last executing test programs:

5m30.209824211s ago: executing program 4 (id=5068):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402)
fsmount(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
fremovexattr(r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m29.781531379s ago: executing program 0 (id=5069):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0xe4}]}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000640)="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", 0x1a2}], 0x1}}], 0x1, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m26.532773534s ago: executing program 0 (id=5072):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0xe4}]}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000640)="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", 0x117}], 0x1}}], 0x1, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m26.474441319s ago: executing program 4 (id=5073):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0xe4}]}, 0x8)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000640)="f2b4e4f180ec3860b99bb254602fb717f9437cd2547fce2306325491a0ec68779f10729ed1f62f6e2c132ca90d49aa95a1ed03f8c6b4f274bf080197a2f4c0fad41128ae51096ffcba1b5266add485ebbd308420c601f47062eb3fcbbb91207f65d852dd8966f195f9c9300b939bb8395eedebf432e9f4518e838779a8d8c8283797a2116396f1fcef6cad72ccc5f1784bdfdebd04af58f57424c27be084c48079913780d2c30a94a2f7891b3ca75cbb149caf8a22e187fe16721bc163e4471b50b796a4680a200cba9a912b578afda68a732ccb9f6e086e680bc21de5988055a4b1f1c5450afd33288da6819fcbeb30ab8c28cad8594d7b5c6bb6b1897bcb8238f4c166249c45267e64ad1601d57dbb5c4bc807719c13", 0x117}], 0x1}}], 0x1, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m25.619627208s ago: executing program 4 (id=5074):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/mcfilter\x00')
preadv(r2, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c)
r3 = accept4$unix(r2, &(0x7f0000019080)=@abs, &(0x7f0000019100)=0x6e, 0x40000)
connect$unix(r3, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000091a00030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7], 0x1c}}, 0x840)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)

5m25.507167226s ago: executing program 0 (id=5076):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setns(r6, 0x4000000)
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m22.032439159s ago: executing program 4 (id=5078):
add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x60, 0x0, 0xb7a006d1969b963b, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x8014)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$kcm(0x28, 0x1, 0x0)

5m19.704916441s ago: executing program 0 (id=5082):
add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x60, 0x0, 0xb7a006d1969b963b, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x8014)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$kcm(0x28, 0x1, 0x0)

5m18.76109312s ago: executing program 4 (id=5083):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x422aa300, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x7, 0x0, 0x6}, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}])
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r2, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

5m15.799253035s ago: executing program 0 (id=5086):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0xe4}]}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000640)="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", 0x1e8}], 0x1}}], 0x1, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m13.470990845s ago: executing program 0 (id=5089):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x422aa300, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x7, 0x0, 0x6}, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}])
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r2, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

5m12.886323784s ago: executing program 4 (id=5090):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13)
mount_setattr(r1, &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000240)={0x0, 0x9, 0x1c0000, {r2}}, 0x20)
syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0)
read$FUSE(r2, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
fcntl$lock(r0, 0x5, &(0x7f0000002cc0)={0x2, 0x0, 0x3ff, 0x40, r4})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r0, 0xffffffffffffffff, 0x0)

4m57.836145445s ago: executing program 32 (id=5089):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x422aa300, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x7, 0x0, 0x6}, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}])
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r2, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

4m52.908420698s ago: executing program 33 (id=5090):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13)
mount_setattr(r1, &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000240)={0x0, 0x9, 0x1c0000, {r2}}, 0x20)
syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0)
read$FUSE(r2, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
fcntl$lock(r0, 0x5, &(0x7f0000002cc0)={0x2, 0x0, 0x3ff, 0x40, r4})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r0, 0xffffffffffffffff, 0x0)

2m33.625106947s ago: executing program 2 (id=5232):
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000240)={0x0, 0x9, 0x1c0000, {r1}}, 0x20)
syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)
read$FUSE(r1, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000002cc0)={0x2, 0x0, 0x3ff, 0x40, r4})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m32.451615738s ago: executing program 2 (id=5234):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0xe8}}], 0x1, 0x4000800)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x100, 0x3ff, 0x1, 0x0, 0x858d, 0x100, 0x8, 0x3000, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0xd3d, 0x0, 0x1, 0x8, 0xfe6, 0xfffffffe, 0x7, 0x4, 0x7, 0x4000009, 0x4b, 0x19, 0x90, 0x5, 0x81, 0x800, 0x3ff]})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = openat$cgroup_netprio_ifpriomap(r4, 0x0, 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r5], 0x6e)
ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0))
ptrace$pokeuser(0x6, r3, 0x8001, 0x8)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)

2m29.522895803s ago: executing program 2 (id=5237):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
utimes(&(0x7f00000053c0)='./file0\x00', 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setns(r6, 0x4000000)
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m21.896052959s ago: executing program 2 (id=5242):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
utimes(&(0x7f00000053c0)='./file0\x00', 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setns(r6, 0x4000000)
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m18.652149393s ago: executing program 2 (id=5244):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x422aa300, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = epoll_create1(0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020)
preadv(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x42, 0x116d)
syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

2m14.90494236s ago: executing program 2 (id=5248):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1m59.188338977s ago: executing program 34 (id=5248):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

18.358183478s ago: executing program 1 (id=5314):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x422aa300, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020)
preadv(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x42, 0x116d)
syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

17.162734376s ago: executing program 3 (id=5315):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)

17.025373398s ago: executing program 1 (id=5316):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
utimes(&(0x7f00000053c0)='./file0\x00', 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1)

15.552232074s ago: executing program 3 (id=5317):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14.140122337s ago: executing program 1 (id=5318):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
utimes(&(0x7f00000053c0)='./file0\x00', 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1)

13.9242403s ago: executing program 3 (id=5319):
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
mount_setattr(r0, 0x0, 0x8000, &(0x7f0000000240)={0x0, 0x9, 0x1c0000, {r1}}, 0x20)
syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x3c)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)
read$FUSE(r1, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000002cc0)={0x2, 0x0, 0x3ff, 0x40, r4})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

10.227087959s ago: executing program 3 (id=5320):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0x2, 0x3, 0x5})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000440)=""/221)

10.130721483s ago: executing program 1 (id=5321):
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
mount_setattr(r0, 0x0, 0x8000, &(0x7f0000000240)={0x0, 0x9, 0x1c0000, {r1}}, 0x20)
syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x3c)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)
read$FUSE(r1, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000002cc0)={0x2, 0x0, 0x3ff, 0x40, r4})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

9.507543508s ago: executing program 3 (id=5322):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
utimes(&(0x7f00000053c0)='./file0\x00', 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
setns(0xffffffffffffffff, 0x4000000)
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.96670823s ago: executing program 1 (id=5323):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
utimes(&(0x7f00000053c0)='./file0\x00', 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
setns(0xffffffffffffffff, 0x4000000)
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.513404068s ago: executing program 3 (id=5324):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
utimes(&(0x7f00000053c0)='./file0\x00', 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1)

0s ago: executing program 1 (id=5325):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x422aa300, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020)
preadv(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x42, 0x116d)
syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

75] Bluetooth: hci1: command 0x0405 tx timeout
[ 1519.589114][ T4875] Bluetooth: hci0: command 0x0406 tx timeout
[ 1519.590016][T20309] Bluetooth: hci2: command 0x0405 tx timeout
[ 1519.669302][T20309] Bluetooth: hci3: command 0x0405 tx timeout
[ 1520.892652][T21060] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4672'.
[ 1521.333731][T21066] syzkaller1: entered promiscuous mode
[ 1521.382940][T21066] syzkaller1: entered allmulticast mode
[ 1521.687703][T20309] Bluetooth: hci2: command 0x0405 tx timeout
[ 1522.299835][T21069] syzkaller0: entered promiscuous mode
[ 1522.326354][T21069] syzkaller0: entered allmulticast mode
[ 1523.396621][T21092] syzkaller0: entered promiscuous mode
[ 1523.422064][T21092] syzkaller0: entered allmulticast mode
[ 1524.414571][T16125] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1524.721903][T18991] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1524.750126][T21113] netlink: 'syz.1.4694': attribute type 1 has an invalid length.
[ 1524.758554][T21113] netlink: 'syz.1.4694': attribute type 1 has an invalid length.
[ 1524.767426][T21113] netlink: 'syz.1.4694': attribute type 2 has an invalid length.
[ 1524.770118][ T9139] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1524.776622][T21113] netlink: 'syz.1.4694': attribute type 1 has an invalid length.
[ 1524.919152][T18991] usb 5-1: Using ep0 maxpacket: 32
[ 1524.934778][T18991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1524.953991][ T9139] usb 4-1: Using ep0 maxpacket: 8
[ 1524.961191][T18991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1524.979625][ T9139] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1524.996337][T18991] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1525.008011][ T9139] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1525.016269][T18991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.025237][ T9139] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[ 1525.038395][ T9139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.064325][T18991] usb 5-1: config 0 descriptor??
[ 1525.093028][T18991] hub 5-1:0.0: USB hub found
[ 1525.110379][ T9139] usb 4-1: config 0 descriptor??
[ 1525.129342][T12399] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1525.294828][T18991] hub 5-1:0.0: 1 port detected
[ 1525.300950][T12399] usb 3-1: Using ep0 maxpacket: 32
[ 1525.335917][T12399] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1525.366283][T12399] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7
[ 1525.400603][T12399] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40
[ 1525.412287][T12399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1525.422880][T12399] usb 3-1: Product: syz
[ 1525.427616][T12399] usb 3-1: Manufacturer: syz
[ 1525.438247][T12399] usb 3-1: SerialNumber: syz
[ 1525.615102][ T9139] wacom 0003:056A:00E3.0014: unknown main item tag 0x7
[ 1525.629289][ T9139] wacom 0003:056A:00E3.0014: unknown main item tag 0x0
[ 1525.637737][ T9139] wacom 0003:056A:00E3.0014: unknown main item tag 0x1
[ 1525.649054][ T9139] wacom 0003:056A:00E3.0014: reserved main item tag 0xd
[ 1525.820234][T14480] usb 4-1: USB disconnect, device number 9
[ 1525.857383][T12399] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1525.894380][T12399] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1525.919531][T18991] hub 5-1:0.0: activate --> -90
[ 1526.327761][ T5681] usb 5-1: USB disconnect, device number 8
[ 1526.465881][T12399] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1526.471585][ T4875] Bluetooth: hci4: command 0x1003 tx timeout
[ 1526.471593][T20309] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1526.728288][T12399] usb 3-1: USB disconnect, device number 13
[ 1526.986692][ T6607] udevd[6607]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1527.342213][T12399] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1527.475913][T21118] syzkaller0: entered promiscuous mode
[ 1527.482647][T21118] syzkaller0: entered allmulticast mode
[ 1527.542239][T12399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1527.575199][T12399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1527.586285][T21125] pim6reg: entered allmulticast mode
[ 1527.594322][T12399] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1527.624366][T12399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.652223][T21129] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4700'.
[ 1527.664880][T12399] usb 3-1: config 0 descriptor??
[ 1528.260734][T12399] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[ 1528.349022][T12399] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected
[ 1528.498411][T12399] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[ 1528.594294][T21131] syzkaller0: entered promiscuous mode
[ 1528.605813][T21131] syzkaller0: entered allmulticast mode
[ 1528.623843][T12399] usb 3-1: USB disconnect, device number 14
[ 1528.724068][T12399] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected
[ 1529.262193][T21146] fido_id[21146]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1529.613278][T21153] netlink: 'syz.2.4706': attribute type 27 has an invalid length.
[ 1530.150180][T21153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1530.159370][T21153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1530.179161][ T5681] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1530.358505][ T5681] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1530.387699][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1530.429057][ T5681] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1530.451128][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1530.485877][ T5681] usb 4-1: config 0 descriptor??
[ 1530.496028][T21159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1530.517215][ T5681] hub 4-1:0.0: USB hub found
[ 1530.762650][ T5681] hub 4-1:0.0: 1 port detected
[ 1531.035973][T21153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1531.106349][T21153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1531.846109][ T5681] usb 4-1-port1: config error
[ 1531.852191][T12399] usb 4-1: USB disconnect, device number 10
[ 1532.246437][ T1140] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1532.258092][ T1140] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1532.285505][ T1140] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1532.311575][ T1140] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1532.881816][T21175] syzkaller0: entered promiscuous mode
[ 1532.904164][T21175] syzkaller0: entered allmulticast mode
[ 1533.130379][T12399] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1533.329608][T12399] usb 4-1: Using ep0 maxpacket: 16
[ 1533.366938][T12399] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[ 1533.382731][T12399] usb 4-1: config 0 has no interface number 0
[ 1533.401497][T12399] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1533.450009][T12399] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1533.485829][T12399] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1533.497779][T12399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1533.508182][T12399] usb 4-1: Product: syz
[ 1533.513854][T12399] usb 4-1: Manufacturer: syz
[ 1533.523695][T12399] usb 4-1: SerialNumber: syz
[ 1533.542411][T12399] usb 4-1: config 0 descriptor??
[ 1533.575702][T21184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1533.595698][T21184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1533.866925][T21184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1533.903326][T21184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1534.179302][T12399] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1534.837969][T21203] syzkaller0: entered promiscuous mode
[ 1534.858791][T21203] syzkaller0: entered allmulticast mode
[ 1535.235667][T12399] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1535.257816][T12399] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1535.318268][T12399] asix 4-1:0.34: probe with driver asix failed with error -71
[ 1535.414169][T12399] usb 4-1: USB disconnect, device number 11
[ 1536.181005][T12399] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1536.363097][T12399] usb 3-1: Using ep0 maxpacket: 16
[ 1536.398977][T12399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1536.446062][T12399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1536.480989][T12399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1536.526119][T12399] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1536.555984][T12399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1536.600186][T12399] usb 3-1: config 0 descriptor??
[ 1537.157568][T12399] microsoft 0003:045E:07DA.0017: report is too long
[ 1537.178933][T12399] microsoft 0003:045E:07DA.0017: item 0 4 0 8 parsing failed
[ 1537.224481][T12399] microsoft 0003:045E:07DA.0017: parse failed
[ 1537.253383][T12399] microsoft 0003:045E:07DA.0017: probe with driver microsoft failed with error -22
[ 1537.366833][T12399] usb 3-1: USB disconnect, device number 15
[ 1539.037260][T21250] syzkaller0: entered promiscuous mode
[ 1539.057877][T21250] syzkaller0: entered allmulticast mode
[ 1540.736974][T21263] loop2: detected capacity change from 0 to 2048
[ 1540.885267][T21263]  loop2: p1 p2 p3
[ 1540.885267][T21263]  p1: <netbsd: p5 (ignored 752 more) >
[ 1540.938481][T21263] loop2: p2 size 458752 extends beyond EOD, truncated
[ 1540.959513][T21268] syzkaller0: entered promiscuous mode
[ 1540.975721][T21268] syzkaller0: entered allmulticast mode
[ 1540.989330][T21263] loop2: p3 start 65280 is beyond EOD, truncated
[ 1540.996543][T14480] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1541.184063][T14480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1541.215084][T14480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1541.257583][T14480] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1541.294019][T14480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.360968][T14480] usb 2-1: config 0 descriptor??
[ 1541.902290][T14480] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1541.925121][T14480] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1541.967101][T14480] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1541.987014][T14480] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1542.005056][T14480] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1542.061706][T14480] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1542.076912][T14480] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1542.180496][T14480] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[ 1542.455293][T21285] netlink: 'syz.2.4753': attribute type 26 has an invalid length.
[ 1542.539514][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4753'.
[ 1542.655509][T14480] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device
[ 1542.685360][T14480] pyra 0003:1E7D:2CF6.0018: couldn't install mouse
[ 1542.748540][T14480] pyra 0003:1E7D:2CF6.0018: probe with driver pyra failed with error -71
[ 1542.808447][T14480] usb 2-1: USB disconnect, device number 9
[ 1542.844042][T21291] syzkaller0: entered promiscuous mode
[ 1542.887091][T21291] syzkaller0: entered allmulticast mode
[ 1542.997127][T21284] fido_id[21284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1545.378524][T21324] loop1: detected capacity change from 0 to 16
[ 1545.484283][T21324] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[ 1545.552896][T21324] erofs (device loop1): mounted with root inode @ nid 36.
[ 1545.622995][T21324] erofs (device loop1): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel
[ 1545.694382][T21324] erofs (device loop1): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel
[ 1545.726798][T21324] erofs (device loop1): read error -95 @ 40 of nid 36
[ 1545.785825][T21327] erofs (device loop1): readahead error at folio 7 @ nid 36
[ 1545.806267][T21327] erofs (device loop1): readahead error at folio 6 @ nid 36
[ 1545.816744][T21327] erofs (device loop1): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel
[ 1545.851347][T21327] erofs (device loop1): readahead error at folio 5 @ nid 36
[ 1545.870859][T21327] erofs (device loop1): readahead error at folio 4 @ nid 36
[ 1545.891228][T21327] erofs (device loop1): not enough plain data on disk @ la 15360 of nid 36
[ 1545.918885][T21327] erofs (device loop1): readahead error at folio 3 @ nid 36
[ 1545.951615][T21327] erofs (device loop1): readahead error at folio 2 @ nid 36
[ 1545.974866][T21327] erofs (device loop1): readahead error at folio 1 @ nid 36
[ 1546.011586][T21327] erofs (device loop1): readahead error at folio 0 @ nid 36
[ 1546.056328][T21327] erofs (device loop1): read error -117 @ 0 of nid 36
[ 1546.091244][T21327] erofs (device loop1): failed to readdir of logical block 0 of nid 36
[ 1546.972452][T21341] syzkaller0: entered promiscuous mode
[ 1546.998820][T21341] syzkaller0: entered allmulticast mode
[ 1548.965609][T21365] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4782'.
[ 1549.035711][T21365] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4782'.
[ 1549.083476][T21365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4782'.
[ 1552.995997][T21411] loop3: detected capacity change from 0 to 256
[ 1556.001088][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1560.475039][T21456] loop3: detected capacity change from 0 to 16
[ 1560.523717][T21456] erofs (device loop3): mounted with root inode @ nid 36.
[ 1560.600668][T20309] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[ 1560.643165][T21456] erofs (device loop3): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[ 1560.696633][T21456] erofs (device loop3): read error -117 @ 1 of nid 89
[ 1560.725433][   T29] audit: type=1800 audit(1781346165.363:2): pid=21456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4812" name="file2" dev="loop3" ino=89 res=0 errno=0
[ 1560.823520][T21456] erofs (device loop3): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[ 1560.898340][T21456] erofs (device loop3): read error -117 @ 1 of nid 89
[ 1560.961266][T21456] erofs (device loop3): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[ 1561.043848][T21456] erofs (device loop3): read error -117 @ 1 of nid 89
[ 1561.132912][T21482] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4820'.
[ 1565.713169][T21509] loop4: detected capacity change from 0 to 16
[ 1565.787385][T21509] erofs (device loop4): mounted with root inode @ nid 36.
[ 1565.909000][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[ 1565.933622][T21509] erofs (device loop4): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel
[ 1566.002448][T21509] erofs (device loop4): unknown algorithm 6 @ pos 167424 for nid 36, please upgrade kernel
[ 1566.053149][T21509] erofs (device loop4): read error -95 @ 40 of nid 36
[ 1566.074378][T21510] erofs (device loop4): readahead error at folio 7 @ nid 36
[ 1566.121853][T21510] erofs (device loop4): readahead error at folio 6 @ nid 36
[ 1566.161134][T21510] erofs (device loop4): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel
[ 1566.211993][T21510] erofs (device loop4): readahead error at folio 5 @ nid 36
[ 1566.276834][T21510] erofs (device loop4): readahead error at folio 4 @ nid 36
[ 1566.315186][T21510] erofs (device loop4): not enough plain data on disk @ la 15360 of nid 36
[ 1566.377838][T21510] erofs (device loop4): readahead error at folio 3 @ nid 36
[ 1566.411228][T21510] erofs (device loop4): readahead error at folio 2 @ nid 36
[ 1566.444259][T21510] erofs (device loop4): readahead error at folio 1 @ nid 36
[ 1566.473781][T21510] erofs (device loop4): readahead error at folio 0 @ nid 36
[ 1566.500427][T21510] erofs (device loop4): read error -117 @ 0 of nid 36
[ 1566.538419][T21510] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[ 1567.333457][T21521] bridge1: entered promiscuous mode
[ 1567.905997][T21529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4835'.
[ 1570.559595][T21552] loop3: detected capacity change from 0 to 128
[ 1570.907860][   T29] audit: type=1804 audit(1781346175.553:3): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4840" name="/newroot/283/file0/bus" dev="loop3" ino=1048631 res=1 errno=0
[ 1571.001256][   T29] audit: type=1804 audit(1781346175.663:4): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4840" name="/newroot/283/file0/bus" dev="loop3" ino=1048631 res=1 errno=0
[ 1571.047615][   T29] audit: type=1804 audit(1781346175.703:5): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4840" name="/newroot/283/file0/bus" dev="loop3" ino=1048631 res=1 errno=0
[ 1572.199059][T21566] 9pnet_virtio: no channels available for device syz
[ 1572.607581][T21567] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1573.235631][T21567] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1575.364313][   T29] audit: type=1804 audit(1781346180.023:6): pid=21588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4852" name="/newroot/329/file0" dev="tmpfs" ino=1702 res=1 errno=0
[ 1575.388364][T21588] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1
[ 1575.433506][T21588] ref_ctr increment failed for inode: 0x6a6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810046f700
[ 1575.467035][T21588] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: -1
[ 1575.490791][T21588] ref_ctr decrement failed for inode: 0x6a6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810046f700
[ 1575.521318][T21588] uprobe: syz.0.4852:21588 failed to unregister, leaking uprobe
[ 1577.901626][   T29] audit: type=1804 audit(1781346182.543:7): pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4857" name="/newroot/286/file0" dev="tmpfs" ino=1472 res=1 errno=0
[ 1577.903014][T21611] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1
[ 1577.956764][T21611] ref_ctr increment failed for inode: 0x5c0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a9a6900
[ 1578.253365][T21611] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: -1
[ 1578.286528][T21611] ref_ctr decrement failed for inode: 0x5c0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a9a6900
[ 1578.373427][T21611] uprobe: syz.3.4857:21611 failed to unregister, leaking uprobe
[ 1579.184428][T21622] loop5: detected capacity change from 0 to 7
[ 1579.235498][T21622] Dev loop5: unable to read RDB block 7
[ 1579.253511][T21622]  loop5: unable to read partition table
[ 1579.284141][T21622] loop5: partition table beyond EOD, truncated
[ 1579.335643][T21622] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1579.584764][T21624] 9pnet_virtio: no channels available for device syz
[ 1579.840719][T21626] bond0: entered promiscuous mode
[ 1579.845996][T21626] bond_slave_0: entered promiscuous mode
[ 1579.959041][T21627] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1580.021815][T21626] bond_slave_1: entered promiscuous mode
[ 1580.314877][T21626] batadv0: entered promiscuous mode
[ 1580.507556][T21626] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1580.661117][T21627] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1580.730959][T21626] bond0: left promiscuous mode
[ 1580.780178][T21626] bond_slave_0: left promiscuous mode
[ 1580.874211][T21626] bond_slave_1: left promiscuous mode
[ 1580.994303][T21626] batadv0: left promiscuous mode
[ 1582.708255][T21656] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1582.722637][T21656] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1584.239061][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1584.340725][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 1585.979256][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[ 1586.389009][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[ 1586.491016][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[ 1586.799534][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1586.900823][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 1587.208735][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1587.310399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[ 1592.526343][T21660] bond0: entered promiscuous mode
[ 1592.609605][T21660] bond_slave_0: entered promiscuous mode
[ 1592.660788][T21660] bond_slave_1: entered promiscuous mode
[ 1592.791290][T21660] batadv0: entered promiscuous mode
[ 1592.933519][T21660] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1593.590907][T21660] bond0: left promiscuous mode
[ 1593.631087][T21660] bond_slave_0: left promiscuous mode
[ 1593.701494][T21660] bond_slave_1: left promiscuous mode
[ 1593.785949][T21660] batadv0: left promiscuous mode
[ 1598.490597][T21698] 9pnet_virtio: no channels available for device syz
[ 1598.537841][T21700] 9pnet_virtio: no channels available for device syz
[ 1598.691744][T21701] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1599.535587][T21706] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1599.881162][T21702] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1600.347005][T21702] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1607.219940][T21720] 9pnet_virtio: no channels available for device syz
[ 1607.368435][T21721] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1607.504303][T21721] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1610.172571][T21728] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1613.418803][T21753] 9pnet_virtio: no channels available for device syz
[ 1613.614071][T21754] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1613.797483][T21755] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1616.894906][T21769] 9pnet_virtio: no channels available for device syz
[ 1617.174400][T21769] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1617.319569][T21780] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1617.558494][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1617.657738][T21774] 9pnet_virtio: no channels available for device syz
[ 1622.556623][T21791] netlink: 'syz.4.4903': attribute type 4 has an invalid length.
[ 1622.597381][T21791] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4903'.
[ 1622.766604][T21791] .`: renamed from bond0 (while UP)
[ 1623.014035][T21805] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1624.764502][   T29] audit: type=1804 audit(1781346229.423:8): pid=21814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4910" name="/newroot/342/file0" dev="tmpfs" ino=1770 res=1 errno=0
[ 1624.794409][T21814] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1
[ 1624.803470][T21814] ref_ctr increment failed for inode: 0x6ea offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812500a300
[ 1625.819849][T21829] 9pnet_virtio: no channels available for device syz
[ 1625.891611][T21814] uprobe: syz.0.4910:21814 failed to unregister, leaking uprobe
[ 1626.034259][   T29] audit: type=1804 audit(1781346230.623:9): pid=21821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4913" name="/newroot/259/file0" dev="tmpfs" ino=1341 res=1 errno=0
[ 1626.141600][T21834] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1626.340400][T21835] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1632.386307][T21867] 9pnet_virtio: no channels available for device syz
[ 1633.106555][T21868] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1635.156295][T21881] 9pnet_virtio: no channels available for device syz
[ 1635.443965][T21881] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1635.589990][T21887] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1637.628125][T21884] 9pnet_virtio: no channels available for device syz
[ 1637.839172][T21888] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1637.948282][T21888] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1639.003106][T21897] netlink: 'syz.3.4931': attribute type 4 has an invalid length.
[ 1639.026656][T21901] 9pnet_virtio: no channels available for device syz
[ 1639.035216][T21897] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4931'.
[ 1639.118137][T21897] .`: renamed from bond0 (while UP)
[ 1639.210502][T21903] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1639.402445][T21903] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1646.031349][T21934] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1646.312050][T21923] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1646.461600][T21925] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1646.714622][T21926] netlink: 'syz.0.4938': attribute type 4 has an invalid length.
[ 1647.338403][T21926] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4938'.
[ 1649.828696][T21926] .`: renamed from bond0 (while UP)
[ 1650.133509][T21947] netlink: 'syz.4.4941': attribute type 4 has an invalid length.
[ 1650.160624][T21947] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4941'.
[ 1654.451541][T21981] 9pnet_virtio: no channels available for device syz
[ 1654.574073][T21987] loop5: detected capacity change from 0 to 7
[ 1654.606230][T21985] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1654.806379][T21985] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1655.075899][T21987]  loop5:
[ 1655.184552][T21989] 9pnet_virtio: no channels available for device syz
[ 1655.210645][T21987] loop5: partition table partially beyond EOD, truncated
[ 1655.615723][T21993] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1656.010036][T21993] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1660.242623][T22004] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1662.806726][T22024] 9pnet_virtio: no channels available for device syz
[ 1663.070407][T22023] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1663.231921][T22024] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1664.645093][T22031] 9pnet_virtio: no channels available for device syz
[ 1665.052190][T22035] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1665.205688][T22035] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1671.273449][T22049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1671.978209][   T29] audit: type=1804 audit(1781346276.633:10): pid=22053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4969" name="/newroot/363/file0" dev="tmpfs" ino=1902 res=1 errno=0
[ 1676.317902][T22074] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1679.463171][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1680.775483][T22095] fuse: Bad value for 'fd'
[ 1687.795048][T22120] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1687.920631][T22123] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1690.098118][T22134] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1690.230967][T22135] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1697.036543][T22155] netlink: 'syz.3.4993': attribute type 4 has an invalid length.
[ 1698.470322][T22155] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4993'.
[ 1702.866563][T22189] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1703.219995][T22189] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1703.858876][T22190] bond0: entered promiscuous mode
[ 1703.952841][T22190] bond_slave_0: entered promiscuous mode
[ 1704.065301][T22190] bond_slave_1: entered promiscuous mode
[ 1704.134046][T22190] batadv0: entered promiscuous mode
[ 1704.142665][T22190] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1704.359287][T18991] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[ 1704.374471][T22190] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1704.586374][T22190] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1704.614972][T18991] usb 5-1: config 0 has no interfaces?
[ 1704.621191][T18991] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1704.633089][T18991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1704.663010][T18991] usb 5-1: config 0 descriptor??
[ 1704.895686][T22196] misc userio: No port type given on /dev/userio
[ 1704.907433][T22190] bond0: left promiscuous mode
[ 1704.956978][T22190] bond_slave_0: left promiscuous mode
[ 1705.045658][T22190] bond_slave_1: left promiscuous mode
[ 1705.112317][T22190] batadv0: left promiscuous mode
[ 1705.271828][T22204] misc userio: The device must be registered before sending interrupts
[ 1707.494905][T18991] usb 5-1: USB disconnect, device number 9
[ 1707.590075][T22213] 9pnet_virtio: no channels available for device syz
[ 1707.811027][T22214] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1707.963378][T22215] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1711.235821][T22219] netlink: 'syz.2.5006': attribute type 4 has an invalid length.
[ 1711.595776][T22219] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5006'.
[ 1712.436511][T22219] .`: renamed from bond0
[ 1713.175184][T22237] fuse: Bad value for 'fd'
[ 1720.303901][T22274] 9pnet_virtio: no channels available for device syz
[ 1720.871426][T22276] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1721.288194][T22276] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1726.732791][   T29] audit: type=1804 audit(1781346331.383:11): pid=22285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5025" name="/newroot/367/file0" dev="tmpfs" ino=1904 res=1 errno=0
[ 1730.327806][   T29] audit: type=1804 audit(1781346334.983:12): pid=22311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5032" name="/newroot/419/file0" dev="tmpfs" ino=2155 res=1 errno=0
[ 1732.093847][T22317] fuse: Bad value for 'fd'
[ 1733.327775][T22319] 9pnet_virtio: no channels available for device syz
[ 1733.515993][T22320] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1733.697214][T22321] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1737.984813][   T29] audit: type=1804 audit(1781346342.623:13): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5042" name="/newroot/326/file0" dev="tmpfs" ino=1684 res=1 errno=0
[ 1739.453804][T22352] netlink: 'syz.0.5045': attribute type 4 has an invalid length.
[ 1739.498331][T22352] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5045'.
[ 1739.814837][T22363] loop5: detected capacity change from 0 to 7
[ 1740.213616][T22363]  loop5:
[ 1740.430632][T22363] loop5: partition table partially beyond EOD, truncated
[ 1740.491114][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1758.207389][   T29] audit: type=1804 audit(1781346362.863:14): pid=22454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5070" name="/newroot/331/file0" dev="tmpfs" ino=1710 res=1 errno=0
[ 1758.253409][T22454] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1
[ 1758.304777][T22454] ref_ctr increment failed for inode: 0x6ae offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a9a3100
[ 1758.841725][T22449] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: -1
[ 1758.851591][T22449] ref_ctr decrement failed for inode: 0x6ae offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a9a3100
[ 1758.896801][T22449] uprobe: syz.3.5070:22449 failed to unregister, leaking uprobe
[ 1761.464408][T22472] 9pnet_virtio: no channels available for device syz
[ 1762.183406][T22478] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1762.382806][T22479] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1765.247990][T22486] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1765.435789][T22492] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1770.773099][T22516] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1770.990055][T22516] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1773.465178][T22524] loop5: detected capacity change from 0 to 7
[ 1773.503732][T22524] Dev loop5: unable to read RDB block 7
[ 1773.560596][T22524]  loop5: unable to read partition table
[ 1773.697321][T22524] loop5: partition table beyond EOD, truncated
[ 1773.806490][T22524] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1775.730833][   T29] audit: type=1804 audit(1781346380.393:15): pid=22527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5090" name="/newroot/294/file0" dev="tmpfs" ino=1531 res=1 errno=0
[ 1787.829977][T22544] loop5: detected capacity change from 0 to 7
[ 1788.359872][T22544] Dev loop5: unable to read RDB block 7
[ 1788.482474][T22544]  loop5: unable to read partition table
[ 1788.607526][T22544] loop5: partition table beyond EOD, truncated
[ 1788.703531][T22544] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1793.814708][T22559] fuse: Bad value for 'fd'
[ 1795.616796][ T4875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1795.632373][ T4875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1795.645075][ T4875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1795.672251][T22567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1795.689649][T22567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1795.745619][T22567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1795.775058][T22569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1795.786492][T22569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1795.828276][T22569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1795.848911][T22569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1797.822054][T22581] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1797.829525][T22569] Bluetooth: hci6: command tx timeout
[ 1797.931268][T22569] Bluetooth: hci4: command tx timeout
[ 1798.275888][T22585] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1799.927508][T22569] Bluetooth: hci6: command tx timeout
[ 1799.991440][T22569] Bluetooth: hci4: command tx timeout
[ 1801.335167][T22608] loop5: detected capacity change from 0 to 7
[ 1801.516999][T22608] Dev loop5: unable to read RDB block 7
[ 1801.617677][T22608]  loop5: unable to read partition table
[ 1801.750550][T22608] loop5: partition table beyond EOD, truncated
[ 1801.757215][T22608] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1801.811967][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1802.082924][ T4875] Bluetooth: hci4: command tx timeout
[ 1802.083200][T22569] Bluetooth: hci6: command tx timeout
[ 1802.837088][T22613] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1804.148891][ T4875] Bluetooth: hci6: command tx timeout
[ 1804.166530][T22569] Bluetooth: hci4: command tx timeout
[ 1804.517285][   T14] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1804.684759][   T14] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1804.906088][   T14] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1805.130756][   T14] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1807.386990][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5113'.
[ 1814.480165][T22662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1814.993652][   T14] bridge_slave_1: left allmulticast mode
[ 1815.068081][   T14] bridge_slave_1: left promiscuous mode
[ 1815.090596][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1815.157768][   T14] bridge_slave_0: left allmulticast mode
[ 1815.192347][   T14] bridge_slave_0: left promiscuous mode
[ 1815.223569][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1817.816760][T22677] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1820.762016][   T14] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1820.962784][   T14] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1821.012558][   T14] .` (unregistering): Released all slaves
[ 1821.431462][   T14] tipc: Left network mode
[ 1821.541527][T22698] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1821.691094][T22699] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1827.068299][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5128'.
[ 1827.173981][   T14] hsr_slave_0: left promiscuous mode
[ 1827.212930][   T14] hsr_slave_1: left promiscuous mode
[ 1827.247719][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1827.255743][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1827.328041][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1827.370407][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1827.490329][   T14] veth1_macvtap: left promiscuous mode
[ 1827.506994][   T14] veth0_macvtap: left promiscuous mode
[ 1827.528003][   T14] veth1_vlan: left promiscuous mode
[ 1827.548858][   T14] veth0_vlan: left promiscuous mode
[ 1829.358278][T22737] fuse: Bad value for 'fd'
[ 1829.617754][   T14] team0 (unregistering): Port device team_slave_1 removed
[ 1830.513287][   T14] team0 (unregistering): Port device team_slave_0 removed
[ 1831.104886][ T5230] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1832.313255][   T14] IPVS: stop unused estimator thread 0...
[ 1832.662981][   T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1832.871863][   T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.136326][   T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.584746][   T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.662785][T22564] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1833.675020][T22767] netlink: 'syz.1.5137': attribute type 4 has an invalid length.
[ 1833.707648][T22564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1833.710499][T22767] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5137'.
[ 1833.737091][T22564] bridge_slave_0: entered allmulticast mode
[ 1833.774324][T22564] bridge_slave_0: entered promiscuous mode
[ 1834.146037][T22767] .`: renamed from bond0 (while UP)
[ 1834.179124][T22564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1834.205285][T22564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1834.229301][T22564] bridge_slave_1: entered allmulticast mode
[ 1834.241923][T22784] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1834.266592][T22564] bridge_slave_1: entered promiscuous mode
[ 1834.279961][T22784] use the actual size instead.
[ 1834.457739][T22563] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1834.496142][T22563] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1834.536929][T22563] bridge_slave_0: entered allmulticast mode
[ 1834.591497][T22563] bridge_slave_0: entered promiscuous mode
[ 1834.833723][T22563] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1834.852081][T22563] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1834.893067][T22563] bridge_slave_1: entered allmulticast mode
[ 1834.924004][T22563] bridge_slave_1: entered promiscuous mode
[ 1835.005229][T22564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1835.393215][T22564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1835.477017][T22798] 9pnet_virtio: no channels available for device syz
[ 1835.675203][T22563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1835.769110][T22799] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1835.917097][T22803] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1836.052375][T22563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1836.621737][T22805] vivid-000: kernel_thread() failed
[ 1836.650403][T22564] team0: Port device team_slave_0 added
[ 1836.797368][T22807] 9pnet_virtio: no channels available for device syz
[ 1836.976760][T22807] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1837.014420][T22807] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1837.701563][T22564] team0: Port device team_slave_1 added
[ 1838.003497][T22563] team0: Port device team_slave_0 added
[ 1838.364973][ T5230] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1838.698926][T22820] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1838.852053][T22820] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1838.914449][T22563] team0: Port device team_slave_1 added
[ 1839.281247][T22564] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1839.371787][T22564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1839.662091][T22564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1840.197550][T22564] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1840.315125][T22564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1840.694493][T22564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1840.889225][   T14] bridge_slave_1: left allmulticast mode
[ 1840.895851][   T14] bridge_slave_1: left promiscuous mode
[ 1841.017492][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1841.409766][   T14] bridge_slave_0: left allmulticast mode
[ 1841.524473][   T14] bridge_slave_0: left promiscuous mode
[ 1841.633741][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1843.742299][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5149'.
[ 1844.189730][   T14] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1844.251424][   T14] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1844.303113][   T14] .` (unregistering): Released all slaves
[ 1845.945836][   T14] tipc: Left network mode
[ 1845.955998][T22563] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1845.967826][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1846.050446][T22563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1847.157161][T22564] hsr_slave_0: entered promiscuous mode
[ 1847.167954][T22564] hsr_slave_1: entered promiscuous mode
[ 1847.177251][T22564] debugfs: 'hsr0' already exists in 'hsr'
[ 1847.183370][T22564] Cannot create hsr debugfs directory
[ 1847.300661][T22563] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1847.312560][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1847.432296][T22563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1847.450719][T22851] 9pnet_virtio: no channels available for device syz
[ 1847.695902][T22849] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1847.864689][T22849] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1853.305030][   T14] hsr_slave_0: left promiscuous mode
[ 1853.365824][   T14] hsr_slave_1: left promiscuous mode
[ 1853.424678][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1853.469637][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1853.525415][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1853.540697][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1853.557606][T22569] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1853.569394][T22569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1853.597138][T22569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1853.630956][T22569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1853.651657][T22569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1853.773342][   T14] veth1_macvtap: left promiscuous mode
[ 1853.827473][   T14] veth0_macvtap: left promiscuous mode
[ 1853.865914][   T14] veth1_vlan: left promiscuous mode
[ 1853.885609][   T14] veth0_vlan: left promiscuous mode
[ 1855.006448][ T4875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1855.020900][ T4875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1855.033344][ T4875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1855.053417][ T4875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1855.071109][ T4875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1855.195722][   T14] pim6reg (unregistering): left allmulticast mode
[ 1855.749319][ T4875] Bluetooth: hci2: command tx timeout
[ 1856.013903][T22891] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1856.322620][T22891] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1856.938249][   T14] team0 (unregistering): Port device team_slave_1 removed
[ 1857.138848][   T14] team0 (unregistering): Port device team_slave_0 removed
[ 1857.194833][ T4875] Bluetooth: hci3: command tx timeout
[ 1857.604232][T22898] 9pnet_virtio: no channels available for device syz
[ 1857.714540][T22899] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1857.838809][ T4875] Bluetooth: hci2: command tx timeout
[ 1857.885688][T22900] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1858.959029][T22563] hsr_slave_0: entered promiscuous mode
[ 1858.994812][T22563] hsr_slave_1: entered promiscuous mode
[ 1859.034588][T22563] debugfs: 'hsr0' already exists in 'hsr'
[ 1859.061201][T22563] Cannot create hsr debugfs directory
[ 1859.280631][ T4875] Bluetooth: hci3: command tx timeout
[ 1859.899748][T22906] 9pnet_virtio: no channels available for device syz
[ 1859.924901][ T4875] Bluetooth: hci2: command tx timeout
[ 1860.252010][T22913] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1860.410448][T22906] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1861.350563][ T4875] Bluetooth: hci3: command tx timeout
[ 1861.390218][T22908] netlink: 'syz.1.5165': attribute type 4 has an invalid length.
[ 1861.429572][T22908] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5165'.
[ 1861.857679][T22917] netlink: 'syz.3.5166': attribute type 4 has an invalid length.
[ 1861.908361][T22917] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5166'.
[ 1861.991416][ T4875] Bluetooth: hci2: command tx timeout
[ 1862.513997][   T14] bridge_slave_1: left allmulticast mode
[ 1862.560679][   T14] bridge_slave_1: left promiscuous mode
[ 1862.592466][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1862.731942][   T14] bridge_slave_0: left allmulticast mode
[ 1862.759614][   T14] bridge_slave_0: left promiscuous mode
[ 1862.795396][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1863.201953][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1863.430275][ T4875] Bluetooth: hci3: command tx timeout
[ 1863.781260][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1863.986681][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1864.172334][   T14] bond0 (unregistering): Released all slaves
[ 1864.704396][   T14] hsr_slave_0: left promiscuous mode
[ 1864.765126][   T14] hsr_slave_1: left promiscuous mode
[ 1864.813446][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1864.889230][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1865.409296][   T14] team0 (unregistering): Port device team_slave_1 removed
[ 1865.471589][   T14] team0 (unregistering): Port device team_slave_0 removed
[ 1865.520365][T22966] 9pnet_virtio: no channels available for device syz
[ 1865.846314][T22967] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1865.997981][T22967] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1867.105649][ T5230] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1867.975999][   T14] bridge_slave_1: left allmulticast mode
[ 1867.983099][   T14] bridge_slave_1: left promiscuous mode
[ 1867.997349][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1868.016721][   T14] bridge_slave_0: left allmulticast mode
[ 1868.024067][   T14] bridge_slave_0: left promiscuous mode
[ 1868.031997][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1868.372493][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1868.449545][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1868.480743][   T14] bond0 (unregistering): Released all slaves
[ 1868.708405][   T14] hsr_slave_0: left promiscuous mode
[ 1868.738026][   T14] hsr_slave_1: left promiscuous mode
[ 1868.758402][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1868.771330][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1869.454232][T22996] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1869.821298][T22997] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1870.820316][   T14] team0 (unregistering): Port device team_slave_1 removed
[ 1870.877799][   T14] team0 (unregistering): Port device team_slave_0 removed
[ 1870.977042][   T29] audit: type=1804 audit(1781346475.633:16): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5183" name="/newroot/422/file0" dev="tmpfs" ino=2209 res=1 errno=0
[ 1872.820645][T23024] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1872.952701][T23026] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1875.345201][T23033] netlink: 'syz.2.5188': attribute type 4 has an invalid length.
[ 1875.603711][T23033] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5188'.
[ 1878.410844][T22873] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1878.445777][T22873] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1878.475090][T22873] bridge_slave_0: entered allmulticast mode
[ 1878.513523][T22873] bridge_slave_0: entered promiscuous mode
[ 1878.703917][   T29] audit: type=1804 audit(1781346483.363:17): pid=23059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5191" name="/newroot/461/file0" dev="tmpfs" ino=2384 res=1 errno=0
[ 1878.764206][T22873] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1878.793919][T22873] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1878.821355][T22873] bridge_slave_1: entered allmulticast mode
[ 1878.860957][T22873] bridge_slave_1: entered promiscuous mode
[ 1879.042819][T22885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1879.060698][T22885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1879.099396][T22885] bridge_slave_0: entered allmulticast mode
[ 1879.151358][T22885] bridge_slave_0: entered promiscuous mode
[ 1879.382392][T22885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1879.418392][T22885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1879.465163][T22885] bridge_slave_1: entered allmulticast mode
[ 1879.509345][T22885] bridge_slave_1: entered promiscuous mode
[ 1879.626459][T22873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1880.876791][T22873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1880.902839][T22885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1880.919099][ T5230] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1881.714726][T22885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1881.781974][T23080] 9pnet_virtio: no channels available for device syz
[ 1882.078366][T23083] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1882.434437][T23083] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1882.695985][T12399] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1883.308901][T12399] usb 3-1: Using ep0 maxpacket: 16
[ 1883.399607][T12399] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1883.418167][T12399] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1883.435645][T22873] team0: Port device team_slave_0 added
[ 1883.442311][T12399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1884.264723][T12399] usb 3-1: config 0 descriptor??
[ 1884.549476][T22873] team0: Port device team_slave_1 added
[ 1884.674998][T22885] team0: Port device team_slave_0 added
[ 1884.922188][T22885] team0: Port device team_slave_1 added
[ 1884.955012][T22873] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1884.959113][T14480] usb 3-1: USB disconnect, device number 16
[ 1884.982691][T22873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1885.144930][T22873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1885.596861][T22873] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1885.626250][T22873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1885.714067][T22873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1885.714171][T23097] 9pnet_virtio: no channels available for device syz
[ 1885.877111][T22885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1885.900665][T22885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1885.972889][T22885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1886.041054][T22885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1886.098032][T22885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1886.183574][T23096] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1886.240241][T23096] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1886.486115][T22885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1887.804584][T23109] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1888.118978][T23102] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1888.544440][T22873] hsr_slave_0: entered promiscuous mode
[ 1888.753478][T22873] hsr_slave_1: entered promiscuous mode
[ 1889.010719][T22873] debugfs: 'hsr0' already exists in 'hsr'
[ 1889.083552][T22873] Cannot create hsr debugfs directory
[ 1892.367589][T22885] hsr_slave_0: entered promiscuous mode
[ 1892.434428][T22885] hsr_slave_1: entered promiscuous mode
[ 1892.494516][T22885] debugfs: 'hsr0' already exists in 'hsr'
[ 1892.528819][T22885] Cannot create hsr debugfs directory
[ 1893.024432][T23117] netlink: 'syz.3.5202': attribute type 4 has an invalid length.
[ 1893.072149][T23117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5202'.
[ 1896.450542][   T29] audit: type=1804 audit(1781346501.103:18): pid=23141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5206" name="/newroot/466/file0" dev="tmpfs" ino=2411 res=1 errno=0
[ 1899.628876][T22873] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1899.722092][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1900.025788][T22873] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1900.110488][T23160] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1900.279098][T23162] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1901.032471][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1901.222686][T22873] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1901.362342][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1901.714400][ T5230] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1901.989097][T22873] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1902.077884][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1902.792654][T22885] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1902.873724][T22885] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1903.895569][T22885] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1903.926471][T22885] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1903.959193][T22885] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1904.007875][T22885] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1904.020176][T22885] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1904.062163][T22885] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1905.847506][T22873] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1906.271206][T22873] 8021q: adding VLAN 0 to HW filter on device team0
[ 1906.512737][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1906.520469][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1906.859466][T16094] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1906.866991][T16094] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1907.035323][T23189] 9pnet_virtio: no channels available for device syz
[ 1907.277426][T23188] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1907.426238][T23189] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1910.367876][T23195] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1910.764301][T23201] loop5: detected capacity change from 0 to 7
[ 1910.822546][T23201] Dev loop5: unable to read RDB block 7
[ 1910.881454][T23201]  loop5: unable to read partition table
[ 1910.967562][T23201] loop5: partition table beyond EOD, truncated
[ 1911.027604][T23201] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1911.565929][T22885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1911.972878][T22885] 8021q: adding VLAN 0 to HW filter on device team0
[ 1912.103366][T16125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1912.111033][T16125] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1912.282563][T21654] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1912.290216][T21654] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1912.596894][T22569] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1912.611793][T22569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1912.623136][T22569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1912.645796][T22569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1912.660753][T22569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1914.712230][T22569] Bluetooth: hci4: command tx timeout
[ 1915.168320][T23226] netlink: 'syz.3.5220': attribute type 4 has an invalid length.
[ 1915.384481][T23226] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5220'.
[ 1916.456139][T23245] 9pnet_virtio: no channels available for device syz
[ 1916.674624][ T5230] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1916.790227][T22569] Bluetooth: hci4: command tx timeout
[ 1916.813084][T23245] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1917.004826][T23254] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1917.733351][ T4875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1917.744792][ T4875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1917.758117][ T4875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1917.803962][ T4875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1917.830267][ T4875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1918.089527][T23249] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1918.218157][   T29] audit: type=1804 audit(1781346522.743:19): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5224" name="/newroot/377/file0" dev="tmpfs" ino=1957 res=1 errno=0
[ 1918.261938][T23252] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1918.868853][ T4875] Bluetooth: hci4: command tx timeout
[ 1919.918824][ T4875] Bluetooth: hci2: command tx timeout
[ 1920.949597][ T4875] Bluetooth: hci4: command tx timeout
[ 1921.164836][T23269] 9pnet_virtio: no channels available for device syz
[ 1921.542983][T23266] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1921.692703][T23266] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1921.989028][ T4875] Bluetooth: hci2: command tx timeout
[ 1924.068864][ T4875] Bluetooth: hci2: command tx timeout
[ 1924.850706][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1926.157138][ T4875] Bluetooth: hci2: command tx timeout
[ 1927.294012][   T12] bridge_slave_1: left allmulticast mode
[ 1927.433349][   T12] bridge_slave_1: left promiscuous mode
[ 1927.577220][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1928.320495][   T12] bridge_slave_0: left allmulticast mode
[ 1928.436829][   T12] bridge_slave_0: left promiscuous mode
[ 1928.527699][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1929.614847][T23300] 9pnet_virtio: no channels available for device syz
[ 1930.335131][T23300] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1930.377135][T23300] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1931.264010][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1931.355081][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1931.424393][   T12] bond0 (unregistering): Released all slaves
[ 1931.619602][   T29] audit: type=1804 audit(1781346536.273:20): pid=23313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5232" name="/newroot/476/file0" dev="tmpfs" ino=2465 res=1 errno=0
[ 1932.332092][   T29] audit: type=1804 audit(1781346536.973:21): pid=23321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5233" name="/newroot/439/file0" dev="tmpfs" ino=2304 res=1 errno=0
[ 1932.467111][   T12] hsr_slave_0: left promiscuous mode
[ 1932.514075][   T12] hsr_slave_1: left promiscuous mode
[ 1932.531779][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1932.579747][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1933.041189][T23325] netlink: 'syz.2.5234': attribute type 4 has an invalid length.
[ 1933.073259][T23325] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5234'.
[ 1933.305387][T23333] 9pnet_virtio: no channels available for device syz
[ 1933.703635][T23336] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1933.883471][T23336] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1934.062120][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1934.293293][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1934.810446][ T5230] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1936.047392][T23342] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1936.097202][T23347] tmpfs: Bad value for 'mpol'
[ 1937.742082][T23352] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1941.828540][T23361] 9pnet_virtio: no channels available for device syz
[ 1941.849130][T23363] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size.
[ 1941.952402][T23365] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1942.145654][T23368] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1943.697994][T23375] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1943.917826][T23375] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1945.176111][T23382] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1945.535122][T23382] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1949.054642][T23405] 9pnet_virtio: no channels available for device syz
[ 1949.356516][T23408] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1949.525722][T23408] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1950.326671][T23405] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1950.494760][T23403] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1954.486113][T23217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1954.494743][T23217] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1954.504491][T23217] bridge_slave_0: entered allmulticast mode
[ 1954.533564][T23217] bridge_slave_0: entered promiscuous mode
[ 1954.727396][   T12] bridge_slave_1: left allmulticast mode
[ 1954.734624][   T12] bridge_slave_1: left promiscuous mode
[ 1954.742714][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1954.810814][   T12] bridge_slave_0: left allmulticast mode
[ 1954.848776][   T12] bridge_slave_0: left promiscuous mode
[ 1954.863281][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1955.597749][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1955.619434][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1955.629786][T23422] 9pnet_virtio: no channels available for device syz
[ 1955.652389][   T12] bond0 (unregistering): Released all slaves
[ 1955.776862][T23217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1955.823297][T23217] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1955.894813][T23217] bridge_slave_1: entered allmulticast mode
[ 1955.959289][T23423] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1956.066206][T23217] bridge_slave_1: entered promiscuous mode
[ 1956.140055][T23423] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1956.959931][   T12] hsr_slave_0: left promiscuous mode
[ 1956.974396][   T12] hsr_slave_1: left promiscuous mode
[ 1956.983429][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1957.022766][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1957.286983][T23427] tmpfs: Bad value for 'mpol'
[ 1958.395812][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1958.424607][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1958.807183][T23217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1958.995192][T23217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1960.375932][T23217] team0: Port device team_slave_0 added
[ 1961.514814][T23217] team0: Port device team_slave_1 added
[ 1961.636672][T23432] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1963.701045][T23432] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1963.958801][T23256] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1963.990783][T23256] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1964.023246][T23256] bridge_slave_0: entered allmulticast mode
[ 1964.044736][T23256] bridge_slave_0: entered promiscuous mode
[ 1964.113967][T23217] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1964.121539][T23217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1964.162331][T23217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1964.185964][T23256] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1964.216669][T23256] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1964.244054][T23256] bridge_slave_1: entered allmulticast mode
[ 1964.275952][T23256] bridge_slave_1: entered promiscuous mode
[ 1964.315145][T23217] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1964.323596][T23217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1964.390564][T23217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1964.466258][T23432] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1964.786877][T23440] netlink: 'syz.1.5255': attribute type 4 has an invalid length.
[ 1964.819718][T23440] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5255'.
[ 1964.914968][T23432] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1965.017423][T23256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1965.092590][T23256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1965.591219][T23217] hsr_slave_0: entered promiscuous mode
[ 1965.625012][T23217] hsr_slave_1: entered promiscuous mode
[ 1965.652905][T23217] debugfs: 'hsr0' already exists in 'hsr'
[ 1965.681140][T23217] Cannot create hsr debugfs directory
[ 1965.945858][T23256] team0: Port device team_slave_0 added
[ 1966.114281][T23256] team0: Port device team_slave_1 added
[ 1966.784301][   T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.840404][T23256] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1966.855744][T22569] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1966.865506][T22569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1966.876742][T22569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1966.897129][T22569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1966.914689][T23256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1966.943442][T22569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1967.017298][T23256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1967.240663][T22603] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1967.276701][T23256] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1967.310729][T23256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1967.401897][T23256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1967.920503][T22603] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1968.697851][T16094] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1968.744206][ T5230] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1968.823450][T23467] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1969.029116][T22569] Bluetooth: hci3: command tx timeout
[ 1969.433721][T23475] tmpfs: Bad value for 'mpol'
[ 1969.517543][T23256] hsr_slave_0: entered promiscuous mode
[ 1969.852426][T23256] hsr_slave_1: entered promiscuous mode
[ 1969.974028][T23256] debugfs: 'hsr0' already exists in 'hsr'
[ 1970.030821][T23256] Cannot create hsr debugfs directory
[ 1970.252890][T23467] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1971.109038][T22569] Bluetooth: hci3: command tx timeout
[ 1973.209900][T22569] Bluetooth: hci3: command tx timeout
[ 1974.085218][ T4875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1974.094861][ T4875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1974.104514][ T4875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1974.120011][ T4875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1974.133722][ T4875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1974.555756][T23467] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1974.804612][T23467] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1975.269202][T22569] Bluetooth: hci3: command tx timeout
[ 1975.730539][ T1330] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1976.185643][ T1330] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1976.236573][T22569] Bluetooth: hci5: command tx timeout
[ 1976.676490][T22603] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1977.090591][ T4875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1977.112878][ T4875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1977.165218][ T4875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1977.192001][ T4875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1977.219624][ T4875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1977.303691][T21713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1978.534956][ T4875] Bluetooth: hci5: command tx timeout
[ 1979.255054][   T35] bridge_slave_1: left allmulticast mode
[ 1979.303132][   T35] bridge_slave_1: left promiscuous mode
[ 1979.345735][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1979.351226][ T4875] Bluetooth: hci6: command tx timeout
[ 1979.448624][   T35] bridge_slave_0: left allmulticast mode
[ 1979.480738][   T35] bridge_slave_0: left promiscuous mode
[ 1979.516957][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1980.629994][ T4875] Bluetooth: hci5: command tx timeout
[ 1981.311889][T23517] netlink: 'syz.1.5263': attribute type 4 has an invalid length.
[ 1981.361527][T23517] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5263'.
[ 1981.389644][   T35] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1981.428353][   T35] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1981.430199][ T4875] Bluetooth: hci6: command tx timeout
[ 1981.472538][   T35] .` (unregistering): Released all slaves
[ 1981.625157][   T35] tipc: Left network mode
[ 1982.009226][T23525] tmpfs: Bad value for 'mpol'
[ 1982.709387][ T4875] Bluetooth: hci5: command tx timeout
[ 1983.508772][ T4875] Bluetooth: hci6: command tx timeout
[ 1984.881705][T23532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'.
[ 1985.588905][ T4875] Bluetooth: hci6: command tx timeout
[ 1986.203369][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1987.370934][   T35] hsr_slave_0: left promiscuous mode
[ 1987.396518][   T35] hsr_slave_1: left promiscuous mode
[ 1987.407617][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1987.420030][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1987.572450][   T29] audit: type=1804 audit(1781346592.223:22): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5266" name="/newroot/454/file0" dev="tmpfs" ino=2384 res=1 errno=0
[ 1988.138836][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1988.175962][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1988.291825][T23550] 9pnet_virtio: no channels available for device syz
[ 1988.630466][T23551] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 1988.837763][T23551] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1990.153407][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5269'.
[ 1990.523778][   T35] IPVS: stop unused estimator thread 0...
[ 1990.972017][   T29] audit: type=1804 audit(1781346595.633:23): pid=23564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5270" name="/newroot/393/file0" dev="tmpfs" ino=2043 res=1 errno=0
[ 1991.446351][   T29] audit: type=1804 audit(1781346596.103:24): pid=23574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5271" name="/newroot/457/file0" dev="tmpfs" ino=2401 res=1 errno=0
[ 1991.824771][T23458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1991.837586][T23458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1991.852498][T23458] bridge_slave_0: entered allmulticast mode
[ 1991.899964][T23458] bridge_slave_0: entered promiscuous mode
[ 1992.204226][T14480] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1992.365098][T23458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1992.384926][T14480] usb 4-1: Using ep0 maxpacket: 8
[ 1992.415907][T23458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1992.432963][T23458] bridge_slave_1: entered allmulticast mode
[ 1992.444302][T14480] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1992.469239][T14480] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1992.484767][T23458] bridge_slave_1: entered promiscuous mode
[ 1992.490793][T14480] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1992.491029][T14480] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1992.519478][T14480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1992.578919][T14480] usbtmc 4-1:16.0: bulk endpoints not found
[ 1992.635268][   T29] audit: type=1804 audit(1781346597.293:25): pid=23587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5273" name="/newroot/458/file0" dev="tmpfs" ino=2407 res=1 errno=0
[ 1992.882493][   T35] bridge_slave_1: left allmulticast mode
[ 1992.892896][   T35] bridge_slave_1: left promiscuous mode
[ 1992.901696][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1992.929315][   T35] bridge_slave_0: left allmulticast mode
[ 1992.942422][   T35] bridge_slave_0: left promiscuous mode
[ 1992.962125][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1992.989961][   T35] bridge_slave_1: left allmulticast mode
[ 1993.007110][   T35] bridge_slave_1: left promiscuous mode
[ 1993.034983][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1993.071011][   T35] bridge_slave_0: left allmulticast mode
[ 1993.076989][   T35] bridge_slave_0: left promiscuous mode
[ 1993.096708][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1993.672980][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1993.762203][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1993.806621][   T35] bond0 (unregistering): Released all slaves
[ 1994.035310][   T29] audit: type=1804 audit(1781346598.693:26): pid=23599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5275" name="/newroot/460/file0" dev="tmpfs" ino=2419 res=1 errno=0
[ 1994.815252][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1994.846334][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1994.874571][   T35] bond0 (unregistering): Released all slaves
[ 1994.936261][T23458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1995.003348][ T5230] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1995.226550][T14480] usb 4-1: USB disconnect, device number 12
[ 1995.317366][T23458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1995.690114][   T35] hsr_slave_0: left promiscuous mode
[ 1995.702013][T23606] tmpfs: Bad value for 'mpol'
[ 1995.812125][   T35] hsr_slave_1: left promiscuous mode
[ 1995.946841][T23609] tmpfs: Bad value for 'mpol'
[ 1996.870475][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1998.293420][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2000.758924][   T35] hsr_slave_0: left promiscuous mode
[ 2000.922383][   T35] hsr_slave_1: left promiscuous mode
[ 2000.932957][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2000.947528][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2001.497740][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 2001.554646][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 2002.114230][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 2002.150915][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 2002.673493][T23458] team0: Port device team_slave_0 added
[ 2002.782275][T23481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2002.829813][T23481] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2002.845203][T23481] bridge_slave_0: entered allmulticast mode
[ 2002.891661][T23481] bridge_slave_0: entered promiscuous mode
[ 2002.982351][T23458] team0: Port device team_slave_1 added
[ 2003.103129][T23481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2003.132794][T23481] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2003.175696][T23481] bridge_slave_1: entered allmulticast mode
[ 2003.219391][T23481] bridge_slave_1: entered promiscuous mode
[ 2003.309351][T23616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5279'.
[ 2003.535929][T23458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2003.555930][T23458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2003.638800][T23458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2003.775903][T23458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2003.797440][T23458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2003.857489][T23458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2004.014407][T23481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2004.149981][T23481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2008.033235][T23633] loop9: detected capacity change from 0 to 524287871
[ 2008.387691][T23633] Dev loop9: unable to read RDB block 8
[ 2008.421312][T23481] team0: Port device team_slave_0 added
[ 2008.451760][T23633]  loop9: unable to read partition table
[ 2008.513041][T23633] loop_reread_partitions: partition scan of loop9 (ážXHuù£¨ÃÒJíˆý[¼d‚ÒwÍ|i4F‡Â-—ºä½ÚÚ£rwǘ3›êåùU™ÈžŒžJ½„?"e) failed (rc=-5)
[ 2008.556135][T23458] hsr_slave_0: entered promiscuous mode
[ 2008.613659][T23458] hsr_slave_1: entered promiscuous mode
[ 2008.681891][T23458] debugfs: 'hsr0' already exists in 'hsr'
[ 2008.703036][T23458] Cannot create hsr debugfs directory
[ 2008.785344][T23481] team0: Port device team_slave_1 added
[ 2012.606531][T23644] 9pnet_virtio: no channels available for device syz
[ 2013.794603][T23645] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2014.053754][T23481] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2014.183660][T23481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2014.480950][T23481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2015.205400][T23481] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2015.223780][T23481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2015.272062][T23481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2015.592406][T23500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2015.624322][T23500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2015.645182][T23500] bridge_slave_0: entered allmulticast mode
[ 2015.700173][T23500] bridge_slave_0: entered promiscuous mode
[ 2015.938884][T23655] tmpfs: Bad value for 'mpol'
[ 2019.118968][T23500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2019.126509][T23500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2019.137811][T23500] bridge_slave_1: entered allmulticast mode
[ 2019.146732][T23500] bridge_slave_1: entered promiscuous mode
[ 2019.244874][T23663] 9pnet_virtio: no channels available for device syz
[ 2019.268277][T23500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2019.602908][T23664] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2019.791246][T23664] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2020.655170][T23500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2020.796614][T23481] hsr_slave_0: entered promiscuous mode
[ 2020.807822][T23481] hsr_slave_1: entered promiscuous mode
[ 2020.834581][T23481] debugfs: 'hsr0' already exists in 'hsr'
[ 2020.848840][T23481] Cannot create hsr debugfs directory
[ 2020.875083][ T5230] 8021q: adding VLAN 0 to HW filter on device eth10
[ 2021.072167][T23500] team0: Port device team_slave_0 added
[ 2021.322846][T23500] team0: Port device team_slave_1 added
[ 2021.707876][T23669] tmpfs: Bad value for 'mpol'
[ 2025.949874][T23500] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2025.966207][T23500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2026.062972][T23500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2026.491137][T23500] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2026.515787][T23500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2026.604485][T23500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2027.637968][T23500] hsr_slave_0: entered promiscuous mode
[ 2027.681300][T23500] hsr_slave_1: entered promiscuous mode
[ 2027.764897][T23500] debugfs: 'hsr0' already exists in 'hsr'
[ 2027.791323][T23500] Cannot create hsr debugfs directory
[ 2027.800009][T22569] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2027.809769][T22569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2027.821735][T22569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2027.852972][T22569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2027.875566][T22569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2028.419351][T23690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5292'.
[ 2028.864426][T23697] 9pnet_virtio: no channels available for device syz
[ 2029.107144][T23695] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2029.251234][T23695] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2030.122034][T22569] Bluetooth: hci2: command tx timeout
[ 2032.179236][T22569] Bluetooth: hci2: command tx timeout
[ 2034.229036][T22569] Bluetooth: hci2: command tx timeout
[ 2034.556117][T21654] bridge_slave_1: left allmulticast mode
[ 2034.914049][T21654] bridge_slave_1: left promiscuous mode
[ 2035.045292][T21654] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2036.319119][T22569] Bluetooth: hci2: command tx timeout
[ 2039.727997][T21654] bridge_slave_0: left allmulticast mode
[ 2039.734310][T21654] bridge_slave_0: left promiscuous mode
[ 2039.746012][T21654] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2040.523140][T21654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2040.994464][T21654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2041.394960][T21654] bond0 (unregistering): Released all slaves
[ 2041.676539][ T4875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2041.691119][ T4875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2041.707585][ T4875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2041.754334][T20309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2041.775080][T20309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2041.824315][ T5230] 8021q: adding VLAN 0 to HW filter on device eth11
[ 2041.956650][T23735] 9pnet_virtio: no channels available for device syz
[ 2042.187657][T21654] hsr_slave_0: left promiscuous mode
[ 2042.265889][T21654] hsr_slave_1: left promiscuous mode
[ 2042.338643][T21654] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2042.397158][T23742] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2042.938188][T21654] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2043.083011][T23742] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2043.979292][T20309] Bluetooth: hci3: command tx timeout
[ 2044.096355][T22569] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2044.106346][T22569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2044.119465][T22569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2044.260711][T22569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2044.275678][T22569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2044.682236][   T29] audit: type=1804 audit(1781346649.333:27): pid=23744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5300" name="/newroot/409/file0" dev="tmpfs" ino=2127 res=1 errno=0
[ 2045.617840][T21654] team0 (unregistering): Port device team_slave_1 removed
[ 2045.750767][T21654] team0 (unregistering): Port device team_slave_0 removed
[ 2045.989234][T22569] Bluetooth: hci3: command tx timeout
[ 2046.309503][T22569] Bluetooth: hci4: command tx timeout
[ 2046.568814][T23761] tmpfs: Bad value for 'mpol'
[ 2047.767313][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2047.930135][   T29] audit: type=1804 audit(1781346652.353:28): pid=23759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5302" name="/newroot/410/file0" dev="tmpfs" ino=2133 res=1 errno=0
[ 2048.454941][T22569] Bluetooth: hci3: command tx timeout
[ 2048.461789][T22569] Bluetooth: hci4: command tx timeout
[ 2051.356040][T20309] Bluetooth: hci4: command tx timeout
[ 2051.365618][T20309] Bluetooth: hci3: command tx timeout
[ 2053.428831][T22569] Bluetooth: hci4: command tx timeout
[ 2053.487096][T23783] 9pnet_virtio: no channels available for device syz
[ 2053.629213][T23785] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2053.794075][T23786] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2056.291609][T23791] 9pnet_virtio: no channels available for device syz
[ 2056.519324][T23795] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2056.670751][T23797] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2058.188961][   T12] bridge_slave_1: left allmulticast mode
[ 2058.194959][   T12] bridge_slave_1: left promiscuous mode
[ 2058.201788][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2058.268027][   T12] bridge_slave_0: left allmulticast mode
[ 2058.286235][   T12] bridge_slave_0: left promiscuous mode
[ 2058.294567][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2058.321504][T23803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5307'.
[ 2058.373024][   T12] bridge_slave_1: left allmulticast mode
[ 2058.420551][   T12] bridge_slave_1: left promiscuous mode
[ 2058.429666][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2058.443430][   T12] bridge_slave_0: left allmulticast mode
[ 2058.453173][   T12] bridge_slave_0: left promiscuous mode
[ 2058.461298][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2058.706782][T23808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5308'.
[ 2058.887350][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2058.914621][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2058.943327][   T12] bond0 (unregistering): Released all slaves
[ 2059.215791][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2059.235393][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2059.264660][   T12] bond0 (unregistering): Released all slaves
[ 2059.806455][   T12] hsr_slave_0: left promiscuous mode
[ 2059.820532][   T12] hsr_slave_1: left promiscuous mode
[ 2059.837462][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2059.849828][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2059.937914][   T12] hsr_slave_0: left promiscuous mode
[ 2059.952980][   T12] hsr_slave_1: left promiscuous mode
[ 2059.971622][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2060.011559][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2061.293063][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 2061.326413][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 2062.796787][   T29] audit: type=1804 audit(1781346667.453:29): pid=23835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5312" name="/newroot/476/file0" dev="tmpfs" ino=2506 res=1 errno=0
[ 2064.380651][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 2064.734166][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 2066.756772][ T5230] 8021q: adding VLAN 0 to HW filter on device eth12
[ 2068.103189][T23850] 9pnet_virtio: no channels available for device syz
[ 2068.354856][T23852] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2068.535943][T23854] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2070.723037][T23684] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2070.767039][T23684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2070.793499][T23684] bridge_slave_0: entered allmulticast mode
[ 2070.825573][T23684] bridge_slave_0: entered promiscuous mode
[ 2070.940654][T23865] 9pnet_virtio: no channels available for device syz
[ 2071.067232][T23684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2071.119172][T23684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2071.206831][T23862] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2071.364959][T23865] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2072.617858][T23684] bridge_slave_1: entered allmulticast mode
[ 2072.637083][   T29] audit: type=1804 audit(1781346677.223:30): pid=23867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5319" name="/newroot/419/file0" dev="tmpfs" ino=2182 res=1 errno=0
[ 2073.864309][T23684] bridge_slave_1: entered promiscuous mode
[ 2074.490594][T23684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2074.764137][T23684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2075.002037][   T29] audit: type=1804 audit(1781346679.663:31): pid=23884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5321" name="/newroot/480/file0" dev="tmpfs" ino=2530 res=1 errno=0
[ 2075.340664][T23684] team0: Port device team_slave_0 added
[ 2075.530667][T23684] team0: Port device team_slave_1 added
[ 2075.711053][T23897] 9pnet_virtio: no channels available for device syz
[ 2075.887491][T23898] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2075.988171][T23899] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2078.105363][T23907] 9pnet_virtio: no channels available for device syz
[ 2080.509659][T23903] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2080.640815][T23904] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2081.386150][T23684] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2083.399383][T23684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2083.459286][T23684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2083.634196][ T5230] 8021q: adding VLAN 0 to HW filter on device eth13
[ 2083.780565][T23684] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2083.787815][T23684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2083.814741][T23684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2083.885686][T23911] 9pnet_virtio: no channels available for device syz
[ 2083.992301][T23912] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[ 2084.236160][T23912] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2087.909776][T23928] tmpfs: Bad value for 'mpol'
[ 2089.093568][T23748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2089.156628][T23748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2089.264014][T23748] bridge_slave_0: entered allmulticast mode
[ 2089.458520][T23748] bridge_slave_0: entered promiscuous mode
[ 2093.043892][T20309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2093.062723][T20309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2093.073837][T20309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2093.091068][T20309] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2093.103131][T20309] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2093.290963][T23748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2093.298897][T23748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2093.307098][T23748] bridge_slave_1: entered allmulticast mode
[ 2093.353403][T23748] bridge_slave_1: entered promiscuous mode
[ 2094.501669][T23748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2094.656473][T23748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2095.188830][T20309] Bluetooth: hci5: command tx timeout
[ 2095.483701][T23748] team0: Port device team_slave_0 added
[ 2095.725563][T23748] team0: Port device team_slave_1 added
[ 2095.772540][T23732] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2095.807562][T23732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2095.837663][T14480] IPVS: starting estimator thread 0...
[ 2095.845834][T23732] bridge_slave_0: entered allmulticast mode
[ 2095.854539][T23959] IPVS: nq: FWM 3 0x00000003 - no destination available
[ 2095.901048][T23732] bridge_slave_0: entered promiscuous mode
[ 2095.971598][T23732] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2095.979718][T23960] IPVS: using max 192 ests per chain, 9600 per kthread
[ 2096.013412][T23732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2096.046357][T23732] bridge_slave_1: entered allmulticast mode
[ 2096.085050][T23732] bridge_slave_1: entered promiscuous mode
[ 2096.760715][T23748] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2096.778854][T23748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2096.873322][T23748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2097.000926][T23732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2097.066640][T23748] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2097.092049][T23748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2097.151693][T23748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2097.273412][T20309] Bluetooth: hci5: command tx timeout
[ 2097.377553][T23972] tmpfs: Bad value for 'mpol'
[ 2097.480768][T23732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2099.406041][T20309] Bluetooth: hci5: command tx timeout
[ 2101.610019][T22569] Bluetooth: hci5: command tx timeout
[ 2102.232917][   T35] bridge_slave_1: left allmulticast mode
[ 2102.243663][   T35] bridge_slave_1: left promiscuous mode
[ 2102.262303][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2102.298206][   T35] bridge_slave_0: left allmulticast mode
[ 2102.306313][   T35] bridge_slave_0: left promiscuous mode
[ 2102.318734][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2102.682419][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2102.718190][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2102.753168][   T35] bond0 (unregistering): Released all slaves
[ 2102.975442][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2103.005194][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2103.452631][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 2103.630758][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 2103.997748][T20309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2104.007902][T20309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2104.027287][T20309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2104.053389][T20309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2104.071053][T20309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2105.733023][T20309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2105.745653][T20309] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2105.760847][T20309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2105.784441][T20309] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2105.810758][T20309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2106.148722][T22569] Bluetooth: hci2: command tx timeout
[ 2106.834272][ T9799] bridge_slave_1: left allmulticast mode
[ 2106.857439][ T9799] bridge_slave_1: left promiscuous mode
[ 2106.889840][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2106.939031][ T9799] bridge_slave_0: left allmulticast mode
[ 2106.991019][ T9799] bridge_slave_0: left promiscuous mode
[ 2106.997932][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2107.340765][ T9799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2107.373900][ T9799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2107.395510][ T9799] bond0 (unregistering): Released all slaves
[ 2107.424616][ T5230] 8021q: adding VLAN 0 to HW filter on device eth14
[ 2107.910126][T22569] Bluetooth: hci6: command tx timeout
[ 2108.229222][T22569] Bluetooth: hci2: command tx timeout
[ 2108.501237][T23937] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2108.513260][T23937] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2108.536360][T23937] bridge_slave_0: entered allmulticast mode
[ 2108.546746][T23937] bridge_slave_0: entered promiscuous mode
[ 2108.565168][T23937] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2108.574702][T23937] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2108.582787][T23937] bridge_slave_1: entered allmulticast mode
[ 2108.593035][T23937] bridge_slave_1: entered promiscuous mode
[ 2108.726940][T23937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2108.744389][T22603] bridge_slave_1: left allmulticast mode
[ 2108.752816][T22603] bridge_slave_1: left promiscuous mode
[ 2108.763539][T22603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2108.814698][T22603] bridge_slave_0: left allmulticast mode
[ 2108.822273][T22603] bridge_slave_0: left promiscuous mode
[ 2108.838935][T22603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2108.963995][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2109.087476][T22603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2109.108041][T22603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2109.143508][T22603] bond0 (unregistering): Released all slaves
[ 2109.173541][T23937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2109.367892][T22603] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2109.384000][T22603] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2109.535638][T22603] team0 (unregistering): Port device team_slave_1 removed
[ 2109.585879][T22603] team0 (unregistering): Port device team_slave_0 removed
[ 2109.988786][T22569] Bluetooth: hci6: command tx timeout
[ 2110.129064][T23937] team0: Port device team_slave_0 added
[ 2110.235767][T23937] team0: Port device team_slave_1 added
[ 2110.311389][T22569] Bluetooth: hci2: command tx timeout
[ 2110.486861][T23937] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2110.494314][T23937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2110.523004][T23937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2110.550921][ T5230] 8021q: adding VLAN 0 to HW filter on device eth15
[ 2110.609680][T23937] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2110.616955][T23937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2110.645524][T23937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2110.896832][T23937] hsr_slave_0: entered promiscuous mode
[ 2110.908291][T23937] hsr_slave_1: entered promiscuous mode
[ 2110.919149][T23937] debugfs: 'hsr0' already exists in 'hsr'
[ 2110.925506][T23937] Cannot create hsr debugfs directory
[ 2111.671852][T23985] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2111.684283][T23985] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2111.693850][T23985] bridge_slave_0: entered allmulticast mode
[ 2111.709841][T23985] bridge_slave_0: entered promiscuous mode
[ 2111.769019][T23985] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2111.781692][T23985] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2111.791622][T23985] bridge_slave_1: entered allmulticast mode
[ 2111.808076][T23985] bridge_slave_1: entered promiscuous mode
[ 2112.069721][T22569] Bluetooth: hci6: command tx timeout
[ 2112.101343][T23985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2112.137627][T23985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2112.374401][T23985] team0: Port device team_slave_0 added
[ 2112.389178][T22569] Bluetooth: hci2: command tx timeout
[ 2112.447932][T23985] team0: Port device team_slave_1 added
[ 2112.521990][T23937] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2112.554963][T23937] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2112.621500][T23937] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2112.675913][T23937] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2112.695266][T23985] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2112.709494][T23985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2112.778813][T23985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2112.817029][T23937] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2112.844519][T23937] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2112.857198][T23985] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2112.867216][T23985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2112.895025][T23985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2112.992840][T23937] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2113.018885][T23937] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2113.148871][T24001] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2113.157325][T24001] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2113.166897][T24001] bridge_slave_0: entered allmulticast mode
[ 2113.185038][T24001] bridge_slave_0: entered promiscuous mode
[ 2113.281137][T24001] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2113.303845][T24001] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2113.313848][T24001] bridge_slave_1: entered allmulticast mode
[ 2113.325391][T24001] bridge_slave_1: entered promiscuous mode
[ 2113.367772][T23985] hsr_slave_0: entered promiscuous mode
[ 2113.380746][T23985] hsr_slave_1: entered promiscuous mode
[ 2113.391403][T23985] debugfs: 'hsr0' already exists in 'hsr'
[ 2113.397348][T23985] Cannot create hsr debugfs directory
[ 2113.557174][T24001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2113.646369][T24001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2113.834446][T24001] team0: Port device team_slave_0 added
[ 2113.901459][T24001] team0: Port device team_slave_1 added
[ 2114.011303][ T5230] 8021q: adding VLAN 0 to HW filter on device eth16
[ 2114.150985][T22569] Bluetooth: hci6: command tx timeout
[ 2114.165922][T24001] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2114.181140][T24001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2114.214294][T24001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2114.346820][T24001] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2114.354344][T24001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2114.391623][T24001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2114.831368][T24001] hsr_slave_0: entered promiscuous mode
[ 2114.845530][T24001] hsr_slave_1: entered promiscuous mode
[ 2114.855256][T24001] debugfs: 'hsr0' already exists in 'hsr'
[ 2114.865619][T24001] Cannot create hsr debugfs directory
[ 2115.686158][T23937] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2115.698921][T23985] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2115.727322][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2115.774203][T23985] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2115.806731][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2115.919151][T23985] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2115.956852][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2116.024680][T23985] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2116.054544][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2116.186867][T23937] 8021q: adding VLAN 0 to HW filter on device team0
[ 2116.369797][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2116.377344][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2116.526624][T22603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2116.534317][T22603] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2116.946703][T24001] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2116.981297][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2117.046095][T24001] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2117.083637][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2117.095219][T24001] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2117.157751][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2117.186768][T24001] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2117.230780][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2117.939034][T23985] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2118.276078][T23985] 8021q: adding VLAN 0 to HW filter on device team0
[ 2118.361535][T16094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2118.369169][T16094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2118.545131][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2118.552911][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2118.931098][T24001] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2119.312898][T24001] 8021q: adding VLAN 0 to HW filter on device team0
[ 2119.443482][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2119.451311][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2119.675081][T22603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2119.682807][T22603] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2120.594794][T23937] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2122.578162][T23985] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2122.824634][T23937] veth0_vlan: entered promiscuous mode
[ 2122.932993][T23937] veth1_vlan: entered promiscuous mode
[ 2123.234567][T23937] veth0_macvtap: entered promiscuous mode
[ 2123.313601][T23937] veth1_macvtap: entered promiscuous mode
[ 2123.552111][T23937] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2123.603956][T24001] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2123.753936][T23937] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2123.843988][T16094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2123.873077][   T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2123.911419][   T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2123.944018][   T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2124.865775][T23985] veth0_vlan: entered promiscuous mode
[ 2124.985621][T23985] veth1_vlan: entered promiscuous mode
[ 2125.441454][T23985] veth0_macvtap: entered promiscuous mode
[ 2125.572631][T23985] veth1_macvtap: entered promiscuous mode
[ 2125.887586][T23985] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2125.900051][T24001] veth0_vlan: entered promiscuous mode
[ 2125.979093][T23985] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2126.115285][T16094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.133410][T16094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.179196][T16094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.211620][T16094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.248661][T24001] veth1_vlan: entered promiscuous mode
[ 2126.775088][T24001] veth0_macvtap: entered promiscuous mode
[ 2126.854207][T24001] veth1_macvtap: entered promiscuous mode
[ 2127.011092][T24001] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2127.155704][T24001] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2127.324907][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.362513][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.417045][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.442205][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2129.131510][T22603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2129.157503][T22603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2129.395710][T16094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2129.405953][T16094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2131.800603][T22603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2131.837648][T22603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2132.006957][T16094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2132.015418][T16094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2133.052521][T22603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2133.089967][T22603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2133.239629][T22603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2133.263032][T22603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2135.399560][T24285] =====================================================
[ 2135.407725][T24285] BUG: KMSAN: kernel-infoleak in irqentry_exit+0x48b/0xa00
[ 2135.415111][T24285]  irqentry_exit+0x48b/0xa00
[ 2135.419877][T24285]  exc_page_fault+0x7e/0xb0
[ 2135.424684][T24285]  asm_exc_page_fault+0x2b/0x30
[ 2135.429991][T24285] 
[ 2135.432433][T24285] Local variable end_time.i.i created at:
[ 2135.438281][T24285]  __x64_sys_poll+0x87/0x540
[ 2135.443194][T24285]  x64_sys_call+0x3130/0x3ea0
[ 2135.448102][T24285] 
[ 2135.450521][T24285] Bytes 0-3 of 4 are uninitialized
[ 2135.455760][T24285] Memory access of size 4 starts at ffff88811b563e88
[ 2135.462575][T24285] Data copied to user address 00007f3694b04ac0
[ 2135.468859][T24285] 
[ 2135.471349][T24285] CPU: 0 UID: 0 PID: 24285 Comm: dhcpcd-run-hook Tainted: G             L      syzkaller #0 PREEMPT(lazy) 
[ 2135.482948][T24285] Tainted: [L]=SOFTLOCKUP
[ 2135.487383][T24285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2135.497546][T24285] =====================================================
[ 2135.504562][T24285] Disabling lock debugging due to kernel taint
[ 2135.510808][T24285] Kernel panic - not syncing: kmsan.panic set ...
[ 2135.517324][T24285] CPU: 0 UID: 0 PID: 24285 Comm: dhcpcd-run-hook Tainted: G    B        L      syzkaller #0 PREEMPT(lazy) 
[ 2135.528868][T24285] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[ 2135.534535][T24285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 2135.544696][T24285] Call Trace:
[ 2135.548047][T24285]  <TASK>
[ 2135.551064][T24285]  __dump_stack+0x26/0x30
[ 2135.555614][T24285]  dump_stack_lvl+0x50/0x1c0
[ 2135.560405][T24285]  ? dump_stack+0x12/0x25
[ 2135.564949][T24285]  dump_stack+0x1e/0x25
[ 2135.569299][T24285]  vpanic+0x7b4/0x1430
[ 2135.573631][T24285]  panic+0x15d/0x160
[ 2135.577805][T24285]  kmsan_report+0x31a/0x320
[ 2135.582553][T24285]  ? kmsan_get_metadata+0xf1/0x160
[ 2135.587895][T24285]  ? kmsan_internal_check_memory+0x1e8/0x240
[ 2135.594115][T24285]  ? kmsan_copy_to_user+0xef/0x190
[ 2135.599486][T24285]  ? irqentry_exit+0x48b/0xa00
[ 2135.604492][T24285]  ? exc_page_fault+0x7e/0xb0
[ 2135.609409][T24285]  ? asm_exc_page_fault+0x2b/0x30
[ 2135.614637][T24285]  ? handle_mm_fault+0x2eb0/0x6ee0
[ 2135.620109][T24285]  ? kmsan_get_metadata+0xf1/0x160
[ 2135.625390][T24285]  ? kmsan_get_metadata+0xf1/0x160
[ 2135.630648][T24285]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 2135.637124][T24285]  kmsan_internal_check_memory+0x1e8/0x240
[ 2135.643099][T24285]  kmsan_copy_to_user+0xef/0x190
[ 2135.648195][T24285]  irqentry_exit+0x48b/0xa00
[ 2135.653056][T24285]  exc_page_fault+0x7e/0xb0
[ 2135.657817][T24285]  asm_exc_page_fault+0x2b/0x30
[ 2135.662829][T24285] RIP: 0033:0x7f3694dfa66d
[ 2135.667414][T24285] Code: 05 18 3e 07 00 48 8b 00 ff 40 40 6a 01 5e 48 8b 7c 24 08 e8 be 58 ff ff 48 93 c6 43 10 02 4c 89 7b 08 e8 95 5c ff ff 8a 43 10 <c6> 43 11 00 88 45 00 48 8b 43 08 48 89 45 08 48 8b 84 24 e8 00 00
[ 2135.687217][T24285] RSP: 002b:00007fffda32f7b0 EFLAGS: 00010246
[ 2135.693430][T24285] RAX: 0000000000000002 RBX: 000055d1e1bf6f00 RCX: 0000000000000000
[ 2135.701567][T24285] RDX: 00007fffda333d02 RSI: 000055d1e1bf80d0 RDI: 000055d1e1bf6f12
[ 2135.709711][T24285] RBP: 00007fffda32f968 R08: 0000000000000001 R09: 0000000000000000
[ 2135.717845][T24285] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000010
[ 2135.725971][T24285] R13: 0000000000000000 R14: 0000000000000001 R15: 00007f3694e6b240
[ 2135.734146][T24285]  </TASK>
[ 2135.737954][T24285] Kernel Offset: disabled
[ 2135.742364][T24285] Rebooting in 86400 seconds..