 10 has an invalid length.
[  122.269486][ T7830] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.300392][ T7840] input: syz1 as /devices/virtual/input/input9
[  123.021564][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'.
[  123.024543][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'.
[  123.263740][ T7853] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  123.294164][ T7853] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  123.296533][ T7853] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  123.300061][ T7853] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  123.302959][ T7853] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  123.319047][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  123.331655][ T7853] pci 0000:00:01.0: Adding to iommu group 1
[  123.356097][ T7853] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  123.358769][ T7853] pci 0000:00:01.0: vgaarb: bridge control possible
[  123.361046][ T7853] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  123.368722][ T6464] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  123.396074][ T7853] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  123.399471][ T7853] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  123.403815][ T7853] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  123.417748][ T7853] [drm] Found bochs VGA, ID 0xb0c5.
[  123.419798][ T7853] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  123.438517][ T7853] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  123.489134][ T7862] nbd0: detected capacity change from 0 to 63
[  123.508280][   T65] block nbd0: Receive control failed (result -104)
[  123.523002][ T7853] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  123.538616][ T6464] usb 8-1: Using ep0 maxpacket: 16
[  123.545239][ T6464] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  123.566187][ T6464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.568883][ T6464] usb 8-1: Product: syz
[  123.570201][ T6464] usb 8-1: Manufacturer: syz
[  123.571673][ T6464] usb 8-1: SerialNumber: syz
[  123.789474][ T6464] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  123.795044][ T6464] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  123.798341][ T6464] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  123.800143][ T7878] 8021q: adding VLAN 0 to HW filter on device bond6
[  123.801565][ T6464] usb 8-1: media controller created
[  123.809413][ T6464] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  123.855956][ T7884] CUSE: info not properly terminated
[  123.859670][ T7886] block nbd1: Unsupported socket: should be TCP or UNIX.
[  123.999792][ T7859] netlink: 'syz.3.551': attribute type 1 has an invalid length.
[  124.023964][ T7859] 8021q: adding VLAN 0 to HW filter on device bond4
[  124.040130][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv2
[  124.040668][ T6464] zl10353_read_register: readreg error (reg=127, ret==-110)
[  124.044745][ T7859] bond4: (slave batadv2): making interface the new active one
[  124.048216][ T7859] bond4: (slave batadv2): Enslaving as an active interface with an up link
[  124.064566][ T7859] bond4 (unregistering): (slave batadv2): Releasing active interface
[  124.069700][ T7859] bond4 (unregistering): Released all slaves
[  124.153206][ T6464] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  124.191311][ T6464] usb 8-1: USB disconnect, device number 4
[  124.248705][ T7900] comedi comedi0: Minor 3 could not be opened
[  124.358660][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  124.405295][ T7905] mmap: syz.1.563 (7905) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  124.755421][ T2984] usb 5-1: unable to get BOS descriptor or descriptor too short
[  124.763979][ T2984] usb 5-1: unable to read config index 0 descriptor/start: -71
[  124.770124][ T2984] usb 5-1: can't read configurations, error -71
[  124.790317][ T7912] syzkaller0: entered promiscuous mode
[  124.792281][ T7912] syzkaller0: entered allmulticast mode
[  124.872499][ T7918] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.061413][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'.
[  125.066732][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'.
[  125.071622][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[  125.075931][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'.
[  125.080233][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'.
[  125.084357][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[  125.088730][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[  125.093297][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[  125.097053][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[  125.102678][ T7940] syz.0.574: calling unsupported SCSI_IOCTL_SEND_COMMAND
[  125.114871][ T7942] 9pnet_virtio: no channels available for device syz
[  125.206857][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'.
[  126.578245][ T5746] Bluetooth: hci2: unexpected event for opcode 0x202b
[  126.624570][ T7964] x_tables: duplicate underflow at hook 1
[  126.636478][ T7964] hub 8-0:1.0: USB hub found
[  126.644561][ T7964] hub 8-0:1.0: 1 port detected
[  127.504002][ T7992] sctp_transport_update_pmtu: 106 callbacks suppressed
[  127.504022][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.511962][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.516464][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.521469][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.524948][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.528366][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.533391][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.536855][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.540431][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.543843][ T7992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  127.818736][ T2984] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  127.968709][ T2984] usb 5-1: Using ep0 maxpacket: 16
[  127.974262][ T2984] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  127.977694][ T2984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.980339][ T2984] usb 5-1: Product: syz
[  127.981930][ T2984] usb 5-1: Manufacturer: syz
[  127.983537][ T2984] usb 5-1: SerialNumber: syz
[  128.199019][ T2984] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  128.205211][ T2984] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  128.213127][ T2984] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  128.217923][ T2984] usb 5-1: media controller created
[  128.227321][ T2984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.404130][ T7995] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[  128.419104][ T7995] 8021q: adding VLAN 0 to HW filter on device bond6
[  128.432987][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv1
[  128.437020][ T7995] bond6: (slave batadv1): making interface the new active one
[  128.440448][ T7995] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  128.457788][ T7995] bond6 (unregistering): (slave batadv1): Releasing active interface
[  128.460691][ T2984] zl10353_read_register: readreg error (reg=127, ret==-110)
[  128.466044][ T7995] bond6 (unregistering): Released all slaves
[  128.567915][ T2984] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  128.577458][ T2984] usb 5-1: USB disconnect, device number 4
[  129.364581][ T8043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  129.368929][ T8043] block device autoloading is deprecated and will be removed.
[  129.879669][ T2984] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  130.028597][ T2984] usb 5-1: Using ep0 maxpacket: 16
[  130.033184][ T2984] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  130.036189][ T2984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.039008][ T2984] usb 5-1: Product: syz
[  130.040344][ T2984] usb 5-1: Manufacturer: syz
[  130.042064][ T2984] usb 5-1: SerialNumber: syz
[  130.252393][ T2984] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  130.256698][ T2984] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  130.260304][ T2984] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  130.262851][ T2984] usb 5-1: media controller created
[  130.274039][ T2984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.455434][ T8051] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[  130.467720][ T8051] 8021q: adding VLAN 0 to HW filter on device bond6
[  130.471819][ T8061] __nla_validate_parse: 12 callbacks suppressed
[  130.471829][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'.
[  130.481974][ T8051] 8021q: adding VLAN 0 to HW filter on device batadv2
[  130.485622][ T8051] bond6: (slave batadv2): making interface the new active one
[  130.488686][ T8051] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  130.488907][ T2984] zl10353_read_register: readreg error (reg=127, ret==-110)
[  130.506062][ T8051] bond6 (unregistering): (slave batadv2): Releasing active interface
[  130.509763][ T8051] bond6 (unregistering): Released all slaves
[  130.607378][ T2984] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  130.614297][ T2984] usb 5-1: USB disconnect, device number 5
[  130.867958][ T5746] Bluetooth: hci2: Malformed LE Event: 0x0d
[  131.946921][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.949834][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.954108][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.956683][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.959982][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.962831][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.967276][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.971171][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.974126][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.978288][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.980915][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.983430][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.987644][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.990218][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.992748][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.995324][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  131.998202][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.001846][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.004206][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.006551][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.009175][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.012877][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.015863][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.019924][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.022270][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.025061][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.028402][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.030884][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.033341][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.035676][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.038120][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.040774][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.043343][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.045865][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.048487][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.051855][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.054578][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.056890][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.059191][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.061339][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.063546][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.065713][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.067899][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.070133][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.072358][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.074559][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.076759][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.079675][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.082446][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.084990][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.087470][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.089889][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.092688][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.095849][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.098646][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.101327][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.103987][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.106743][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.109462][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.112465][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.115036][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.118103][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.120743][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.123405][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.126218][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c58
[  132.362904][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[  132.365210][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  132.509815][ T8126] can0: slcan on ttyS3.
[  133.215207][ T8120] can0 (unregistered): slcan off ttyS3.
[  133.241023][  T845] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  133.420949][  T845] usb 6-1: Using ep0 maxpacket: 8
[  133.425006][  T845] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.430676][  T845] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.433916][  T845] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.436007][  T845] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  133.439317][  T845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.443599][  T845] usb 6-1: config 0 descriptor??
[  133.610500][ T8165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  133.634641][ T8164] netlink: 'syz.0.635': attribute type 6 has an invalid length.
[  133.637133][ T8164] netlink: 360 bytes leftover after parsing attributes in process `syz.0.635'.
[  133.922354][  T845] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  133.925560][  T845] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  133.927905][  T845] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  133.930290][  T845] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  133.932673][  T845] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  133.936050][  T845] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  134.100380][ T6464] usb 6-1: USB disconnect, device number 5
[  134.270476][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  134.274369][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  134.277350][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  134.280600][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  134.284492][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  134.324589][ T8173] loop5: detected capacity change from 0 to 7
[  134.328525][ T8173] Dev loop5: unable to read RDB block 7
[  134.333031][ T8173]  loop5: AHDI p1
[  134.334599][ T8173] loop5: partition table partially beyond EOD, truncated
[  135.347455][ T8197] ptrace attach of "/syz-executor exec"[8198] was attempted by "/syz-executor exec"[8197]
[  136.114077][ T5746] Bluetooth: hci3: Malformed LE Event: 0x0d
[  136.537675][ T8216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  136.539790][ T8216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  136.542507][ T8216] vhci_hcd vhci_hcd.0: Device attached
[  136.566640][ T8216] geneve2: entered allmulticast mode
[  136.839280][  T845] usb 38-1: SetAddress Request (2) to port 0
[  136.842152][  T845] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  137.209590][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'.
[  137.424586][ T8217] vhci_hcd: connection reset by peer
[  137.429227][   T13] vhci_hcd vhci_hcd.0: stop threads
[  137.430908][   T13] vhci_hcd vhci_hcd.0: release socket
[  137.433220][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  137.928828][ T8233] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  137.940079][ T8233] CIFS: Attempting to mount //127.0.0.1/share
[  138.059963][ T8233] CIFS: VFS: Error connecting to socket. Aborting operation.
[  138.062479][ T8233] CIFS: VFS: cifs_mount failed w/return code = -4
[  138.168041][ T8242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.659'.
[  138.418752][ T6464] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  138.579913][ T6464] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.583888][ T6464] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  138.586809][ T6464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.605293][ T6464] as10x_usb: device has been detected
[  138.607453][ T6464] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  138.615753][ T6464] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  138.632047][ T6464] as10x_usb: error during firmware upload part1
[  138.634322][ T6464] Registered device Abilis Systems DVB-Titan
[  139.218358][ T8257] ceph: Path missing in source
[  140.572473][ T8262] tipc: Started in network mode
[  140.574199][ T8262] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  140.578033][ T8262] tipc: Enabled bearer <eth:vlan0>, priority 10
[  140.583088][ T8262] netlink: 'syz.1.659': attribute type 9 has an invalid length.
[  141.571013][ T6169] tipc: Node number set to 10005162
[  141.722682][ T6169] usb 6-1: USB disconnect, device number 6
[  141.784786][ T6169] Unregistered device Abilis Systems DVB-Titan
[  141.787059][ T6169] as10x_usb: device has been disconnected
[  141.878749][  T845] usb 38-1: device descriptor read/8, error -110
[  142.289291][  T845] usb usb38-port1: attempt power cycle
[  142.748101][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  142.754947][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  142.759535][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  142.762474][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  142.765177][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  143.046628][  T845] usb usb38-port1: unable to enumerate USB device
[  143.253968][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.256409][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.259032][ T8269] bridge_slave_0: entered allmulticast mode
[  143.261791][ T8269] bridge_slave_0: entered promiscuous mode
[  143.265140][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.267626][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.270083][ T8269] bridge_slave_1: entered allmulticast mode
[  143.273231][ T8269] bridge_slave_1: entered promiscuous mode
[  143.307090][ T8269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.313683][ T8269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.340896][ T8269] team0: Port device team_slave_0 added
[  143.345707][ T8269] team0: Port device team_slave_1 added
[  143.368667][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.371486][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.380776][ T8269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.385096][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.387321][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.395339][ T8269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.419196][ T8269] hsr_slave_0: entered promiscuous mode
[  143.421488][ T8269] hsr_slave_1: entered promiscuous mode
[  143.423618][ T8269] debugfs: 'hsr0' already exists in 'hsr'
[  143.425426][ T8269] Cannot create hsr debugfs directory
[  143.551917][ T8269] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  143.556619][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  143.560937][ T8269] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  143.567146][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  143.570089][ T8269] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  143.574268][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  143.577094][ T8269] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  143.587882][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  143.612434][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.614656][ T8269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.617043][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.619256][ T8269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.634959][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'.
[  143.657936][ T8269] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.667019][  T174] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.680066][  T174] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.693198][ T8269] 8021q: adding VLAN 0 to HW filter on device team0
[  143.705922][  T174] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.706370][ T5102] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  143.708991][  T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.720159][  T174] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.722559][  T174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.806119][ T8312] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.821460][ T8312] bond3: (slave team0): Releasing backup interface
[  143.830617][ T8312] 8021q: adding VLAN 0 to HW filter on device team0
[  143.834328][ T8312] bond6: (slave team0): Enslaving as an active interface with an up link
[  143.915647][ T8323] netlink: 6 bytes leftover after parsing attributes in process `syz.0.676'.
[  144.000265][ T8269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.062082][ T8327] kernel profiling enabled (shift: 17)
[  144.141157][ T8269] veth0_vlan: entered promiscuous mode
[  144.146731][ T8269] veth1_vlan: entered promiscuous mode
[  144.166693][ T8269] veth0_macvtap: entered promiscuous mode
[  144.171780][ T8269] veth1_macvtap: entered promiscuous mode
[  144.181788][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.187989][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.230766][ T5795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.242215][ T5795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.274849][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.279478][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.279854][ T5795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.286701][ T5795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.307094][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.310978][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.689975][   T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  144.832057][ T8351] netlink: 'syz.0.682': attribute type 1 has an invalid length.
[  144.838762][ T5102] Bluetooth: hci4: command tx timeout
[  144.840817][   T56] usb 9-1: Using ep0 maxpacket: 16
[  144.845579][   T56] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  144.849505][   T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.852192][   T56] usb 9-1: Product: syz
[  144.853903][   T56] usb 9-1: Manufacturer: syz
[  144.855808][   T56] usb 9-1: SerialNumber: syz
[  145.063583][   T56] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  145.067804][   T56] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  145.071581][   T56] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  145.074400][   T56] usb 9-1: media controller created
[  145.081967][   T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  145.244038][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'.
[  145.268424][ T8349] netlink: 'syz.4.681': attribute type 1 has an invalid length.
[  145.300505][   T56] zl10353_read_register: readreg error (reg=127, ret==-110)
[  145.466064][   T56] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  145.473348][   T56] usb 9-1: USB disconnect, device number 2
[  145.668683][ T2984] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  145.818638][ T2984] usb 5-1: Using ep0 maxpacket: 16
[  145.823223][ T2984] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  145.826497][ T2984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.829278][ T2984] usb 5-1: Product: syz
[  145.830629][ T2984] usb 5-1: Manufacturer: syz
[  145.832156][ T2984] usb 5-1: SerialNumber: syz
[  146.046494][ T2984] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  146.050600][ T2984] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  146.054412][ T2984] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  146.057100][ T2984] usb 5-1: media controller created
[  146.064054][ T2984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.254136][ T8373] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[  146.271854][ T8373] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.278836][ T2984] zl10353_read_register: readreg error (reg=127, ret==-110)
[  146.292907][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv3
[  146.297319][ T8373] bond7: (slave batadv3): making interface the new active one
[  146.300449][ T8373] bond7: (slave batadv3): Enslaving as an active interface with an up link
[  146.321785][ T8373] bond7 (unregistering): (slave batadv3): Releasing active interface
[  146.326353][ T8373] bond7 (unregistering): Released all slaves
[  146.469240][ T2984] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  146.478426][ T2984] usb 5-1: USB disconnect, device number 6
[  146.507111][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'.
[  146.709647][ T8396] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  146.713753][ T8396] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  146.715953][ T8396] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  146.718083][ T8396] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  146.721355][ T8396] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  146.723395][ T8396] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  146.730028][ T8396] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  146.734882][ T8396] comedi comedi2: comedi_config --init_data is deprecated
[  147.043540][ T5102] Bluetooth: hci4: unexpected event for opcode 0x202b
[  147.067516][ T8401] x_tables: duplicate underflow at hook 1
[  147.074323][ T8401] hub 8-0:1.0: USB hub found
[  147.076447][ T8401] hub 8-0:1.0: 1 port detected
[  147.995231][ T5102] Bluetooth: hci3: unexpected event for opcode 0x4ad0
[  148.505227][ T8424] cgroup: fork rejected by pids controller in /syz4
[  148.758690][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout
[  148.758783][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout
[  148.758813][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout
[  149.208900][ T5102] Bluetooth: hci1: unexpected event for opcode 0x202b
[  149.223292][ T5102] Bluetooth: hci3: unexpected event for opcode 0x202b
[  149.224103][ T8494] x_tables: duplicate underflow at hook 1
[  149.231166][ T8496] x_tables: duplicate underflow at hook 1
[  149.238229][ T8494] hub 8-0:1.0: USB hub found
[  149.242049][ T8494] hub 8-0:1.0: 1 port detected
[  150.032448][ T8501] blktrace: Concurrent blktraces are not allowed on pmem0
[  150.172567][ T8505] team_slave_0: entered promiscuous mode
[  150.502528][ T8506] team_slave_0: left promiscuous mode
[  150.563820][ T5747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.571954][ T5747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.575217][ T5747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.580046][ T5747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.582976][ T5747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.795469][ T8538] loop5: detected capacity change from 0 to 7
[  150.798050][ T8538] Dev loop5: unable to read RDB block 7
[  150.800045][ T8538]  loop5: AHDI p1
[  150.801221][ T8538] loop5: partition table partially beyond EOD, truncated
[  150.869481][ T5795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.924800][ T5795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.082649][ T5795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.118025][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.120400][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.122566][ T8513] bridge_slave_0: entered allmulticast mode
[  151.125017][ T8513] bridge_slave_0: entered promiscuous mode
[  151.128348][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.132470][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.134638][ T8513] bridge_slave_1: entered allmulticast mode
[  151.137218][ T8513] bridge_slave_1: entered promiscuous mode
[  151.154446][ T5795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.178811][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.183118][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.199395][ T8513] team0: Port device team_slave_0 added
[  151.202443][ T8513] team0: Port device team_slave_1 added
[  151.222897][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.226719][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.234447][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.243316][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.246498][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.258821][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.304413][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'.
[  151.334136][ T8513] hsr_slave_0: entered promiscuous mode
[  151.337474][ T8513] hsr_slave_1: entered promiscuous mode
[  151.342189][ T8513] debugfs: 'hsr0' already exists in 'hsr'
[  151.344520][ T8513] Cannot create hsr debugfs directory
[  151.358820][   T56] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  151.404626][ T5795] bridge_slave_1: left allmulticast mode
[  151.406957][ T5795] bridge_slave_1: left promiscuous mode
[  151.411653][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.417564][ T5795] bridge_slave_0: left allmulticast mode
[  151.419265][ T5795] bridge_slave_0: left promiscuous mode
[  151.420965][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.482347][ T8572] netlink: 6 bytes leftover after parsing attributes in process `syz.4.729'.
[  151.538656][   T56] usb 6-1: Using ep0 maxpacket: 16
[  151.550160][   T56] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  151.553657][   T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.558678][   T56] usb 6-1: Product: syz
[  151.561083][   T56] usb 6-1: Manufacturer: syz
[  151.565854][   T56] usb 6-1: SerialNumber: syz
[  151.593475][ T5795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.596884][ T8576] binder: BINDER_SET_CONTEXT_MGR already set
[  151.600085][ T5795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.600724][ T8576] binder: 8575:8576 ioctl 4018620d 80004a80 returned -16
[  151.606001][ T5795] bond0 (unregistering): Released all slaves
[  151.610883][ T5795] bond1 (unregistering): Released all slaves
[  151.618160][ T5795] bond2 (unregistering): Released all slaves
[  151.626682][ T5795] bond3 (unregistering): Released all slaves
[  151.718042][ T5795] tipc: Left network mode
[  151.787648][   T56] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  151.803209][   T56] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  151.810305][   T56] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  151.813032][   T56] usb 6-1: media controller created
[  151.819374][   T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  151.864870][ T5454] 8021q: adding VLAN 0 to HW filter on device eth1
[  151.867509][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'.
[  151.885880][ T8513] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.895656][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  151.899033][ T8513] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  151.903780][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  151.911838][ T8513] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  151.933307][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  151.939078][ T8513] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  151.960562][ T8595] input: syz1 as /devices/virtual/input/input11
[  151.961952][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  151.995220][ T8560] netlink: 'syz.1.724': attribute type 1 has an invalid length.
[  152.029440][ T8560] 8021q: adding VLAN 0 to HW filter on device bond7
[  152.060813][   T56] zl10353_read_register: readreg error (reg=127, ret==-110)
[  152.076083][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv4
[  152.079786][ T8560] bond7: (slave batadv4): making interface the new active one
[  152.082832][ T8560] bond7: (slave batadv4): Enslaving as an active interface with an up link
[  152.087962][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2
[  152.104005][ T8560] bond7 (unregistering): (slave batadv4): Releasing active interface
[  152.109455][ T8560] bond7 (unregistering): Released all slaves
[  152.125921][ T5747] Bluetooth: hci1: unexpected event for opcode 0x4ad0
[  152.170646][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.186068][ T5795] hsr_slave_0: left promiscuous mode
[  152.192404][ T5795] hsr_slave_1: left promiscuous mode
[  152.199715][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.207073][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.222714][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.230458][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.287653][   T56] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  152.294063][   T56] usb 6-1: USB disconnect, device number 7
[  152.297209][ T5795] veth1_vlan: left promiscuous mode
[  152.298599][ T5795] veth0_vlan: left promiscuous mode
[  152.537546][ T5795] team0 (unregistering): Port device team_slave_1 removed
[  152.553854][ T5795] team0 (unregistering): Port device team_slave_0 removed
[  152.629117][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3
[  152.647186][ T8513] 8021q: adding VLAN 0 to HW filter on device team0
[  152.668128][  T174] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.670461][  T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.679814][ T5747] Bluetooth: hci5: command tx timeout
[  152.699842][  T174] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.702162][  T174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.847999][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4
[  152.961589][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[  153.073421][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.117287][ T8664] loop5: detected capacity change from 0 to 7
[  153.138082][ T8664] Dev loop5: unable to read RDB block 7
[  153.143888][ T8664]  loop5: AHDI p1
[  153.145086][ T8664] loop5: partition table partially beyond EOD, truncated
[  153.189378][ T8674] loop5: detected capacity change from 0 to 7
[  153.194347][ T8674] Dev loop5: unable to read RDB block 7
[  153.197204][ T8674]  loop5: AHDI p1
[  153.198451][ T8674] loop5: partition table partially beyond EOD, truncated
[  153.216545][ T8675] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.743'.
[  153.223820][ T8675] openvswitch: netlink: Message has 512 unknown bytes.
[  153.229460][ T8513] veth0_vlan: entered promiscuous mode
[  153.244705][ T8513] veth1_vlan: entered promiscuous mode
[  153.265328][ T8513] veth0_macvtap: entered promiscuous mode
[  153.267209][ T8675] Cannot find add_set index 1 as target
[  153.269543][ T8513] veth1_macvtap: entered promiscuous mode
[  153.281534][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.300107][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.341946][ T5827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.360128][ T8681] netlink: 6 bytes leftover after parsing attributes in process `syz.4.749'.
[  153.371103][ T5827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.396272][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.399889][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.411872][ T5827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.417605][ T5827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.436488][  T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.446194][  T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.551703][ T5747] Bluetooth: hci3: unexpected event for opcode 0x4ad0
[  154.077338][ T8708] bond0: entered promiscuous mode
[  154.081358][ T8708] bond_slave_0: entered promiscuous mode
[  154.083252][ T8708] bond_slave_1: entered promiscuous mode
[  154.089028][ T8708] batadv0: entered promiscuous mode
[  154.093970][ T8708] debugfs: 'hsr1' already exists in 'hsr'
[  154.095891][ T8708] Cannot create hsr debugfs directory
[  154.100493][ T8708] 8021q: adding VLAN 0 to HW filter on device hsr1
[  154.140445][ T1308] block nbd0: Possible stuck request ffff8880279c0000: control (read@0,4096B). Runtime 30 seconds
[  154.147684][ T8708] bond0: left promiscuous mode
[  154.149299][ T8708] bond_slave_0: left promiscuous mode
[  154.152906][ T8708] bond_slave_1: left promiscuous mode
[  154.157625][ T8708] batadv0: left promiscuous mode
[  154.250661][ T8715] netlink: 'syz.5.758': attribute type 10 has an invalid length.
[  154.255552][ T8715] syz_tun: entered promiscuous mode
[  154.262071][ T8715] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  154.768794][ T5747] Bluetooth: hci5: command tx timeout
[  154.844686][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.766'.
[  154.870310][   T43] audit: type=1800 audit(1785695841.001:267): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.766" name="b_vendor_code" dev="configfs" ino=21085 res=0 errno=0
[  154.900995][ T8745] netlink: 6 bytes leftover after parsing attributes in process `syz.4.763'.
[  154.948117][ T8746] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  154.950848][ T8746] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  154.954386][ T8746] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  154.956926][ T8746] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  155.270345][ T8755] netlink: 156 bytes leftover after parsing attributes in process `syz.4.770'.
[  155.349134][ T5747] Bluetooth: hci1: unexpected event for opcode 0x4ad0
[  156.482004][   T43] audit: type=1326 audit(1785695842.641:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.5.775" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x0
[  156.838615][ T5747] Bluetooth: hci5: command tx timeout
[  157.358493][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'.
[  158.246207][ T6462] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  158.310073][ T5747] Bluetooth: hci4: unexpected event for opcode 0x202b
[  158.325774][ T8840] x_tables: duplicate underflow at hook 1
[  158.334306][ T8840] hub 8-0:1.0: USB hub found
[  158.336550][ T8840] hub 8-0:1.0: 1 port detected
[  158.428618][ T6462] usb 10-1: Using ep0 maxpacket: 16
[  158.444253][ T6462] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  158.448840][ T6462] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.452762][ T6462] usb 10-1: Product: syz
[  158.454914][ T6462] usb 10-1: Manufacturer: syz
[  158.457271][ T6462] usb 10-1: SerialNumber: syz
[  158.673849][ T6462] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  158.680284][ T6462] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  158.684175][ T6462] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  158.686960][ T6462] usb 10-1: media controller created
[  158.693613][ T6462] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.890889][ T8817] netlink: 'syz.5.784': attribute type 1 has an invalid length.
[  158.931354][ T5747] Bluetooth: hci5: command tx timeout
[  158.934063][ T6462] zl10353_read_register: readreg error (reg=127, ret==-110)
[  159.116349][ T8850] team0: Port device team_slave_0 removed
[  159.277594][ T6462] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  159.286949][ T6462] usb 10-1: USB disconnect, device number 2
[  159.649555][ T6464] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  166.846455][ T8902] tmpfs: Unknown parameter 'nr_inod'
[  166.857781][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'.
[  167.235935][ T8908] tmpfs: Unknown parameter 'nr_inod'
[  167.252744][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.796'.
[  167.880795][ T8910] Bluetooth: MGMT ver 1.23
[  168.002953][ T8913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'.
[  168.005827][ T8913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'.
[  168.106960][ T8924] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  168.108965][ T8924] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  168.111640][ T8924] vhci_hcd vhci_hcd.0: Device attached
[  168.317402][ T8926] vhci_hcd: connection closed
[  168.317641][ T5827] vhci_hcd vhci_hcd.4: stop threads
[  168.323537][ T5827] vhci_hcd vhci_hcd.4: release socket
[  168.325678][ T5827] vhci_hcd vhci_hcd.4: disconnect device
[  169.298704][ T5829] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  169.541380][ T5829] usb 5-1: Using ep0 maxpacket: 16
[  169.575535][ T5829] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  169.578456][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.581300][ T5829] usb 5-1: Product: syz
[  169.582658][ T5829] usb 5-1: Manufacturer: syz
[  169.584308][ T5829] usb 5-1: SerialNumber: syz
[  169.588260][ T8951] tmpfs: Unknown parameter 'nr_inod'
[  169.597964][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'.
[  169.688856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  169.900153][ T6464] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  169.945089][ T5829] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  169.958633][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout
[  169.960597][ T5747] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  170.084279][ T6464] usb 10-1: Using ep0 maxpacket: 32
[  170.136888][ T6464] usb 10-1: too many configurations: 32, using maximum allowed: 8
[  170.190964][ T6464] usb 10-1: unable to read config index 0 descriptor/start: -61
[  170.212625][ T8943] netlink: 'syz.0.805': attribute type 1 has an invalid length.
[  170.216847][ T6464] usb 10-1: can't read configurations, error -61
[  170.388756][ T6464] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  170.421487][ T8943] 8021q: adding VLAN 0 to HW filter on device bond7
[  170.445063][ T8959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.809'.
[  170.512740][ T8956] 8021q: adding VLAN 0 to HW filter on device batadv4
[  170.518444][ T8956] bond7: (slave batadv4): making interface the new active one
[  170.522822][ T8956] bond7: (slave batadv4): Enslaving as an active interface with an up link
[  170.558632][ T6464] usb 10-1: Using ep0 maxpacket: 32
[  170.569560][ T6464] usb 10-1: too many configurations: 32, using maximum allowed: 8
[  170.588424][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'.
[  170.592805][ T6464] usb 10-1: unable to read config index 0 descriptor/start: -61
[  170.597297][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.600843][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.611142][ T6464] usb 10-1: can't read configurations, error -61
[  170.612041][ T5747] Bluetooth: hci3: unexpected event for opcode 0x202b
[  170.623386][ T6464] usb usb10-port1: attempt power cycle
[  170.624184][ T8963] x_tables: duplicate underflow at hook 1
[  170.632686][ T8963] hub 8-0:1.0: USB hub found
[  170.635204][ T8963] hub 8-0:1.0: 1 port detected
[  170.773091][ T8965] kvm: MONITOR instruction emulated as NOP!
[  170.820290][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'.
[  170.853474][ T8967] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.988042][ T8943] bond7 (unregistering): (slave batadv4): Releasing active interface
[  171.028794][ T8943] bond7 (unregistering): Released all slaves
[  171.048878][ T6464] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  171.080464][ T6464] usb 10-1: Using ep0 maxpacket: 32
[  171.182310][ T5829] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  171.185519][ T5829] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  171.186332][ T6464] usb 10-1: too many configurations: 32, using maximum allowed: 8
[  171.188120][ T5829] usb 5-1: media controller created
[  171.192212][ T6464] usb 10-1: unable to read config index 0 descriptor/start: -61
[  171.192232][ T6464] usb 10-1: can't read configurations, error -61
[  171.203913][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  171.215692][ T5829] zl10353_read_register: readreg error (reg=127, ret==-71)
[  171.231939][ T5829] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  171.247166][ T5829] usb 5-1: USB disconnect, device number 7
[  171.318826][ T6464] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  171.340914][ T6464] usb 10-1: Using ep0 maxpacket: 32
[  171.343555][ T5747] Bluetooth: hci3: adv larger than maximum supported
[  171.343611][ T6464] usb 10-1: too many configurations: 32, using maximum allowed: 8
[  171.351969][ T6464] usb 10-1: unable to read config index 0 descriptor/start: -61
[  171.354300][ T6464] usb 10-1: can't read configurations, error -61
[  171.359964][ T6464] usb usb10-port1: unable to enumerate USB device
[  171.742480][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'.
[  172.675872][ T8994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.820'.
[  172.751802][ T5747] Bluetooth: hci1: adv larger than maximum supported
[  172.758796][ T6464] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  172.794481][ T9000] netlink: 'syz.0.824': attribute type 2 has an invalid length.
[  172.809770][ T9002] loop5: detected capacity change from 0 to 7
[  172.813219][ T9002] Dev loop5: unable to read RDB block 7
[  172.814952][ T9002]  loop5: AHDI p1
[  172.816338][ T9002] loop5: partition table partially beyond EOD, truncated
[  172.894601][ T9007] 8021q: adding VLAN 0 to HW filter on device bond7
[  172.908233][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.826'.
[  172.940177][ T6464] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  172.943013][ T6464] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.945802][ T6464] usb 9-1: Product: syz
[  172.947122][ T6464] usb 9-1: Manufacturer: syz
[  172.948889][ T6464] usb 9-1: SerialNumber: syz
[  172.964876][ T9012] x_tables: duplicate underflow at hook 1
[  172.979213][ T9012] hub 8-0:1.0: USB hub found
[  172.982731][ T9012] hub 8-0:1.0: 1 port detected
[  173.025720][ T3966] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  173.248858][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.254737][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.262803][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.275180][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.482065][ T6462] usb 9-1: USB disconnect, device number 3
[  173.627633][ T5747] Bluetooth: hci1: adv larger than maximum supported
[  173.629582][ T5747] Bluetooth: hci3: unexpected event for opcode 0x4ad0
[  174.107676][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'.
[  174.405727][ T3966] usb 9-1: Service connection timeout for: 256
[  174.407763][ T3966] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services
[  174.418619][ T3966] ath9k_htc: Failed to initialize the device
[  174.423024][ T6462] usb 9-1: ath9k_htc: USB layer deinitialized
[  174.599511][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  174.624364][ T9050] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  175.230164][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.841'.
[  175.324441][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  175.328057][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  175.408440][ T9072] loop5: detected capacity change from 0 to 7
[  175.412441][ T9072] Dev loop5: unable to read RDB block 7
[  175.414240][ T9072]  loop5: AHDI p1
[  175.415546][ T9072] loop5: partition table partially beyond EOD, truncated
[  175.454600][ T5747] Bluetooth: hci4: adv larger than maximum supported
[  175.738618][   T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  175.888627][   T29] usb 9-1: Using ep0 maxpacket: 16
[  175.893943][   T29] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  175.897566][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.900349][   T29] usb 9-1: Product: syz
[  175.901978][   T29] usb 9-1: Manufacturer: syz
[  175.903792][   T29] usb 9-1: SerialNumber: syz
[  176.156401][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'.
[  176.221980][   T29] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  176.247843][   T29] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  176.252011][   T29] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  176.254963][   T29] usb 9-1: media controller created
[  176.314095][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.572266][ T9077] netlink: 'syz.4.847': attribute type 1 has an invalid length.
[  176.768593][ T9077] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.861821][   T29] zl10353_read_register: readreg error (reg=127, ret==-110)
[  176.954828][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv1
[  177.089959][ T9086] bond2: (slave batadv1): making interface the new active one
[  177.102737][ T9086] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  177.140452][ T9077] bond2 (unregistering): (slave batadv1): Releasing active interface
[  177.150109][ T9077] bond2 (unregistering): Released all slaves
[  177.313528][ T9090] uhci_hcd 0000:00:1d.0: remove, state 4
[  177.318444][ T9090] usb usb2: USB disconnect, device number 1
[  177.450471][ T9090] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered
[  177.476328][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.853'.
[  177.770731][ T9091] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[  177.792045][ T9091] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2
[  177.795455][ T9091] uhci_hcd 0000:00:1d.0: detected 2 ports
[  177.798130][ T9091] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0
[  177.802065][   T29] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  177.813460][ T9091] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02
[  177.816583][ T9091] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  177.819134][ T9091] usb usb2: Product: UHCI Host Controller
[  177.821371][ T9091] usb usb2: Manufacturer: Linux syzkaller uhci_hcd
[  177.823545][ T9091] usb usb2: SerialNumber: 0000:00:1d.0
[  177.873787][ T9091] hub 2-0:1.0: USB hub found
[  177.879594][ T9091] hub 2-0:1.0: 2 ports detected
[  177.884649][ T5747] Bluetooth: hci4: adv larger than maximum supported
[  177.923108][ T9107] scsi_strcpy_devinfo: vendor string 'vendo��*r' is too long
[  177.928019][ T9107] scsi_strcpy_devinfo: model string 'mo�劌r�����r��del' is too long
[  178.048601][   T29] usb 9-1: USB disconnect, device number 4
[  178.115064][ T9114] netlink: 6 bytes leftover after parsing attributes in process `syz.1.858'.
[  180.284578][ T9133] x_tables: duplicate underflow at hook 1
[  180.291448][ T9133] hub 8-0:1.0: USB hub found
[  180.293269][ T9133] hub 8-0:1.0: 1 port detected
[  180.484530][ T5747] Bluetooth: hci3: unexpected event for opcode 0x202b
[  180.490679][ T9135] x_tables: duplicate underflow at hook 1
[  180.495089][ T9135] hub 8-0:1.0: USB hub found
[  180.498015][ T9135] hub 8-0:1.0: 1 port detected
[  181.545899][ T9144] loop5: detected capacity change from 0 to 7
[  181.550785][ T9144] Dev loop5: unable to read RDB block 7
[  181.553262][ T9144]  loop5: AHDI p1
[  181.554968][ T9144] loop5: partition table partially beyond EOD, truncated
[  181.673409][ T9146] gadgetfs: bound to dummy_udc driver
[  181.918613][ T6207] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  181.921155][    C2] gadgetfs: connected
[  181.924222][ T6207] gadgetfs: disconnected
[  181.980965][ T9146] nfs: Unknown parameter ''
[  182.099334][    C2] gadgetfs: connected
[  182.103464][ T6207] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  182.106840][ T6207] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  182.110656][ T6207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.116065][    C2] gadgetfs: configuration #1
[  182.119639][ T9149] gadgetfs: suspended from state 3
[  182.122630][ T9149] gadgetfs: disconnected
[  182.122857][ T6207] usb 5-1: can't set config #1, error -71
[  182.127366][ T9149] ------------[ cut here ]------------
[  182.129137][ T9149] !list_empty(&req->queue)
[  182.129146][ T9149] WARNING: drivers/usb/gadget/udc/dummy_hcd.c:710 at dummy_free_request+0x7d/0x90, CPU#3: syz.5.869/9149
[  182.130891][ T6207] usb 5-1: USB disconnect, device number 8
[  182.134212][ T9149] Modules linked in:
[  182.137979][ T9149] CPU: 3 UID: 0 PID: 9149 Comm: syz.5.869 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  182.141262][ T9149] Tainted: [L]=SOFTLOCKUP
[  182.142604][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  182.145661][ T9149] RIP: 0010:dummy_free_request+0x7d/0x90
[  182.147440][ T9149] Code: 92 9e fa e8 05 1e 3b fa 5b 5d c3 cc cc cc cc e8 f9 1d 3b fa 90 0f 0b 90 e8 f0 1d 3b fa 5b 5d e9 c9 c2 ed 03 e8 e4 1d 3b fa 90 <0f> 0b 90 eb c7 48 89 ef e8 d6 ad aa fa eb b4 0f 1f 40 00 90 90 90
[  182.153162][ T9149] RSP: 0018:ffffc9000796fbc8 EFLAGS: 00010287
[  182.155026][ T9149] RAX: 0000000000004d93 RBX: ffff88802452d710 RCX: ffffc90036c0b000
[  182.157402][ T9149] RDX: 0000000000080000 RSI: ffffffff87ce901c RDI: ffff888021c30068
[  182.159833][ T9149] RBP: ffff88802452d700 R08: 0000000000000001 R09: 0000000000000000
[  182.162230][ T9149] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff90259240
[  182.164580][ T9149] R13: ffff888021c30c00 R14: ffff888046056844 R15: ffff888021c30c00
[  182.166965][ T9149] FS:  0000000000000000(0000) GS:ffff888096edf000(0063) knlGS:00000000f4f78b40
[  182.169655][ T9149] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  182.171696][ T9149] CR2: 00000000f72be630 CR3: 0000000073230000 CR4: 0000000000352ef0
[  182.174159][ T9149] Call Trace:
[  182.175207][ T9149]  <TASK>
[  182.176373][ T9149]  gadgetfs_unbind+0x1e1/0x260
[  182.177848][ T9149]  gadget_unbind_driver+0x20c/0x4f0
[  182.179769][ T9149]  ? __pfx_dummy_udc_async_callbacks+0x10/0x10
[  182.181723][ T9149]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  182.183565][ T9149]  device_remove+0xcb/0x180
[  182.185082][ T9149]  device_release_driver_internal+0x44e/0x620
[  182.187060][ T9149]  driver_detach+0xd8/0x1b0
[  182.188432][ T9149]  bus_remove_driver+0x13b/0x2e0
[  182.190008][ T9149]  driver_unregister+0x76/0xb0
[  182.191522][ T9149]  usb_gadget_unregister_driver+0x49/0x70
[  182.193251][ T9149]  dev_release+0x132/0x1b0
[  182.194636][ T9149]  ? __pfx_dev_release+0x10/0x10
[  182.196146][ T9149]  __fput+0x3ff/0xb50
[  182.197443][ T9149]  ? _raw_spin_unlock_irq+0x23/0x50
[  182.199068][ T9149]  task_work_run+0x150/0x240
[  182.200495][ T9149]  ? __pfx_task_work_run+0x10/0x10
[  182.202045][ T9149]  exit_to_user_mode_loop+0x1d8/0x6f0
[  182.203671][ T9149]  ? rcu_is_watching+0x12/0xc0
[  182.205147][ T9149]  __do_fast_syscall_32+0x701/0x970
[  182.206777][ T9149]  do_fast_syscall_32+0x32/0x70
[  182.208265][ T9149]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  182.210234][ T9149] RIP: 0023:0xf6feefec
[  182.211450][ T9149] Code: Unable to access opcode bytes at 0xf6feefc2.
[  182.213449][ T9149] RSP: 002b:00000000f4f7850c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[  182.216008][ T9149] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000000000
[  182.218480][ T9149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  182.220869][ T9149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  182.223247][ T9149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  182.225955][ T9149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  182.228438][ T9149]  </TASK>
[  182.229477][ T9149] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  182.231601][ T9149] CPU: 3 UID: 0 PID: 9149 Comm: syz.5.869 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  182.234786][ T9149] Tainted: [L]=SOFTLOCKUP
[  182.236115][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  182.239113][ T9149] Call Trace:
[  182.240115][ T9149]  <TASK>
[  182.241032][ T9149]  dump_stack_lvl+0x100/0x190
[  182.242565][ T9149]  vpanic+0x552/0x970
[  182.243813][ T9149]  ? __pfx_vpanic+0x10/0x10
[  182.245193][ T9149]  panic+0xd1/0xe0
[  182.246394][ T9149]  ? __pfx_panic+0x10/0x10
[  182.247785][ T9149]  check_panic_on_warn.cold+0x19/0x34
[  182.249424][ T9149]  ? dummy_free_request+0x7d/0x90
[  182.250939][ T9149]  __warn.cold+0x191/0x318
[  182.252321][ T9149]  __report_bug+0x30f/0x440
[  182.253704][ T9149]  ? dummy_free_request+0x7d/0x90
[  182.255245][ T9149]  ? __pfx___report_bug+0x10/0x10
[  182.256798][ T9149]  ? __lock_acquire+0x49f/0x1a40
[  182.258331][ T9149]  ? dummy_free_request+0x7d/0x90
[  182.259853][ T9149]  report_bug+0xb2/0x220
[  182.261133][ T9149]  ? dummy_free_request+0x7d/0x90
[  182.262666][ T9149]  handle_bug+0x16a/0x2a0
[  182.264056][ T9149]  exc_invalid_op+0x17/0x50
[  182.265457][ T9149]  asm_exc_invalid_op+0x1a/0x20
[  182.266988][ T9149] RIP: 0010:dummy_free_request+0x7d/0x90
[  182.268665][ T9149] Code: 92 9e fa e8 05 1e 3b fa 5b 5d c3 cc cc cc cc e8 f9 1d 3b fa 90 0f 0b 90 e8 f0 1d 3b fa 5b 5d e9 c9 c2 ed 03 e8 e4 1d 3b fa 90 <0f> 0b 90 eb c7 48 89 ef e8 d6 ad aa fa eb b4 0f 1f 40 00 90 90 90
[  182.274554][ T9149] RSP: 0018:ffffc9000796fbc8 EFLAGS: 00010287
[  182.276470][ T9149] RAX: 0000000000004d93 RBX: ffff88802452d710 RCX: ffffc90036c0b000
[  182.278840][ T9149] RDX: 0000000000080000 RSI: ffffffff87ce901c RDI: ffff888021c30068
[  182.281564][ T9149] RBP: ffff88802452d700 R08: 0000000000000001 R09: 0000000000000000
[  182.283977][ T9149] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff90259240
[  182.286362][ T9149] R13: ffff888021c30c00 R14: ffff888046056844 R15: ffff888021c30c00
[  182.288757][ T9149]  ? dummy_free_request+0x7c/0x90
[  182.290304][ T9149]  ? dummy_free_request+0x7c/0x90
[  182.291802][ T9149]  gadgetfs_unbind+0x1e1/0x260
[  182.293258][ T9149]  gadget_unbind_driver+0x20c/0x4f0
[  182.294816][ T9149]  ? __pfx_dummy_udc_async_callbacks+0x10/0x10
[  182.296749][ T9149]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  182.298436][ T9149]  device_remove+0xcb/0x180
[  182.299776][ T9149]  device_release_driver_internal+0x44e/0x620
[  182.301569][ T9149]  driver_detach+0xd8/0x1b0
[  182.302920][ T9149]  bus_remove_driver+0x13b/0x2e0
[  182.304427][ T9149]  driver_unregister+0x76/0xb0
[  182.305931][ T9149]  usb_gadget_unregister_driver+0x49/0x70
[  182.307723][ T9149]  dev_release+0x132/0x1b0
[  182.309115][ T9149]  ? __pfx_dev_release+0x10/0x10
[  182.310636][ T9149]  __fput+0x3ff/0xb50
[  182.311871][ T9149]  ? _raw_spin_unlock_irq+0x23/0x50
[  182.313422][ T9149]  task_work_run+0x150/0x240
[  182.314905][ T9149]  ? __pfx_task_work_run+0x10/0x10
[  182.316546][ T9149]  exit_to_user_mode_loop+0x1d8/0x6f0
[  182.318254][ T9149]  ? rcu_is_watching+0x12/0xc0
[  182.319900][ T9149]  __do_fast_syscall_32+0x701/0x970
[  182.321494][ T9149]  do_fast_syscall_32+0x32/0x70
[  182.322950][ T9149]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  182.324928][ T9149] RIP: 0023:0xf6feefec
[  182.326237][ T9149] Code: Unable to access opcode bytes at 0xf6feefc2.
[  182.328184][ T9149] RSP: 002b:00000000f4f7850c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[  182.330635][ T9149] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000000000
[  182.332924][ T9149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  182.335336][ T9149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  182.337684][ T9149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  182.340012][ T9149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  182.342335][ T9149]  </TASK>
[  182.344005][ T9149] Kernel Offset: disabled
[  182.345286][ T9149] Rebooting in 86400 seconds..