last executing test programs:

14m30.66451616s ago: executing program 2 (id=3):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@errors_remount}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1a2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

14m30.071285359s ago: executing program 2 (id=7):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x8898, @mcast1, 0xb}, 0x1c)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x2, 0x401, 0x0, 0xfffffffc})

14m30.03131761s ago: executing program 1 (id=8):
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e28, 0x0, 0x4, 0xf000, 0x2, 0x0, 0x0, 0x11}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

14m29.862073486s ago: executing program 1 (id=10):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0)

14m29.553595055s ago: executing program 2 (id=11):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x15016910, 0x0, 0x4, r2})

14m29.281157324s ago: executing program 32 (id=11):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x15016910, 0x0, 0x4, r2})

14m27.761099542s ago: executing program 1 (id=18):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x12, "ff000000000000000000000000000200"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050)
syz_usb_connect$uac2(0xb5a74b4fc62adff7, 0xa3, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000300420040000102030109029100030100007f080b0101010a20020904000000010120000924010700083100b20724080604030008240a0c0400510008240a08040708020b24040604ca874637c3b306240b0701e709040100000102200009040101010102200009050109000206998008250102181c00000904020000010220000904020101010220000905820900020e0452082501040c43ce03"], 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000002c0))
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x3, 0xfffd, 0x1, 0xde, 0x7fff, 0x400})
socket$netlink(0x10, 0x3, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000080)="550bbb4fbd01c4cff357", &(0x7f00000000c0)=""/128}, 0x20)

14m26.992693136s ago: executing program 1 (id=20):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@errors_remount}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1a2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

14m26.477489742s ago: executing program 1 (id=21):
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0)

14m25.845468782s ago: executing program 1 (id=22):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

14m25.129251354s ago: executing program 33 (id=22):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4m27.09702591s ago: executing program 4 (id=1627):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
signalfd4(r0, &(0x7f0000000200)={[0x100000001]}, 0x8, 0x800)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"a2e3ad099b0d09451b5e090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0ac6e70a9b334d959b669a240d5b0af3988f7ef31952010affe8d178708c523c921b1b5b07070d073e0936cd3b78130daa61d8e81a0006005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f9c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbc42be6bfb2f17959d1faf6e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520fb29d095083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d858647a6526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710000000000000039f00bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f80800000000000000bdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f19d684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4a1b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3493e03f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717a284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb189fb135c695a2de3a340047228032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358c30ab7a1fa89af9c251fe5294b3d1802d0676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c022babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035953faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1d97ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bff6235734352c19966eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec215f0865247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b48d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72a0f4b5482b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce81204c915c8949de992587c2cb5fe36d7d3e5db21b094b8b7794cb5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f49010c0000002c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006)

4m25.793401532s ago: executing program 4 (id=1628):
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000)

4m25.491993581s ago: executing program 4 (id=1629):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f0000002ac0)=""/4108, 0x100c}, {&(0x7f0000000840)=""/243, 0xf3}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0)

4m12.709835747s ago: executing program 4 (id=1649):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x20f, &(0x7f0000000840)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x86022, 0x0)
rename(0x0, 0x0)

4m12.29252878s ago: executing program 4 (id=1652):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)

4m11.821492145s ago: executing program 4 (id=1656):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0xd19c, 0x3, 0x1, 'queue1\x00', 0xd})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005})

4m7.995610946s ago: executing program 34 (id=1656):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0xd19c, 0x3, 0x1, 'queue1\x00', 0xd})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005})

39.255164865s ago: executing program 3 (id=2110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x1)
rmdir(&(0x7f0000000100)='./control\x00')
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x625, 0x70bd2b, 0x25d7dffd, {0x0, 0x0, 0x0, 0x0, 0xb430f12d3e07b589, 0x15002}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c9}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfdfffffb, 0x2004, 0x3, 0x0, 0xf250, 0x82, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffc0000, 0x4, 0x6, 0x1001, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0xc89, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x6, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2007, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x0, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x8, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x400, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]})
ioctl$UI_DEV_DESTROY(r2, 0x5502)

35.761587786s ago: executing program 3 (id=2112):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r7, &(0x7f0000000340)='6:', 0x2, 0x20048800, 0x0, 0x0)
splice(r7, 0x0, r6, 0x0, 0x8a, 0xa)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x9, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xadd}], 0x1, 0x40002000, 0x0)

32.49088342s ago: executing program 3 (id=2115):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x82, "00000057d269f800"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x81, 0x0, 0x0, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r1 = syz_open_pts(r0, 0x0)
read(r1, &(0x7f0000001a40)=""/4096, 0x1000)

23.435418257s ago: executing program 3 (id=2125):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)

22.453891078s ago: executing program 3 (id=2127):
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

19.618580808s ago: executing program 3 (id=2132):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd84, &(0x7f00000019c0)=ANY=[], 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfdfffffb, 0x2004, 0x3, 0x0, 0xf250, 0x82, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x201ff, 0x3, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffc0000, 0x4, 0x6, 0x1001, 0x5, 0x4000003d, 0x8, 0xa, 0x6], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0xc89, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x400, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x4, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x6, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x0, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2007, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x0, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x8, 0x0, 0x5, 0xffffff14, 0x4, 0xe47, 0x4, 0x1000003, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x400, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$rtc(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0xe000000, 0x0)
read$watch_queue(r5, &(0x7f0000000540)=""/222, 0xe80)

18.651020989s ago: executing program 35 (id=2132):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd84, &(0x7f00000019c0)=ANY=[], 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfdfffffb, 0x2004, 0x3, 0x0, 0xf250, 0x82, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x201ff, 0x3, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffc0000, 0x4, 0x6, 0x1001, 0x5, 0x4000003d, 0x8, 0xa, 0x6], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0xc89, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x400, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x4, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x6, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x0, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2007, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x0, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x8, 0x0, 0x5, 0xffffff14, 0x4, 0xe47, 0x4, 0x1000003, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x400, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$rtc(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0xe000000, 0x0)
read$watch_queue(r5, &(0x7f0000000540)=""/222, 0xe80)

8.657107186s ago: executing program 0 (id=2156):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000f00)="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", 0x6b6, 0x4c840, 0x0, 0x0)

8.656953786s ago: executing program 6 (id=2157):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x1)

8.548619759s ago: executing program 5 (id=2158):
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9", 0x2e}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d529148", 0x3d}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.358778655s ago: executing program 6 (id=2159):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x7e)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, 0x0, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x3, 0x0, [{0x0, 0x73, &(0x7f0000000880)=""/115}, {0xc000, 0xa0, &(0x7f00000007c0)=""/160}, {0xdddc0000, 0xd5, &(0x7f0000000a00)=""/213}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50)

8.061121735s ago: executing program 6 (id=2160):
r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12)

7.57374699s ago: executing program 0 (id=2161):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fanotify_init(0xf00, 0x1000)
openat(0xffffffffffffff9c, 0x0, 0x842, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x800, 0xfff)

7.342364557s ago: executing program 6 (id=2162):
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de221", 0x31, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x3}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.399154957s ago: executing program 5 (id=2163):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

6.200708704s ago: executing program 0 (id=2164):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.654366204s ago: executing program 0 (id=2165):
kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff9", 0xed, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb77519", 0x40, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b", 0xdc, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.454436921s ago: executing program 6 (id=2166):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054)
write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
write$nci(r4, 0x0, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)

3.16354586s ago: executing program 5 (id=2167):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x7e)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, 0x0, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x3, 0x0, [{0x0, 0x73, &(0x7f0000000880)=""/115}, {0xc000, 0xa0, &(0x7f00000007c0)=""/160}, {0xdddc0000, 0xd5, &(0x7f0000000a00)=""/213}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50)

2.84912297s ago: executing program 5 (id=2168):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000f00)="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", 0x6b6, 0x4c840, 0x0, 0x0)

2.19784121s ago: executing program 6 (id=2169):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0)
alarm(0xc8aa9c0000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.828295062s ago: executing program 5 (id=2170):
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9", 0x2e}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d529148", 0x3d}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

427.938757ms ago: executing program 0 (id=2171):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x41, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb7)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./cgroup/../file0/file0/file0\x00')
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mknod(0x0, 0x1000, 0x1)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xe400000e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

89.641628ms ago: executing program 0 (id=2172):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)

0s ago: executing program 5 (id=2173):
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de221", 0x31, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x3}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

2] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  410.097977][ T5152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.108546][ T5152] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  410.117704][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.130418][ T5152] usb 5-1: config 0 descriptor??
[  410.148840][  T987] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  410.204773][ T9417] netlink: 'syz.0.920': attribute type 4 has an invalid length.
[  410.306791][ T9419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.921'.
[  410.536328][ T9423] netlink: 'syz.0.923': attribute type 1 has an invalid length.
[  410.549807][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.563055][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.580691][ T5152] elan 0003:04F3:0755.000C: unknown main item tag 0x0
[  410.588818][ T5152] elan 0003:04F3:0755.000C: unknown main item tag 0x0
[  410.596221][ T5152] elan 0003:04F3:0755.000C: unknown main item tag 0x0
[  410.603852][ T5152] elan 0003:04F3:0755.000C: unknown main item tag 0x0
[  410.613034][ T5152] elan 0003:04F3:0755.000C: unknown main item tag 0x0
[  410.621002][ T5152] elan 0003:04F3:0755.000C: failed to start in urb: -90
[  410.631849][ T5152] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  410.680061][ T9423] 8021q: adding VLAN 0 to HW filter on device bond1
[  410.777341][ T9425] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  410.798614][ T5822] usb 5-1: USB disconnect, device number 8
[  410.809171][ T6067] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  410.978513][ T6068] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  412.626412][ T9434] vxcan0: tx address claim with dest, not broadcast
[  412.895866][ T9440] netlink: 'syz.3.929': attribute type 4 has an invalid length.
[  413.003256][ T9442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.930'.
[  413.013967][ T9411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.245303][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'.
[  414.334957][ T9472] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.342331][ T9472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.349962][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.357182][ T9472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.379217][  T987] bond4: (slave ip6gretap0): link status up again after 0 ms
[  414.397955][   T33] bond4: (slave ip6gretap0): link status up again after 0 ms
[  414.421769][ T9472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.455086][  T987] bond4: (slave ip6gretap0): link status up again after 0 ms
[  414.490382][ T6067] bond4: (slave ip6gretap0): link status up again after 0 ms
[  414.539998][   T33] bond4: (slave ip6gretap0): link status up again after 0 ms
[  414.578474][   T33] bond4: (slave ip6gretap0): link status up again after 0 ms
[  414.586933][ T9484] netlink: 'syz.0.940': attribute type 4 has an invalid length.
[  414.619424][ T4545] bond4: (slave ip6gretap0): link status up again after 0 ms
[  414.634645][ T4545] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  414.758016][   T33] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  414.846707][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.942'.
[  414.858073][    T8] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  414.874323][  T987] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  414.881635][   T33] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  414.999132][ T6067] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  415.052502][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  415.071551][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.084426][    T8] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  415.100930][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.115266][    T8] usb 5-1: config 0 descriptor??
[  415.121831][ T6067] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  415.261594][ T4545] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  415.348421][ T9504] loop0: detected capacity change from 0 to 256
[  419.287575][ T9489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  419.485097][ T9504] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  419.749171][ T4545] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  419.870682][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.020137][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.051340][    T8] usbhid 5-1:0.0: can't add hid device: -71
[  420.061444][    T8] usbhid: probe of 5-1:0.0 failed with error -71
[  420.103111][    T8] usb 5-1: USB disconnect, device number 9
[  420.139093][ T3432] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.208021][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.946'.
[  420.247769][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.946'.
[  420.261846][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.946'.
[  420.268504][ T6068] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.439294][ T6068] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.478195][ T9530] netlink: 'syz.5.952': attribute type 4 has an invalid length.
[  420.549200][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.658292][   T78] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.768587][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.885283][ T9534] loop5: detected capacity change from 0 to 256
[  420.910450][ T3432] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  420.982909][ T9534] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  423.104244][ T9515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  423.519441][ T1321] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  423.674716][ T9558] netlink: 'syz.0.961': attribute type 4 has an invalid length.
[  423.767984][    T8] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  423.962807][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  423.985380][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.996431][    T8] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  424.007329][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.019181][    T8] usb 6-1: config 0 descriptor??
[  424.431336][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.441963][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.458797][    T8] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  424.465661][    T8] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  424.473358][    T8] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  424.481142][    T8] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  424.488887][    T8] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  424.496353][    T8] elan 0003:04F3:0755.000D: failed to start in urb: -90
[  424.505236][    T8] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  424.674790][    T8] usb 6-1: USB disconnect, device number 8
[  424.778204][ T1321] net_ratelimit: 31 callbacks suppressed
[  424.778220][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  424.899352][   T78] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.018562][ T9505] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.168542][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.318128][   T78] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.433388][   T78] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.589430][   T33] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.698270][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.808113][ T1321] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  425.918798][   T33] bond4: (slave ip6gretap0): failed to get link speed/duplex
[  426.367057][ T9544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  426.620714][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'.
[  427.248644][    T8] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  427.477730][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  427.525009][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.557888][    T8] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  427.569365][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.580869][    T8] usb 6-1: config 0 descriptor??
[  427.839809][   T33] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  428.000924][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.026107][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.051726][    T8] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  428.065993][    T8] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  428.076299][    T8] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  428.083873][    T8] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  428.092135][    T8] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  428.100752][    T8] elan 0003:04F3:0755.000E: failed to start in urb: -90
[  428.118288][    T8] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  428.285201][ T9627] usb 6-1: USB disconnect, device number 9
[  428.296891][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.304239][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.855123][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.906528][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  429.383971][ T9618] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.393065][ T9618] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.404023][ T9618] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.413023][ T9618] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.578737][ T9618] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.587685][ T9618] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.596848][ T9618] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.606089][ T9618] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.672343][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.978'.
[  430.750387][ T9615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  430.902616][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.990'.
[  431.151165][ T5845] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  432.814739][ T5776] Bluetooth: hci2: command 0x0406 tx timeout
[  432.854302][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  432.879081][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.896135][ T5845] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  432.911355][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.924440][ T5845] usb 1-1: config 0 descriptor??
[  433.239915][  T987] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  433.356031][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.371016][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.391963][ T5845] elan 0003:04F3:0755.000F: unknown main item tag 0x0
[  433.401476][ T5845] elan 0003:04F3:0755.000F: unknown main item tag 0x0
[  433.410790][ T5845] elan 0003:04F3:0755.000F: unknown main item tag 0x0
[  433.418296][ T5845] elan 0003:04F3:0755.000F: unknown main item tag 0x0
[  433.425240][ T5845] elan 0003:04F3:0755.000F: unknown main item tag 0x0
[  433.442164][ T5845] elan 0003:04F3:0755.000F: failed to start in urb: -90
[  433.455734][ T5845] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  433.608713][    T8] usb 1-1: USB disconnect, device number 11
[  433.867141][ T9706] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  437.491654][ T9693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  438.207992][ T5845] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  438.402316][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  438.419719][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.430256][ T5845] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  438.439517][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.451334][ T5845] usb 5-1: config 0 descriptor??
[  438.579289][ T9749] netlink: 'syz.0.1013': attribute type 1 has an invalid length.
[  438.610045][ T9749] 8021q: adding VLAN 0 to HW filter on device bond2
[  438.640932][ T9749] bond1: (slave ip6gretap0): Removing an active aggregator
[  438.648899][ T9749] bond1: (slave ip6gretap0): Releasing backup interface
[  438.663293][ T9749] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  438.729614][ T3432] net_ratelimit: 15 callbacks suppressed
[  438.729631][ T3432] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  440.718726][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.725099][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  441.446750][  T987] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  441.463303][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.525908][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.592189][ T5845] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  441.619479][ T5845] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  441.626449][ T5845] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  441.633648][ T5845] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  441.640873][ T5845] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  441.648767][ T5845] elan 0003:04F3:0755.0010: failed to start in urb: -90
[  441.668510][ T5845] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  441.695196][ T9761] syzkaller1: entered promiscuous mode
[  441.706800][ T9761] syzkaller1: entered allmulticast mode
[  441.790572][ T5845] usb 5-1: USB disconnect, device number 10
[  443.818466][ T9783] netlink: 'syz.3.1022': attribute type 4 has an invalid length.
[  445.398489][ T9797] syzkaller1: entered promiscuous mode
[  445.411273][ T9797] syzkaller1: entered allmulticast mode
[  446.428148][ T9630] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  446.640590][ T9630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  446.652678][ T9630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.663568][ T9630] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  446.729346][ T9630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.774834][ T9630] usb 6-1: config 0 descriptor??
[  448.620450][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.648481][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.695601][ T9630] elan 0003:04F3:0755.0011: unknown main item tag 0x0
[  448.722846][ T9630] elan 0003:04F3:0755.0011: unknown main item tag 0x0
[  448.746623][ T9630] elan 0003:04F3:0755.0011: unknown main item tag 0x0
[  448.778024][ T9630] elan 0003:04F3:0755.0011: unknown main item tag 0x0
[  448.784887][ T9630] elan 0003:04F3:0755.0011: unknown main item tag 0x0
[  448.830367][ T9630] elan 0003:04F3:0755.0011: failed to start in urb: -90
[  448.863139][ T9630] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  448.927916][ T9630] usb 6-1: USB disconnect, device number 10
[  449.091560][ T9824] fido_id[9824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  449.637379][ T9830] syzkaller1: entered promiscuous mode
[  449.644442][ T9830] syzkaller1: entered allmulticast mode
[  450.088663][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  450.107521][ T9843] vxcan0: tx address claim with dlc 0
[  452.698822][    T8] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  452.909897][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  452.952876][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.972401][    T8] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  452.992433][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.028685][    T8] usb 5-1: config 0 descriptor??
[  453.457712][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.495243][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.531567][    T8] elan 0003:04F3:0755.0012: unknown main item tag 0x0
[  453.571056][    T8] elan 0003:04F3:0755.0012: unknown main item tag 0x0
[  453.590531][    T8] elan 0003:04F3:0755.0012: unknown main item tag 0x0
[  453.611846][    T8] elan 0003:04F3:0755.0012: unknown main item tag 0x0
[  453.627927][    T8] elan 0003:04F3:0755.0012: unknown main item tag 0x0
[  453.648818][    T8] elan 0003:04F3:0755.0012: failed to start in urb: -90
[  453.682410][    T8] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  453.746098][    T8] usb 5-1: USB disconnect, device number 11
[  453.934948][ T9880] fido_id[9880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  456.183028][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  458.178513][ T9626] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  458.407681][ T9626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  458.427383][ T9626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.457993][ T9626] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  458.469522][ T9626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.511919][ T9626] usb 6-1: config 0 descriptor??
[  458.951212][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.974885][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.023565][ T9626] elan 0003:04F3:0755.0013: unknown main item tag 0x0
[  459.046465][ T9626] elan 0003:04F3:0755.0013: unknown main item tag 0x0
[  459.087594][ T9626] elan 0003:04F3:0755.0013: unknown main item tag 0x0
[  459.100295][ T9626] elan 0003:04F3:0755.0013: unknown main item tag 0x0
[  459.115225][ T9626] elan 0003:04F3:0755.0013: unknown main item tag 0x0
[  459.128618][ T9626] elan 0003:04F3:0755.0013: failed to start in urb: -90
[  459.156217][ T9626] elan 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  459.260237][ T9626] usb 6-1: USB disconnect, device number 11
[  459.415216][ T9939] fido_id[9939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  464.806429][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  464.821371][ T9626] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  465.127964][ T9626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  465.146653][ T9626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.183883][ T9626] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  465.213541][ T9626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.343723][T10002] netlink: 'syz.5.1079': attribute type 4 has an invalid length.
[  465.458818][ T9626] usb 4-1: config 0 descriptor??
[  466.033144][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.078503][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.102394][ T9626] elan 0003:04F3:0755.0014: unknown main item tag 0x0
[  466.122720][ T9626] elan 0003:04F3:0755.0014: unknown main item tag 0x0
[  466.147924][ T9626] elan 0003:04F3:0755.0014: unknown main item tag 0x0
[  466.154792][ T9626] elan 0003:04F3:0755.0014: unknown main item tag 0x0
[  466.193845][ T9626] elan 0003:04F3:0755.0014: unknown main item tag 0x0
[  466.215060][ T9626] elan 0003:04F3:0755.0014: failed to start in urb: -90
[  466.240556][ T9626] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  466.487924][ T9629] usb 4-1: USB disconnect, device number 11
[  468.187960][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  469.392258][T10011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  469.601226][T10034] netlink: 'syz.5.1089': attribute type 4 has an invalid length.
[  471.647995][ T9629] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  471.880488][ T9629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  471.932300][ T9629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.977772][ T9629] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  472.022620][ T9629] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.060943][ T9629] usb 6-1: config 0 descriptor??
[  472.076565][ T5781] Bluetooth: hci1: unexpected event for opcode 0x007f
[  473.874337][ T9629] usbhid 6-1:0.0: can't add hid device: -71
[  473.906270][ T9629] usbhid: probe of 6-1:0.0 failed with error -71
[  473.958543][ T9629] usb 6-1: USB disconnect, device number 12
[  476.677965][ T9629] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  476.869788][ T9629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  476.892952][ T9629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  476.904621][ T9629] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  476.923527][ T9629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.942098][ T9629] usb 4-1: config 0 descriptor??
[  477.397088][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.433317][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.456662][ T9629] elan 0003:04F3:0755.0015: unknown main item tag 0x0
[  477.480344][ T9629] elan 0003:04F3:0755.0015: unknown main item tag 0x0
[  477.493926][ T9629] elan 0003:04F3:0755.0015: unknown main item tag 0x0
[  477.505870][ T9629] elan 0003:04F3:0755.0015: unknown main item tag 0x0
[  477.523098][ T9629] elan 0003:04F3:0755.0015: unknown main item tag 0x0
[  477.539050][ T9629] elan 0003:04F3:0755.0015: failed to start in urb: -90
[  477.558820][ T9629] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  477.676409][ T9626] usb 4-1: USB disconnect, device number 12
[  477.722149][T10120] fido_id[10120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  479.342539][T10098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  479.749290][T10130] syzkaller0: entered promiscuous mode
[  479.777073][T10130] syzkaller0: entered allmulticast mode
[  485.391444][ T5845] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  485.579930][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  485.593452][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.603370][ T5845] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  485.612776][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.628396][ T5845] usb 4-1: config 0 descriptor??
[  486.042148][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.051212][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.066749][ T5845] elan 0003:04F3:0755.0016: unknown main item tag 0x0
[  486.074127][ T5845] elan 0003:04F3:0755.0016: unknown main item tag 0x0
[  486.081621][ T5845] elan 0003:04F3:0755.0016: unknown main item tag 0x0
[  486.088752][ T5845] elan 0003:04F3:0755.0016: unknown main item tag 0x0
[  486.095629][ T5845] elan 0003:04F3:0755.0016: unknown main item tag 0x0
[  486.104625][ T5845] elan 0003:04F3:0755.0016: failed to start in urb: -90
[  486.113497][ T5845] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  486.271166][ T5845] usb 4-1: USB disconnect, device number 13
[  487.438910][T10168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  488.000758][T10194] netlink: 'syz.3.1128': attribute type 4 has an invalid length.
[  488.042683][T10197] digital: digital_start_poll: Unknown protocol
[  489.015166][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 3584
[  493.015300][T10233] netlink: 'syz.0.1139': attribute type 4 has an invalid length.
[  494.684094][T10221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  495.066777][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 3584
[  497.429115][T10269] netlink: 'syz.4.1149': attribute type 4 has an invalid length.
[  498.126525][T10281] 8021q: VLANs not supported on caif0
[  501.827418][T10279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  501.837500][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.844566][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.918458][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1160'.
[  501.927497][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1160'.
[  502.018121][T10313] team0: entered promiscuous mode
[  502.035097][T10313] team_slave_0: entered promiscuous mode
[  502.050452][T10313] team_slave_1: entered promiscuous mode
[  502.070632][T10313] bridge0: entered promiscuous mode
[  502.080726][T10313] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  502.098063][T10313] Cannot create hsr debugfs directory
[  502.113202][T10315] netlink: 'syz.3.1162': attribute type 4 has an invalid length.
[  504.881748][ T5781] Bluetooth: hci3: ACL packet for unknown connection handle 3584
[  505.314776][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'.
[  505.339655][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'.
[  505.396724][T10352] team0: entered promiscuous mode
[  505.429654][T10352] team_slave_0: entered promiscuous mode
[  505.458042][T10352] team_slave_1: entered promiscuous mode
[  505.496023][T10352] bridge0: entered promiscuous mode
[  505.516590][T10352] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  505.537930][T10352] Cannot create hsr debugfs directory
[  505.543564][T10352] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network
[  505.610016][T10354] netlink: 'syz.4.1174': attribute type 4 has an invalid length.
[  508.500123][ T5781] Bluetooth: hci3: ACL packet for unknown connection handle 3584
[  508.523354][T10400] netlink: 'syz.5.1184': attribute type 4 has an invalid length.
[  508.555673][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'.
[  508.588666][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'.
[  508.607848][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'.
[  508.616803][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'.
[  510.584776][T10422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  510.759111][T10422] syzkaller0: entered promiscuous mode
[  510.764663][T10422] syzkaller0: entered allmulticast mode
[  510.788411][T10422] tipc: Resetting bearer <eth:syzkaller0>
[  510.911676][T10421] tipc: Resetting bearer <eth:syzkaller0>
[  512.970654][T10421] tipc: Disabling bearer <eth:syzkaller0>
[  512.982372][T10441] netlink: 'syz.3.1193': attribute type 4 has an invalid length.
[  512.990612][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'.
[  513.004822][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1194'.
[  513.019063][ T9629] tipc: Node number set to 3637377929
[  513.029173][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'.
[  513.042879][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1194'.
[  513.242557][T10454] syzkaller0: entered promiscuous mode
[  513.251635][T10454] syzkaller0: entered allmulticast mode
[  513.397962][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 3584
[  515.452628][T10481] netlink: 'syz.3.1205': attribute type 4 has an invalid length.
[  515.491513][T10483] smc: net device nr0 erased user defined pnetid SYZ2
[  515.563340][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  515.572561][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'.
[  515.608375][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  515.635909][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'.
[  516.895107][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 3584
[  517.732571][T10514] netlink: 'syz.0.1216': attribute type 4 has an invalid length.
[  518.177286][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'.
[  518.229627][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'.
[  519.638872][T10541] netlink: 'syz.4.1226': attribute type 4 has an invalid length.
[  519.672067][T10542] netlink: 'syz.3.1225': attribute type 1 has an invalid length.
[  519.765440][T10542] 8021q: adding VLAN 0 to HW filter on device bond5
[  519.894965][T10546] bond4: (slave ip6gretap0): Removing an active aggregator
[  520.042461][T10546] bond4: (slave ip6gretap0): Releasing backup interface
[  520.134258][T10546] bond5: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  520.158096][ T1120] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  520.338058][ T6067] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  520.592957][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'.
[  520.606137][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'.
[  523.334136][T10584] netlink: 'syz.4.1236': attribute type 4 has an invalid length.
[  523.722982][T10560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  524.196411][T10594] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  524.271759][ T5781] Bluetooth: hci2: unexpected event for opcode 0x007f
[  524.476380][T10594] 8021q: adding VLAN 0 to HW filter on device bond3
[  524.663455][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'.
[  524.841924][T10603] bond2: (slave ip6gretap0): Removing an active aggregator
[  524.868535][T10603] bond2: (slave ip6gretap0): Releasing backup interface
[  524.907023][T10603] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  524.994020][   T33] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  525.118004][ T6068] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  525.127965][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'.
[  526.288622][T10613] netlink: 'syz.5.1245': attribute type 4 has an invalid length.
[  526.649388][T10627] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 134217731, id = 0
[  527.020342][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'.
[  527.341714][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'.
[  527.862382][ T5781] Bluetooth: hci3: unexpected event for opcode 0x007f
[  529.448145][T10670] IPVS: Error connecting to the multicast addr
[  529.679683][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'.
[  529.687019][T10676] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  529.749518][T10676] 8021q: adding VLAN 0 to HW filter on device bond4
[  531.437689][T10681] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  532.087177][ T5781] Bluetooth: hci3: unexpected event for opcode 0x007f
[  533.683122][ T5781] Bluetooth: hci0: unexpected event for opcode 0x007f
[  533.708474][T10710] netlink: 'syz.5.1274': attribute type 4 has an invalid length.
[  538.666167][ T5781] Bluetooth: hci1: unexpected event for opcode 0x007f
[  539.104026][ T5781] Bluetooth: hci3: unexpected event for opcode 0x007f
[  542.681327][ T9633] IPVS: starting estimator thread 0...
[  542.755470][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  542.778191][T10788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1299'.
[  542.788059][T10783] IPVS: using max 18 ests per chain, 43200 per kthread
[  542.809419][T10788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1299'.
[  543.164666][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1302'.
[  543.698213][ T5776] Bluetooth: hci2: command 0x0406 tx timeout
[  545.618549][T10828] netlink: 'syz.4.1310': attribute type 13 has an invalid length.
[  546.386462][T10804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  546.768708][T10839] __sock_release: fasync list not empty!
[  547.589232][T10828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  547.740869][T10828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.546928][T10828] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.555454][T10828] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.565301][T10828] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.574716][T10828] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.645068][T10828] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.653734][T10828] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.662517][T10828] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.671487][T10828] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.705874][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'.
[  550.329026][T10866] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.344893][T10866] 8021q: adding VLAN 0 to HW filter on device team0
[  550.358877][T10866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  550.397937][T10866] syz.4.1322 (10866) used greatest stack depth: 20136 bytes left
[  550.564553][T10875] pim6reg: entered allmulticast mode
[  550.856115][T10878] syzkaller0: entered promiscuous mode
[  550.864151][T10878] syzkaller0: entered allmulticast mode
[  551.838517][T10843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  555.674537][T10895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'.
[  555.697353][T10904] netlink: 'syz.3.1332': attribute type 4 has an invalid length.
[  557.721454][T10938] netlink: 'syz.5.1341': attribute type 4 has an invalid length.
[  557.970483][T10940] syzkaller0: entered promiscuous mode
[  557.976032][T10940] syzkaller0: entered allmulticast mode
[  558.917544][T10912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.531421][T10952] netlink: 'syz.3.1346': attribute type 1 has an invalid length.
[  562.539928][T10952] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  563.153025][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.167961][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  564.765066][T11001] syzkaller0: entered promiscuous mode
[  564.828509][T11001] syzkaller0: entered allmulticast mode
[  567.151720][T11013] netlink: 'syz.4.1362': attribute type 1 has an invalid length.
[  567.177526][T11013] 8021q: adding VLAN 0 to HW filter on device bond2
[  567.238682][T11021] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  570.267106][T11064] syzkaller0: entered promiscuous mode
[  570.272717][T11064] syzkaller0: entered allmulticast mode
[  570.355557][T11034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.417174][T11066] netlink: 'syz.3.1375': attribute type 1 has an invalid length.
[  572.443108][T11066] 8021q: adding VLAN 0 to HW filter on device bond6
[  572.922771][T11097] syzkaller0: entered promiscuous mode
[  572.928407][T11097] syzkaller0: entered allmulticast mode
[  574.607947][ T9646] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  574.650475][T11097] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1382'.
[  574.829811][ T9646] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  574.848924][ T9646] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.860065][ T9646] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  574.870012][ T9646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.883964][ T9646] usb 1-1: config 0 descriptor??
[  576.115180][ T9646] usbhid 1-1:0.0: can't add hid device: -71
[  576.136564][ T9646] usbhid: probe of 1-1:0.0 failed with error -71
[  576.159485][ T9646] usb 1-1: USB disconnect, device number 12
[  576.344785][T11113] syzkaller0: entered promiscuous mode
[  576.358037][T11113] syzkaller0: entered allmulticast mode
[  576.380029][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1386'.
[  578.636457][T11128] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  581.719562][T10835] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  581.731236][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  581.885320][T11164] syzkaller0: entered promiscuous mode
[  581.903487][T11164] syzkaller0: entered allmulticast mode
[  581.934016][T10835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  581.953970][T10835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.975322][T10835] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  582.005498][T10835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.035195][T10835] usb 4-1: config 0 descriptor??
[  582.481338][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.508423][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.543300][T10835] elan 0003:04F3:0755.0017: unknown main item tag 0x0
[  582.555740][T10835] elan 0003:04F3:0755.0017: unknown main item tag 0x0
[  582.594611][T10835] elan 0003:04F3:0755.0017: unknown main item tag 0x0
[  582.617941][T10835] elan 0003:04F3:0755.0017: unknown main item tag 0x0
[  582.636734][T10835] elan 0003:04F3:0755.0017: unknown main item tag 0x0
[  582.657394][T10835] elan 0003:04F3:0755.0017: failed to start in urb: -90
[  582.698291][T10835] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  582.756904][T10835] usb 4-1: USB disconnect, device number 14
[  582.879151][T11176] fido_id[11176]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  587.289386][T11206] netlink: 'syz.3.1408': attribute type 10 has an invalid length.
[  587.312758][T11206] dummy0: entered promiscuous mode
[  587.325969][T11206] team0: Port device dummy0 added
[  587.336124][T11207] netlink: 'syz.3.1408': attribute type 10 has an invalid length.
[  587.398852][T11207] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  587.452209][T11207] dummy0: left promiscuous mode
[  587.479593][T11207] team0: Failed to send options change via netlink (err -105)
[  587.498252][T11207] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  587.512792][T11207] team0: Port device dummy0 removed
[  587.524128][T11207] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  588.089191][T10835] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  588.409070][T10835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  588.441125][T10835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  588.451495][T10835] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  588.460746][T10835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.624129][T10835] usb 1-1: config 0 descriptor??
[  589.052166][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.074106][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.114161][T10835] elan 0003:04F3:0755.0018: unknown main item tag 0x0
[  589.166827][T10835] elan 0003:04F3:0755.0018: unknown main item tag 0x0
[  589.208666][T10835] elan 0003:04F3:0755.0018: unknown main item tag 0x0
[  589.215566][T10835] elan 0003:04F3:0755.0018: unknown main item tag 0x0
[  589.275275][T10835] elan 0003:04F3:0755.0018: unknown main item tag 0x0
[  589.311904][T10835] elan 0003:04F3:0755.0018: failed to start in urb: -90
[  589.410328][T10835] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  589.491150][T10835] usb 1-1: USB disconnect, device number 13
[  589.972960][T11232] syzkaller0: entered promiscuous mode
[  589.979035][T11232] syzkaller0: entered allmulticast mode
[  593.169969][T11233] fido_id[11233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  599.742140][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'.
[  599.779880][T11263] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  599.781845][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'.
[  603.068784][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1430'.
[  603.112175][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1430'.
[  603.282658][T11278] bond0: entered promiscuous mode
[  603.316090][T11278] bond_slave_0: entered promiscuous mode
[  603.368134][T11278] bond_slave_1: entered promiscuous mode
[  603.409219][T11278] ip6gretap0: entered promiscuous mode
[  603.425794][T11278] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  603.498192][T11278] Cannot create hsr debugfs directory
[  603.521360][T11280] netlink: 'syz.0.1432': attribute type 1 has an invalid length.
[  603.653118][T11280] 8021q: adding VLAN 0 to HW filter on device bond5
[  603.894133][   T28] audit: type=1800 audit(1779532219.800:5): pid=11283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1432" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  603.895276][T11283] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  604.113642][T11283] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  604.162806][T11283] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  604.189658][T11302] syzkaller0: entered promiscuous mode
[  604.238316][T11302] syzkaller0: entered allmulticast mode
[  606.931106][T11326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  607.231211][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  608.555011][T11342] netlink: 'syz.4.1451': attribute type 10 has an invalid length.
[  608.621218][T11342] dummy0: entered promiscuous mode
[  608.674437][T11342] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  610.793759][T11360] syzkaller0: entered promiscuous mode
[  610.864656][T11360] syzkaller0: entered allmulticast mode
[  610.964919][T11371] digital: digital_start_poll: Unknown protocol
[  614.488196][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'.
[  615.204862][T11414] netlink: 'syz.5.1473': attribute type 10 has an invalid length.
[  615.274176][T11414] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  615.685206][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  615.738670][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.345046][T11422] syzkaller0: entered promiscuous mode
[  616.381549][T11422] syzkaller0: entered allmulticast mode
[  620.376076][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  620.654756][T11463] syzkaller0: entered promiscuous mode
[  620.678052][T11463] syzkaller0: entered allmulticast mode
[  621.772585][T11479] netlink: 'syz.0.1493': attribute type 10 has an invalid length.
[  622.163738][T11479] dummy0: entered promiscuous mode
[  622.192311][T11479] team0: Port device dummy0 added
[  622.233509][T11481] netlink: 'syz.0.1493': attribute type 10 has an invalid length.
[  622.339883][T11481] dummy0: left promiscuous mode
[  622.366374][T11481] team0: Port device dummy0 removed
[  622.401534][T11481] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  622.875514][T11495] syzkaller0: entered promiscuous mode
[  622.883014][T11495] syzkaller0: entered allmulticast mode
[  623.928872][ T9646] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  624.623530][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.667949][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.693926][ T9646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  624.716509][ T9646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  624.738950][ T9646] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  624.784593][ T9646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.847090][ T9646] usb 4-1: config 0 descriptor??
[  625.280655][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.298229][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.352905][ T9646] elan 0003:04F3:0755.0019: unknown main item tag 0x0
[  625.384798][ T9646] elan 0003:04F3:0755.0019: unknown main item tag 0x0
[  625.405840][ T9646] elan 0003:04F3:0755.0019: unknown main item tag 0x0
[  625.415313][ T9646] elan 0003:04F3:0755.0019: unknown main item tag 0x0
[  625.430580][ T9646] elan 0003:04F3:0755.0019: unknown main item tag 0x0
[  625.457110][ T9646] elan 0003:04F3:0755.0019: failed to start in urb: -90
[  625.515249][ T9646] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  625.586023][ T9646] usb 4-1: USB disconnect, device number 15
[  625.732945][T11542] fido_id[11542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  627.539337][T11504] syzkaller0: entered promiscuous mode
[  627.545511][T11504] syzkaller0: entered allmulticast mode
[  629.317466][T11568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.330793][T11568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.493236][T11578] syzkaller0: entered promiscuous mode
[  629.522013][T11578] syzkaller0: entered allmulticast mode
[  629.584664][T11568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.597228][T11568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.630344][T11580] syzkaller0: entered promiscuous mode
[  629.636915][T11580] syzkaller0: entered allmulticast mode
[  632.550687][T11568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.563555][T11568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.716603][T11591] syzkaller0: entered promiscuous mode
[  632.740972][T11591] syzkaller0: entered allmulticast mode
[  632.764534][T11602] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  636.661099][T11568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  636.672513][T11568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.698132][T11621] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.705566][T11621] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.769083][T11625] syzkaller0: entered promiscuous mode
[  636.774641][T11625] syzkaller0: entered allmulticast mode
[  636.900998][T11568] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  636.923032][T11568] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  637.007494][T11568] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  637.031782][T11568] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  637.120068][T11568] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  637.158398][T11568] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  637.249791][T11568] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  637.288704][T11568] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.538611][ T5152] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  637.628723][T11652] syzkaller0: entered promiscuous mode
[  637.635450][T11652] syzkaller0: entered allmulticast mode
[  637.671998][T11657] tipc: Started in network mode
[  637.677032][T11657] tipc: Node identity 9619042de14b, cluster identity 4711
[  637.702008][T11657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.740904][ T5152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  637.760350][ T5152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  637.777020][ T5152] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  637.801730][ T5152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.834322][ T5152] usb 6-1: config 0 descriptor??
[  642.909926][ T5152] usbhid 6-1:0.0: can't add hid device: -32
[  642.916022][ T5152] usbhid: probe of 6-1:0.0 failed with error -32
[  643.069859][   T23] usb 6-1: USB disconnect, device number 13
[  649.912072][T11655] tipc: Disabling bearer <eth:syzkaller0>
[  649.923616][T10835] tipc: Node number set to 2001863725
[  650.226302][T11693] syzkaller0: entered promiscuous mode
[  650.253878][T11693] syzkaller0: entered allmulticast mode
[  653.717839][T10835] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  653.927651][T10835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  653.942925][T10835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  653.988459][T10835] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  654.024365][T10835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.050673][T10835] usb 1-1: config 0 descriptor??
[  654.158161][T11735] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  654.401474][T11734] syzkaller0: entered promiscuous mode
[  654.422835][T11734] syzkaller0: entered allmulticast mode
[  654.485177][T11715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.509271][T11715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.542700][T10835] elan 0003:04F3:0755.001A: unknown main item tag 0x0
[  654.562335][T10835] elan 0003:04F3:0755.001A: unknown main item tag 0x0
[  654.581688][T10835] elan 0003:04F3:0755.001A: unknown main item tag 0x0
[  654.604954][T10835] elan 0003:04F3:0755.001A: unknown main item tag 0x0
[  654.626004][T10835] elan 0003:04F3:0755.001A: unknown main item tag 0x0
[  654.647390][T10835] elan 0003:04F3:0755.001A: failed to start in urb: -90
[  654.686855][T10835] elan 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  654.757254][T10835] usb 1-1: USB disconnect, device number 14
[  654.936391][T11741] fido_id[11741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  657.991798][T10780] Bluetooth: hci2: command 0x0406 tx timeout
[  667.729267][T10780] Bluetooth: hci2: command 0x0406 tx timeout
[  667.991091][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  668.178766][ T5815] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  668.381760][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  668.413702][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  668.456361][ T5815] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  668.477310][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.505021][ T5815] usb 1-1: config 0 descriptor??
[  668.665769][T11832] syzkaller0: entered promiscuous mode
[  668.675374][T11832] syzkaller0: entered allmulticast mode
[  668.712220][T10835] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  668.911349][T10835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  668.943915][T11808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  668.952855][T10835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  668.952909][T10835] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  668.952964][T10835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.983728][T10835] usb 5-1: config 0 descriptor??
[  668.991877][T11808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.066213][ T5815] elan 0003:04F3:0755.001B: unknown main item tag 0x0
[  669.080817][ T5815] elan 0003:04F3:0755.001B: unknown main item tag 0x0
[  669.105712][ T5815] elan 0003:04F3:0755.001B: unknown main item tag 0x0
[  669.113432][ T5815] elan 0003:04F3:0755.001B: unknown main item tag 0x0
[  669.145914][ T5815] elan 0003:04F3:0755.001B: unknown main item tag 0x0
[  669.156684][ T5815] elan 0003:04F3:0755.001B: failed to start in urb: -90
[  669.195909][ T5815] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  669.301458][    T8] usb 1-1: USB disconnect, device number 15
[  669.453865][T11844] fido_id[11844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  669.454452][T11835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.499949][T11835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.566299][T10835] elan 0003:04F3:0755.001C: unknown main item tag 0x0
[  669.573357][T10835] elan 0003:04F3:0755.001C: unknown main item tag 0x0
[  669.602330][T10835] elan 0003:04F3:0755.001C: unknown main item tag 0x0
[  669.609412][T10835] elan 0003:04F3:0755.001C: unknown main item tag 0x0
[  669.616580][T10835] elan 0003:04F3:0755.001C: unknown main item tag 0x0
[  669.672071][T10835] elan 0003:04F3:0755.001C: failed to start in urb: -90
[  669.696492][T10835] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  669.789065][T10835] usb 5-1: USB disconnect, device number 12
[  669.893998][T11847] fido_id[11847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  672.654130][T11845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1571'.
[  672.824194][T11850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  672.918748][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  676.422469][T11899] syzkaller0: entered promiscuous mode
[  676.432297][T11899] syzkaller0: entered allmulticast mode
[  676.587881][ T5815] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  676.795574][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  676.822596][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  676.853858][ T5815] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  676.867948][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.894846][ T5815] usb 1-1: config 0 descriptor??
[  677.361809][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.387141][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.411960][ T5815] elan 0003:04F3:0755.001D: unknown main item tag 0x0
[  677.428413][ T5815] elan 0003:04F3:0755.001D: unknown main item tag 0x0
[  677.435536][ T5815] elan 0003:04F3:0755.001D: unknown main item tag 0x0
[  677.460288][ T5815] elan 0003:04F3:0755.001D: unknown main item tag 0x0
[  677.467155][ T5815] elan 0003:04F3:0755.001D: unknown main item tag 0x0
[  677.476949][ T5815] elan 0003:04F3:0755.001D: failed to start in urb: -90
[  677.526541][ T5815] elan 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  677.645183][T10835] usb 1-1: USB disconnect, device number 16
[  677.685536][T11903] loop4: detected capacity change from 0 to 8
[  677.768511][T11889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  677.783186][T11901] fido_id[11901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  678.383741][T11906] SQUASHFS error: Failed to read block 0x2d7: -5
[  678.391545][T11906] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  679.350479][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  680.584481][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  681.697888][T10780] Bluetooth: hci2: command 0x0406 tx timeout
[  683.388130][    T8] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  683.618335][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  683.635763][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  683.660212][    T8] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  683.670931][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.706025][    T8] usb 1-1: config 0 descriptor??
[  684.151470][T11941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.163757][T11941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.215249][    T8] elan 0003:04F3:0755.001E: unknown main item tag 0x0
[  684.223647][    T8] elan 0003:04F3:0755.001E: unknown main item tag 0x0
[  684.232511][    T8] elan 0003:04F3:0755.001E: unknown main item tag 0x0
[  684.240962][    T8] elan 0003:04F3:0755.001E: unknown main item tag 0x0
[  684.250060][    T8] elan 0003:04F3:0755.001E: unknown main item tag 0x0
[  684.255241][    C1] vkms_vblank_simulate: vblank timer overrun
[  684.282625][    T8] elan 0003:04F3:0755.001E: failed to start in urb: -90
[  684.304607][    T8] elan 0003:04F3:0755.001E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  684.419905][T10835] usb 1-1: USB disconnect, device number 17
[  684.584264][T11950] fido_id[11950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  686.015048][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1583'.
[  686.029964][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.037606][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.429017][T11946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  686.588610][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  686.745143][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  687.836392][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'.
[  688.065687][T11988] syzkaller0: entered promiscuous mode
[  688.073853][T11988] syzkaller0: entered allmulticast mode
[  688.809789][T11993] loop0: detected capacity change from 0 to 1024
[  688.876181][T11993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  688.938505][T11993] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  689.278210][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  689.469514][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  691.360720][T12017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  691.799665][T12026] loop0: detected capacity change from 0 to 256
[  691.860711][T12026] FAT-fs (loop0): bogus logical sector size 128
[  691.871591][T12026] FAT-fs (loop0): Can't find a valid FAT filesystem
[  692.818164][T12030] loop0: detected capacity change from 0 to 1024
[  692.841794][T12030] ext3: Unknown parameter 'audit'
[  693.687096][T12006] veth0_to_team: entered promiscuous mode
[  693.694446][T12014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1614'.
[  694.533461][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  695.085813][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  695.305057][T11849] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  695.347475][T12047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  695.707910][T12062] loop0: detected capacity change from 0 to 164
[  696.975385][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'.
[  697.272065][T12071] syzkaller0: entered promiscuous mode
[  697.286670][T12071] syzkaller0: entered allmulticast mode
[  698.050554][T12079] loop5: detected capacity change from 0 to 164
[  698.105556][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  698.695951][T12087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  699.904429][T12094] loop0: detected capacity change from 0 to 512
[  699.928830][T12094] EXT4-fs: Ignoring removed mblk_io_submit option
[  699.951784][T12095] loop5: detected capacity change from 0 to 128
[  699.990350][T12095] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  700.031202][T12094] EXT4-fs (loop0): Unsupported encryption level 1
[  700.061412][T12095] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  700.223316][T12094] loop0: detected capacity change from 0 to 512
[  700.246453][T12094] EXT4-fs: Ignoring removed bh option
[  700.281331][T12094] ext4: Unknown parameter 'noacl'
[  700.317294][T12094] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  700.445002][T12101] loop0: detected capacity change from 0 to 256
[  700.574143][T12101] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  700.731804][T12101] support for the xor transformation has been removed.
[  700.926382][ T1120] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  702.756235][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  704.739481][T12123] loop0: detected capacity change from 0 to 164
[  705.144346][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  708.244488][T12136] loop5: detected capacity change from 0 to 2048
[  708.346660][T12136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  709.020544][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.778379][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1637'.
[  710.032690][T12147] loop4: detected capacity change from 0 to 8
[  710.346027][ T5884] SQUASHFS error: Unable to read directory block [631:72]
[  710.359855][ T5884] SQUASHFS error: Unable to read inode 0x0
[  710.369644][ T5884] SQUASHFS error: Unable to read inode 0x0
[  710.770202][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  710.901909][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  711.032630][T12164] loop3: detected capacity change from 0 to 164
[  714.743029][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1658'.
[  715.560135][T12185] loop0: detected capacity change from 0 to 256
[  715.600750][T12185] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  715.658901][T12185] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  715.714807][T12185] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  716.156514][T10780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  716.169009][T10780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  716.177990][T10780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  716.186387][T10780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  716.195215][T10780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  716.205149][T10780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  717.731633][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  718.258331][T10780] Bluetooth: hci3: command tx timeout
[  718.492005][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  719.561650][T12188] chnl_net:caif_netlink_parms(): no params data found
[  720.338039][T10780] Bluetooth: hci3: command tx timeout
[  720.996274][T12188] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.065154][T12188] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.131612][T12188] bridge_slave_0: entered allmulticast mode
[  721.159790][T12188] bridge_slave_0: entered promiscuous mode
[  721.200592][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'.
[  721.310040][T12188] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.341166][T12188] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.382203][T12188] bridge_slave_1: entered allmulticast mode
[  721.423448][T12188] bridge_slave_1: entered promiscuous mode
[  721.676365][T12188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.766410][T12188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  722.175959][T12188] team0: Port device team_slave_0 added
[  722.237629][T12188] team0: Port device team_slave_1 added
[  722.309724][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  722.418181][T10780] Bluetooth: hci3: command tx timeout
[  722.424736][T12218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  722.800039][T12188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  722.879019][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  722.995547][T12188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  723.138844][T12188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  723.213357][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  723.316648][T12188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  723.705717][T12188] hsr_slave_0: entered promiscuous mode
[  723.789110][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  723.799756][T12188] hsr_slave_1: entered promiscuous mode
[  723.839577][T12188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  723.848793][T12188] Cannot create hsr debugfs directory
[  724.498263][T10780] Bluetooth: hci3: command tx timeout
[  725.032037][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'.
[  725.768814][T12269] loop5: detected capacity change from 0 to 512
[  725.786511][T12270] netlink: 'syz.0.1686': attribute type 10 has an invalid length.
[  725.797367][T12269] EXT4-fs: Ignoring removed i_version option
[  725.933423][T12269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  725.953136][T12270] bond0: (slave dummy0): Releasing backup interface
[  726.115251][T12269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  726.130531][T12269] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  726.158339][T12270] dummy0: entered promiscuous mode
[  726.292991][T12270] team0: Port device dummy0 added
[  726.391949][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  726.425175][T12269] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.5.1685: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  726.459717][T12269] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem
[  726.478722][T12269] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #12: comm syz.5.1685: Deleting old file: nlink 2, error=-117
[  726.538657][T12269] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.1685: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  726.566940][T12271] netlink: 'syz.0.1686': attribute type 10 has an invalid length.
[  726.628146][T12269] EXT4-fs error (device loop5): ext4_evict_inode:265: comm syz.5.1685: couldn't truncate inode 15 (err -117)
[  726.706695][T12271] dummy0: left promiscuous mode
[  726.752243][T12271] team0: Port device dummy0 removed
[  726.831319][T12271] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  726.890299][T12188] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  726.988772][T12188] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  727.054602][T12188] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  727.174376][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.203675][T12188] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  727.774643][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  728.135983][T12188] 8021q: adding VLAN 0 to HW filter on device bond0
[  728.557024][T12188] 8021q: adding VLAN 0 to HW filter on device team0
[  728.671549][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.680148][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.824190][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.832777][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  729.285918][T12188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  729.734323][T12292] 8021q: adding VLAN 0 to HW filter on device bond7
[  729.812838][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'.
[  730.785349][T12309] netlink: 'syz.3.1696': attribute type 10 has an invalid length.
[  730.945064][T12309] bond0: (slave dummy0): Releasing backup interface
[  731.013781][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  731.055923][T12309] dummy0: entered promiscuous mode
[  731.076411][T12309] team0: Port device dummy0 added
[  731.099182][T12312] netlink: 'syz.3.1696': attribute type 10 has an invalid length.
[  731.195813][T12312] dummy0: left promiscuous mode
[  731.295308][T12312] team0: Port device dummy0 removed
[  731.366186][T12312] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  731.686925][T12188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.154174][T12323] loop3: detected capacity change from 0 to 8
[  732.487472][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  733.820707][T12333] 8021q: adding VLAN 0 to HW filter on device bond8
[  734.458529][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1704'.
[  735.403779][T12357] netlink: 'syz.0.1707': attribute type 10 has an invalid length.
[  735.709353][T12357] bond0: (slave dummy0): Releasing backup interface
[  735.785043][T12357] dummy0: entered promiscuous mode
[  735.840895][T12357] team0: Port device dummy0 added
[  736.040716][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  736.218390][ T4545] ip6gretap0 (unregistering): left promiscuous mode
[  736.294472][T12359] netlink: 'syz.0.1707': attribute type 10 has an invalid length.
[  736.501049][T12359] dummy0: left promiscuous mode
[  736.565772][T12359] team0: Port device dummy0 removed
[  736.732796][T12359] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  737.487625][T12382] loop5: detected capacity change from 0 to 8
[  739.863146][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  740.430081][T12393] 8021q: adding VLAN 0 to HW filter on device bond9
[  740.768387][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  741.705610][T12188] veth0_vlan: entered promiscuous mode
[  743.335785][T12188] veth1_vlan: entered promiscuous mode
[  743.601074][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  745.028421][T12420] netlink: 'syz.5.1718': attribute type 10 has an invalid length.
[  745.193713][T12425] loop0: detected capacity change from 0 to 8
[  745.282350][T12420] bond0: (slave dummy0): Releasing backup interface
[  745.492928][T12420] dummy0: entered promiscuous mode
[  745.543057][T12420] team0: Port device dummy0 added
[  745.653622][T12188] veth0_macvtap: entered promiscuous mode
[  745.732899][T12424] netlink: 'syz.5.1718': attribute type 10 has an invalid length.
[  745.979353][T12424] dummy0: left promiscuous mode
[  746.051967][T12424] team0: Port device dummy0 removed
[  746.150306][T12424] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  746.511583][ T4545] bond0: left promiscuous mode
[  746.548152][ T4545] bond_slave_0: left promiscuous mode
[  746.554904][ T4545] bond_slave_1: left promiscuous mode
[  746.658522][ T4545] dummy0: left promiscuous mode
[  746.935252][ T4545] hsr_slave_0: left promiscuous mode
[  747.054176][ T4545] hsr_slave_1: left promiscuous mode
[  747.154279][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  747.224929][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  747.262618][ T4545] bridge_slave_1: left allmulticast mode
[  747.294633][ T4545] bridge_slave_1: left promiscuous mode
[  747.331390][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.384419][ T4545] bridge_slave_0: left allmulticast mode
[  747.421910][ T4545] bridge_slave_0: left promiscuous mode
[  747.447568][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.493536][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.501301][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  748.060310][ T4545] bond2 (unregistering): Released all slaves
[  748.149997][ T4545] pim6reg (unregistering): left allmulticast mode
[  748.715731][ T4545] bond1 (unregistering): Released all slaves
[  749.955699][ T4545] team0 (unregistering): Port device team_slave_1 removed
[  750.040599][ T4545] team0 (unregistering): Port device team_slave_0 removed
[  750.115268][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  750.189246][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  750.688653][ T4545] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  750.768930][ T4545] bond0 (unregistering): Released all slaves
[  750.918673][T12188] veth1_macvtap: entered promiscuous mode
[  751.203307][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.256921][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.280776][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  751.311253][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  751.328258][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.342772][T12188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  751.416059][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  751.455828][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  751.457647][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.473848][T12188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  751.494761][T12188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  751.508952][T12476] loop3: detected capacity change from 0 to 8
[  751.545937][T12188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  751.565416][T12188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  751.575538][T12188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  751.586086][T12188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  751.596498][T12188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.037215][T12481] netlink: 'syz.0.1729': attribute type 10 has an invalid length.
[  752.119991][T12481] bond0: (slave dummy0): Releasing backup interface
[  752.142999][T12481] dummy0: entered promiscuous mode
[  752.160970][T12481] team0: Port device dummy0 added
[  752.167566][T12482] netlink: 'syz.0.1729': attribute type 10 has an invalid length.
[  752.226558][T12486] loop3: detected capacity change from 0 to 128
[  752.250768][T12486] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  752.268669][T12482] dummy0: left promiscuous mode
[  752.297219][T12482] team0: Port device dummy0 removed
[  752.333265][T12486] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  752.343838][T12482] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  752.463749][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.493884][T12486] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  752.508978][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.551104][T12486] FAT-fs (loop3): Filesystem has been set read-only
[  752.620283][ T4545] IPVS: stop unused estimator thread 0...
[  752.778306][ T6068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.786247][ T6068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.620299][T12509] syzkaller0: entered promiscuous mode
[  753.672375][T12509] syzkaller0: entered allmulticast mode
[  753.819528][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  755.114441][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  758.573575][T12532] netlink: 'syz.3.1739': attribute type 10 has an invalid length.
[  758.605440][T12532] bond0: (slave dummy0): Releasing backup interface
[  758.651175][T12532] dummy0: entered promiscuous mode
[  758.669937][T12532] team0: Port device dummy0 added
[  758.688081][T12533] netlink: 'syz.3.1739': attribute type 10 has an invalid length.
[  758.719632][T12533] dummy0: left promiscuous mode
[  758.802000][T12533] team0: Port device dummy0 removed
[  758.834354][T12533] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  759.074397][T12544] loop6: detected capacity change from 0 to 1024
[  759.254866][T12544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  759.325997][T12544] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.487090][T12552] loop5: detected capacity change from 0 to 4096
[  759.607438][T12552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  759.692674][T12188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  759.931131][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.957219][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  760.308150][T12579] netlink: 'syz.5.1748': attribute type 1 has an invalid length.
[  760.426899][T12579] 8021q: adding VLAN 0 to HW filter on device bond3
[  760.617094][T12585] syzkaller0: entered promiscuous mode
[  760.624664][T12585] syzkaller0: entered allmulticast mode
[  762.315272][T12557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  764.516560][T12603] netlink: 'syz.6.1751': attribute type 10 has an invalid length.
[  764.592684][T12603] team0: Port device dummy0 added
[  764.619859][T12605] netlink: 'syz.6.1751': attribute type 10 has an invalid length.
[  764.805224][T12605] team0: Port device dummy0 removed
[  764.820487][T12605] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  765.978597][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  765.992253][T12629] loop6: detected capacity change from 0 to 2048
[  766.174112][T12629] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  766.306046][T12629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  766.679738][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  767.404788][T12660] syzkaller0: entered promiscuous mode
[  767.412367][T12660] syzkaller0: entered allmulticast mode
[  769.529564][T12646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  771.516513][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  772.583405][T12695] loop3: detected capacity change from 0 to 2048
[  772.596445][T12695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  772.766299][T12682] netlink: 'syz.5.1766': attribute type 10 has an invalid length.
[  772.868499][T12682] bond0: (slave dummy0): Releasing backup interface
[  772.902248][T12682] dummy0: entered promiscuous mode
[  772.961094][T12682] team0: Port device dummy0 added
[  772.975845][T12683] netlink: 'syz.5.1766': attribute type 10 has an invalid length.
[  773.074232][T12683] dummy0: left promiscuous mode
[  773.093751][T12683] team0: Port device dummy0 removed
[  773.127429][T12683] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  774.902538][T12741] loop6: detected capacity change from 0 to 16
[  774.938534][T12741] erofs: (device loop6): mounted with root inode @ nid 36.
[  774.957159][T12740] loop0: detected capacity change from 0 to 2048
[  775.053075][T12741] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  775.161047][T12741] syz.6.1779: attempt to access beyond end of device
[  775.161047][T12741] loop6: rw=0, sector=296, nr_sectors = 8 limit=16
[  775.176431][T12740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  775.265222][T12740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  775.309342][T12741] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  775.361370][T12741] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  775.450253][T12749] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  775.527841][T12749] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  775.572919][T12749] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  775.725922][T12752] syzkaller0: entered promiscuous mode
[  775.807846][T12752] syzkaller0: entered allmulticast mode
[  776.385937][T12721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  777.752511][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  779.597453][T12786] loop5: detected capacity change from 0 to 512
[  779.610678][T12786] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  779.636693][T12786] EXT4-fs (loop5): orphan cleanup on readonly fs
[  779.653258][T12786] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.1788: Allocating blocks 41-42 which overlap fs metadata
[  779.672449][T12786] Quota error (device loop5): write_blk: dquota write failed
[  779.680270][T12786] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  779.689763][T12786] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.1788: Allocating blocks 41-42 which overlap fs metadata
[  779.718038][T12786] Quota error (device loop5): write_blk: dquota write failed
[  779.725689][T12786] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  779.735875][T12786] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1788: Failed to acquire dquot type 1
[  779.754302][T12786] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  779.773368][T12786] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1788: corrupted inode contents
[  779.793233][    C0] vkms_vblank_simulate: vblank timer overrun
[  779.803808][T12786] EXT4-fs error (device loop5): ext4_dirty_inode:6143: inode #12: comm syz.5.1788: mark_inode_dirty error
[  779.821744][T12786] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1788: corrupted inode contents
[  779.836124][T12786] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1788: mark_inode_dirty error
[  779.861880][T12786] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1788: corrupted inode contents
[  779.881698][T12786] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  779.893098][T12786] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1788: corrupted inode contents
[  779.905973][T12786] EXT4-fs error (device loop5): ext4_truncate:4301: inode #12: comm syz.5.1788: mark_inode_dirty error
[  779.918706][T12786] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  779.929511][T12786] EXT4-fs (loop5): 1 truncate cleaned up
[  779.936753][T12786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  780.430749][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  781.030759][T12768] netlink: 'syz.6.1783': attribute type 10 has an invalid length.
[  781.108027][T12768] bond0: (slave dummy0): Releasing backup interface
[  781.135063][T12768] team0: Port device dummy0 added
[  781.180001][T12769] netlink: 'syz.6.1783': attribute type 10 has an invalid length.
[  781.220953][T12769] team0: Port device dummy0 removed
[  781.236688][T12769] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  781.295547][T12790] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1789'.
[  781.344271][T12790] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1789'.
[  781.651626][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  782.108074][T12817] loop0: detected capacity change from 0 to 512
[  782.397296][T12817] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  782.692831][T12817] EXT4-fs (loop0): orphan cleanup on readonly fs
[  782.713803][T12817] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1795: Allocating blocks 41-42 which overlap fs metadata
[  782.738782][T12817] Quota error (device loop0): write_blk: dquota write failed
[  782.747634][T12817] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  782.759115][T12817] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1795: Allocating blocks 41-42 which overlap fs metadata
[  782.777358][T12817] Quota error (device loop0): write_blk: dquota write failed
[  782.789860][T12817] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  782.801771][T12817] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1795: Failed to acquire dquot type 1
[  782.815452][T12817] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  782.832654][T12817] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.1795: corrupted inode contents
[  782.847488][T12817] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #12: comm syz.0.1795: mark_inode_dirty error
[  782.865982][T12817] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.1795: corrupted inode contents
[  782.880842][T12817] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.1795: mark_inode_dirty error
[  782.905438][T12817] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.1795: corrupted inode contents
[  782.924768][T12817] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  782.941031][T12817] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #12: comm syz.0.1795: corrupted inode contents
[  782.958297][T12817] EXT4-fs error (device loop0): ext4_truncate:4301: inode #12: comm syz.0.1795: mark_inode_dirty error
[  782.971974][T12817] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  782.993827][T12817] EXT4-fs (loop0): 1 truncate cleaned up
[  783.006630][T12817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  783.406466][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  783.524127][T12825] syzkaller0: entered promiscuous mode
[  783.568320][T12825] syzkaller0: entered allmulticast mode
[  784.515703][T12799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  786.936159][T12831] netlink: 'syz.0.1799': attribute type 10 has an invalid length.
[  786.963553][T12831] bond0: (slave dummy0): Releasing backup interface
[  786.975039][T12831] dummy0: entered promiscuous mode
[  786.988162][T12831] team0: Port device dummy0 added
[  786.995981][T12832] netlink: 'syz.0.1799': attribute type 10 has an invalid length.
[  787.048095][T12832] dummy0: left promiscuous mode
[  787.066643][T12832] team0: Port device dummy0 removed
[  787.088615][T12832] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  787.159445][T12838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1802'.
[  787.198213][T12838] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1802'.
[  787.355998][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'.
[  787.908792][T12867] loop5: detected capacity change from 0 to 512
[  787.989425][T12867] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix.
[  788.072616][T12867] EXT4-fs (loop5): mount failed
[  788.140887][T12863] syzkaller0: entered promiscuous mode
[  788.166768][T12863] syzkaller0: entered allmulticast mode
[  788.644684][T12877] loop3: detected capacity change from 0 to 1024
[  791.510855][T12883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  793.331525][T12896] netlink: 'syz.3.1812': attribute type 10 has an invalid length.
[  793.350425][T12896] bond0: (slave dummy0): Releasing backup interface
[  793.361081][T12896] dummy0: entered promiscuous mode
[  793.367116][T12896] team0: Port device dummy0 added
[  793.391218][T12899] netlink: 'syz.3.1812': attribute type 10 has an invalid length.
[  793.401887][T12899] dummy0: left promiscuous mode
[  793.438127][T12899] team0: Port device dummy0 removed
[  793.460222][T12899] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  793.548775][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'.
[  794.217424][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  798.408348][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'.
[  799.054832][T12972] loop3: detected capacity change from 0 to 512
[  799.101951][T12972] EXT4-fs: Ignoring removed nobh option
[  799.141204][T12972] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  799.194677][T12972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002]
[  799.204387][T12972] EXT4-fs (loop3): orphan cleanup on readonly fs
[  799.217396][T12972] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1831: attempt to clear invalid blocks 1024 len 1
[  799.287187][T12972] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1831: bg 0: block 361: padding at end of block bitmap is not set
[  799.360242][T12972] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  799.395781][T12984] futex_wake_op: syz.6.1833 tries to shift op by 144; fix this program
[  800.102101][T12972] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1831: invalid indirect mapped block 1811939328 (level 0)
[  800.184073][T12972] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1831: invalid indirect mapped block 2185560079 (level 1)
[  800.390380][T12972] EXT4-fs (loop3): 1 truncate cleaned up
[  800.459378][T12972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  800.639445][T12990] syzkaller0: entered promiscuous mode
[  800.655338][T12990] syzkaller0: entered allmulticast mode
[  800.743516][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  801.330630][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  801.506258][T13005] netlink: 'syz.5.1825': attribute type 10 has an invalid length.
[  801.903244][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1838'.
[  802.341660][T13020] syzkaller0: entered promiscuous mode
[  802.358855][T13020] syzkaller0: entered allmulticast mode
[  802.480849][T13022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  802.536906][   T28] audit: type=1326 audit(1779532418.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1843" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe63619ce59 code=0x0
[  803.537482][T13053] loop0: detected capacity change from 0 to 1024
[  803.599067][T13053] EXT4-fs: Ignoring removed orlov option
[  803.656568][T13053] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  803.755653][T13053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  804.091543][   T28] audit: type=1800 audit(1779532419.990:7): pid=13058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1848" name="bus" dev="loop0" ino=19 res=0 errno=0
[  804.115464][    C1] vkms_vblank_simulate: vblank timer overrun
[  804.126348][   T28] audit: type=1800 audit(1779532420.020:8): pid=13053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1848" name="cgroup" dev="loop0" ino=18 res=0 errno=0
[  804.305298][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.784773][T13067] loop0: detected capacity change from 0 to 256
[  804.878297][T13067] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  806.846609][T13046] netlink: 'syz.6.1846': attribute type 10 has an invalid length.
[  806.868316][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'.
[  807.366737][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  807.916828][T13093] loop6: detected capacity change from 0 to 128
[  808.379292][T13072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  808.451760][T13109] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1861'.
[  808.867852][ T5152] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  808.920790][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.928755][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  809.026940][T13122] loop6: detected capacity change from 0 to 164
[  809.375807][ T5152] usb 4-1: Using ep0 maxpacket: 32
[  809.396842][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  809.411075][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  809.430982][ T5152] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  809.442326][T13119] syzkaller0: entered promiscuous mode
[  809.458056][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.465855][T13119] syzkaller0: entered allmulticast mode
[  809.487150][T13125] loop5: detected capacity change from 0 to 512
[  809.510652][ T5152] usb 4-1: config 0 descriptor??
[  809.533639][T13125] EXT4-fs: Ignoring removed nomblk_io_submit option
[  809.580449][ T5152] hub 4-1:0.0: USB hub found
[  809.612580][T13125] EXT4-fs: Ignoring removed i_version option
[  809.949069][T13125] EXT4-fs (loop5): 1 orphan inode deleted
[  809.976902][T13125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.127977][ T5152] hub 4-1:0.0: 1 port detected
[  810.630741][ T5152] usb 4-1: USB disconnect, device number 16
[  811.103276][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.281066][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  813.627408][T13155] loop3: detected capacity change from 0 to 512
[  813.661235][T13155] EXT4-fs (loop3): orphan cleanup on readonly fs
[  813.693664][T13155] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1874: corrupted in-inode xattr: invalid size in ea xattr
[  813.760205][T13155] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1874: couldn't read orphan inode 15 (err -117)
[  813.807481][T13155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  814.030475][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.382283][T13166] loop3: detected capacity change from 0 to 164
[  816.257939][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1869'.
[  816.273839][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1869'.
[  816.407483][T13157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  816.600206][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1879'.
[  816.753706][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  817.086339][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  817.439296][T13192] loop6: detected capacity change from 0 to 256
[  817.597031][T13192] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  818.518614][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1887'.
[  818.564639][T13207] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  818.574272][T13207] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  818.584171][T13207] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  818.593348][T13207] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  818.622550][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1887'.
[  818.730336][T13205] syzkaller0: entered promiscuous mode
[  818.748947][T13205] syzkaller0: entered allmulticast mode
[  820.883968][T13238] loop6: detected capacity change from 0 to 256
[  820.894461][T13238] FAT-fs (loop6): bogus logical sector size 128
[  820.909928][T13238] FAT-fs (loop6): Can't find a valid FAT filesystem
[  825.053528][T13254] loop5: detected capacity change from 0 to 128
[  825.211946][T13254] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  825.329745][T13254] ext4 filesystem being mounted at /453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  825.533184][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  825.759622][T13271] loop6: detected capacity change from 0 to 256
[  825.823041][T13271] FAT-fs (loop6): bogus logical sector size 128
[  825.862302][T13271] FAT-fs (loop6): Can't find a valid FAT filesystem
[  826.486201][T13281] loop6: detected capacity change from 0 to 512
[  826.750327][T13281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  826.872747][T13281] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  827.161485][ T9644] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  827.378166][ T9644] usb 6-1: Using ep0 maxpacket: 8
[  827.419236][ T9644] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  827.482371][ T9644] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  827.547107][ T9644] usb 6-1: config 0 has no interface number 0
[  827.589640][T12188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.627313][ T9644] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  827.663178][ T9644] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.716659][ T9644] usb 6-1: Product: syz
[  827.746186][ T9644] usb 6-1: Manufacturer: syz
[  827.772587][ T9644] usb 6-1: SerialNumber: syz
[  827.849216][ T9644] usb 6-1: config 0 descriptor??
[  828.164200][T13305] loop3: detected capacity change from 0 to 256
[  828.223865][ T9644] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  828.265384][ T5951] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  828.275897][T13305] FAT-fs (loop3): bogus logical sector size 128
[  828.288374][ T9644] usb 6-1: No valid video chain found.
[  828.318576][T13305] FAT-fs (loop3): Can't find a valid FAT filesystem
[  828.343076][ T9644] usb 6-1: USB disconnect, device number 14
[  830.745618][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  831.136629][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  832.159601][T13354] syzkaller0: entered promiscuous mode
[  832.165205][T13354] syzkaller0: entered allmulticast mode
[  832.844858][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1932'.
[  832.879909][T13363] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.887875][T13363] bridge0: port 1(bridge_slave_0) entered disabled state
[  833.193298][T13367] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1933'.
[  833.648764][T13370] syzkaller0: entered promiscuous mode
[  833.654452][T13370] syzkaller0: entered allmulticast mode
[  834.259636][T13391] input: syz1 as /devices/virtual/input/input8
[  837.340546][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1943'.
[  837.660991][T13410] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1944'.
[  838.328449][T10780] Bluetooth: hci1: unexpected event for opcode 0x007f
[  841.711809][T10780] Bluetooth: hci3: command 0x0406 tx timeout
[  841.913491][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'.
[  842.566993][T13468] syzkaller0: entered promiscuous mode
[  842.588653][T13468] syzkaller0: entered allmulticast mode
[  842.608954][T13471] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1956'.
[  842.629057][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  846.532444][T13501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1963'.
[  846.634363][T13504] loop5: detected capacity change from 0 to 16
[  846.671527][T13504] erofs: (device loop5): mounted with root inode @ nid 36.
[  846.731307][T13504] erofs: (device loop5): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x100000000
[  847.327149][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  847.569782][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  847.902626][T13536] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1972'.
[  847.990733][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'.
[  848.260901][T13540] syzkaller0: entered promiscuous mode
[  848.291938][T13540] syzkaller0: entered allmulticast mode
[  848.459670][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  850.330305][T13571] loop6: detected capacity change from 0 to 1024
[  850.563138][   T28] audit: type=1800 audit(1779532466.470:9): pid=13571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1981" name="bus" dev="loop6" ino=25 res=0 errno=0
[  850.613054][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  853.576272][T13578] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1983'.
[  853.585893][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1984'.
[  853.888416][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1986'.
[  854.094395][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  854.748499][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  855.166867][T13620] netlink: 'syz.0.1994': attribute type 1 has an invalid length.
[  855.357265][T13620] 8021q: adding VLAN 0 to HW filter on device bond6
[  855.389299][T13627] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1995'.
[  856.086477][T13632] syzkaller0: entered promiscuous mode
[  856.116564][T13632] syzkaller0: entered allmulticast mode
[  859.896147][T13658] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2004'.
[  859.905809][T13666] netlink: 'syz.5.2005': attribute type 1 has an invalid length.
[  860.114418][T13666] 8021q: adding VLAN 0 to HW filter on device bond4
[  860.140673][ T5776] Bluetooth: hci3: unexpected event for opcode 0x1407
[  860.162403][T13686] loop6: detected capacity change from 0 to 16
[  860.202406][T13686] erofs: (device loop6): mounted with root inode @ nid 36.
[  860.748197][ T5152] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  860.797980][T10835] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  860.979879][ T5152] usb 1-1: Using ep0 maxpacket: 8
[  861.002588][ T5152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  861.046014][ T5152] usb 1-1: config 0 has no interfaces?
[  861.063441][T10835] usb 4-1: not running at top speed; connect to a high speed hub
[  861.099554][ T5152] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  861.116987][T10835] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  861.129564][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.166400][T10835] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40
[  861.206016][T10835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.215931][T10835] usb 4-1: Product: syz
[  861.237445][ T5152] usb 1-1: config 0 descriptor??
[  861.255628][T10835] usb 4-1: Manufacturer: syz
[  861.281447][T10835] usb 4-1: SerialNumber: syz
[  861.450461][T13707] loop5: detected capacity change from 0 to 2048
[  861.498839][T13707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  861.659919][T13707] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  861.673496][T10835] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  861.711944][T10835] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc
[  861.996045][T10835] usb 4-1: USB disconnect, device number 17
[  862.275394][T13687] udevd[13687]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  863.377013][ T9626] usb 1-1: USB disconnect, device number 18
[  863.480912][T13717] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  863.536803][T13717] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  863.638822][T13707] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  864.189910][T13715] syzkaller0: entered promiscuous mode
[  864.236342][T13725] loop3: detected capacity change from 0 to 256
[  864.253723][T13715] syzkaller0: entered allmulticast mode
[  864.261338][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  864.297812][T13725] FAT-fs (loop3): bogus logical sector size 128
[  864.309545][T13725] FAT-fs (loop3): Can't find a valid FAT filesystem
[  867.974781][T13738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  871.018363][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  871.025503][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  872.014619][T13727] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2017'.
[  872.234632][T13760] loop5: detected capacity change from 0 to 1024
[  872.320095][T13762] loop6: detected capacity change from 0 to 256
[  872.417817][T13762] FAT-fs (loop6): bogus logical sector size 128
[  872.424164][T13762] FAT-fs (loop6): Can't find a valid FAT filesystem
[  873.250519][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  873.706534][T13781] loop5: detected capacity change from 0 to 512
[  873.787895][T13781] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  873.867827][T13781] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  873.951053][T13781] EXT4-fs error (device loop5): ext4_iget_extra_inode:4739: inode #15: comm syz.5.2030: corrupted in-inode xattr: e_value out of bounds
[  873.976949][T13781] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2030: couldn't read orphan inode 15 (err -117)
[  874.783903][T13791] loop6: detected capacity change from 0 to 512
[  876.457155][T13781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  876.470108][T13791] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  876.480237][T13791] EXT4-fs (loop6): orphan cleanup on readonly fs
[  876.491340][T13791] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present
[  876.501688][T13791] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  876.511189][T13791] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2031: Failed to acquire dquot type 1
[  876.523466][ T9626] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  876.531341][T13791] EXT4-fs (loop6): Remounting filesystem read-only
[  876.538012][T13791] EXT4-fs (loop6): 1 truncate cleaned up
[  876.618782][T13791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  876.787948][T13789] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  876.947109][ T9626] usb 1-1: device descriptor read/all, error -71
[  876.975465][T12188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.016106][T13781] syz_tun: entered allmulticast mode
[  877.142694][T13780] syz_tun: left allmulticast mode
[  877.325803][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.404007][T13800] syzkaller0: entered promiscuous mode
[  877.424037][T13800] syzkaller0: entered allmulticast mode
[  877.466640][T13801] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2034'.
[  882.339976][T13822] loop3: detected capacity change from 0 to 512
[  882.390397][T13822] EXT4-fs: Ignoring removed i_version option
[  882.474008][T13822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  882.502573][T13822] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  882.570677][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  883.801665][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  883.852103][T13841] input: syz1 as /devices/virtual/input/input9
[  884.470555][T13853] loop0: detected capacity change from 0 to 1764
[  884.478236][T13855] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2046'.
[  884.656728][ T9644] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  884.816761][T13853] iso9660: Corrupted directory entry in block 2 of inode 1920
[  884.827800][ T9644] usb 7-1: device descriptor read/64, error -71
[  884.867410][T13857] syzkaller0: entered promiscuous mode
[  884.874754][T13857] syzkaller0: entered allmulticast mode
[  885.125799][ T9644] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  885.302882][ T9644] usb 7-1: device descriptor read/64, error -71
[  885.430212][ T9644] usb usb7-port1: attempt power cycle
[  885.838719][ T9644] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  885.885914][ T9644] usb 7-1: device descriptor read/8, error -71
[  886.160229][ T9644] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  886.201708][ T9644] usb 7-1: device descriptor read/8, error -71
[  886.328941][ T9644] usb usb7-port1: unable to enumerate USB device
[  888.452796][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  888.668257][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  888.827581][T13888] syzkaller0: entered promiscuous mode
[  888.868025][T13888] syzkaller0: entered allmulticast mode
[  889.858038][T13895] binder: BINDER_SET_CONTEXT_MGR already set
[  889.864637][T13895] binder: 13893:13895 ioctl 4018620d 200000000040 returned -16
[  891.620059][T13891] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2056'.
[  892.417567][T13905] syzkaller0: entered promiscuous mode
[  892.475984][T13905] syzkaller0: entered allmulticast mode
[  892.636426][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  896.806976][T13948] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2068'.
[  897.066759][T13955] syzkaller0: entered promiscuous mode
[  897.075260][T13955] syzkaller0: entered allmulticast mode
[  897.297190][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  897.584706][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  898.921286][T13988] loop5: detected capacity change from 0 to 8
[  899.166201][T13986] loop3: detected capacity change from 0 to 1024
[  899.379741][T13986] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  899.442307][T13986] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  899.517839][T13986] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  899.580918][T13986] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #3: comm syz.3.2077: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  899.677545][T13986] EXT4-fs (loop3): no journal found
[  899.703187][T13986] EXT4-fs (loop3): can't get journal size
[  899.725342][T13986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  899.979294][T13995] syzkaller0: entered promiscuous mode
[  900.018338][T13995] syzkaller0: entered allmulticast mode
[  901.941816][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  902.343769][ T5776] Bluetooth: hci1: unexpected event for opcode 0x007f
[  904.239778][T14004] syzkaller0: entered promiscuous mode
[  904.245365][T14004] syzkaller0: entered allmulticast mode
[  904.463039][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  908.513789][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  909.222188][T14061] syzkaller0: entered promiscuous mode
[  909.283296][T14061] syzkaller0: entered allmulticast mode
[  919.790926][ T9646] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  920.002062][ T9646] usb 6-1: Using ep0 maxpacket: 32
[  920.022426][ T9646] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  920.036324][ T9646] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  920.050289][ T9646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.058723][ T9646] usb 6-1: Product: syz
[  920.062925][ T9646] usb 6-1: Manufacturer: syz
[  920.067570][ T9646] usb 6-1: SerialNumber: syz
[  920.078874][ T9646] usb 6-1: config 0 descriptor??
[  920.094139][ T9646] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  920.155403][ T9646] snd-usb-audio: probe of 6-1:0.0 failed with error -2
[  920.237998][T14097] udevd[14097]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  921.580099][T14067] syzkaller0: entered promiscuous mode
[  921.585654][T14067] syzkaller0: entered allmulticast mode
[  922.737998][ T9644] usb 6-1: USB disconnect, device number 15
[  923.124172][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  923.264829][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  930.396959][T14145] kvm: user requested TSC rate below hardware speed
[  931.803781][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.811382][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  935.263142][T14171] loop5: detected capacity change from 0 to 16
[  935.666125][T14171] erofs: (device loop5): mounted with root inode @ nid 36.
[  936.022836][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  939.328036][T14187] loop3: detected capacity change from 0 to 512
[  939.418437][T14187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  939.503842][T14187] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  940.145976][ T5777] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  940.224358][ T5777] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  940.606850][ T5777] bond3: (slave syz_tun): Removing an active aggregator
[  940.643636][ T5777] bond3: (slave syz_tun): Releasing backup interface
[  940.738841][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  940.759543][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  943.215134][T14211] netlink: 'syz.0.2131': attribute type 1 has an invalid length.
[  943.340461][T14211] 8021q: adding VLAN 0 to HW filter on device bond7
[  943.396421][T14215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2131'.
[  943.465437][T14215] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.472794][T14215] bridge0: port 2(bridge_slave_1) entered forwarding state
[  943.480473][T14215] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.487752][T14215] bridge0: port 1(bridge_slave_0) entered forwarding state
[  943.551292][T14215] bridge0: entered allmulticast mode
[  943.968758][T11610] tipc: Left network mode
[  944.376806][T11610] bond5: (slave ip6gretap0): Removing an active aggregator
[  944.403672][   T49] bond5: Warning: Found an uninitialized port
[  944.441683][T11610] bond5: (slave ip6gretap0): Releasing backup interface
[  944.839264][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  946.602779][T10780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  946.618015][T10780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  946.638796][T10780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  947.177319][T10780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  947.301114][T10780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  947.316952][T10780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  947.627558][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  948.675984][T14283] loop6: detected capacity change from 0 to 1024
[  948.748101][T11610] team0: left promiscuous mode
[  948.758364][T11610] team_slave_0: left promiscuous mode
[  948.764707][T11610] team_slave_1: left promiscuous mode
[  948.782703][T14283] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  948.951734][T14283] UDF-fs: warning (device loop6): udf_fill_super: No fileset found
[  948.978171][T11610] bridge0: left promiscuous mode
[  949.381299][T10780] Bluetooth: hci1: command tx timeout
[  949.797718][T11610] hsr_slave_0: left promiscuous mode
[  949.827741][ T9644] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  949.871075][T11610] hsr_slave_1: left promiscuous mode
[  949.896945][T11610] batman_adv: batadv0: Removing interface: batadv_slave_0
[  949.922649][T11610] batman_adv: batadv0: Removing interface: batadv_slave_1
[  949.942813][T11610] bridge_slave_1: left allmulticast mode
[  949.957447][T11610] bridge_slave_1: left promiscuous mode
[  949.967158][T11610] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.982367][T11610] bridge_slave_0: left allmulticast mode
[  949.990874][T11610] bridge_slave_0: left promiscuous mode
[  949.996696][T11610] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.040172][ T9644] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[  950.055667][ T9644] usb 7-1: config 0 has no interface number 0
[  950.090245][ T9644] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  950.133518][ T9644] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.177710][ T9644] usb 7-1: Product: syz
[  950.181959][ T9644] usb 7-1: Manufacturer: syz
[  950.186866][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  950.217275][ T9644] usb 7-1: SerialNumber: syz
[  950.276765][ T9644] usb 7-1: config 0 descriptor??
[  950.526365][ T9644] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected
[  950.579121][ T9644] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81
[  950.635120][ T9644] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1
[  950.687914][ T9644] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2
[  950.710092][ T9644] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  951.035488][ T9644] usb 7-1: USB disconnect, device number 6
[  951.059754][ T9644] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  951.106134][ T9644] keyspan 7-1:0.133: device disconnected
[  951.177526][T11610] bond9 (unregistering): Released all slaves
[  951.443908][T10780] Bluetooth: hci0: unexpected event for opcode 0x007f
[  951.457735][T10780] Bluetooth: hci1: command tx timeout
[  952.025802][T11610] bond8 (unregistering): Released all slaves
[  953.540381][T10780] Bluetooth: hci2: unexpected event for opcode 0x007f
[  953.547809][T10780] Bluetooth: hci1: command tx timeout
[  953.839924][T11610] bond7 (unregistering): Released all slaves
[  954.343335][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  954.778207][T11610] bond6 (unregistering): Released all slaves
[  955.643849][ T5776] Bluetooth: hci1: command tx timeout
[  956.055650][ T5776] Bluetooth: hci3: unexpected event for opcode 0x007f
[  959.466183][T11610] bond5 (unregistering): Released all slaves
[  960.068495][T11610] bond4 (unregistering): Released all slaves
[  960.784261][T11610] bond3 (unregistering): Released all slaves
[  961.098961][ T5776] Bluetooth: hci0: unexpected event for opcode 0x007f
[  961.329556][ T5776] Bluetooth: hci2: unexpected event for opcode 0x007f
[  962.203931][T11610] bond2 (unregistering): Released all slaves
[ 1146.817561][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 184s!
[ 1146.827177][    C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 183s!
[ 1146.836216][    C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 181s!
[ 1146.845422][    C0] Showing busy workqueues and worker pools:
[ 1146.851375][    C0] workqueue events: flags=0x0
[ 1146.856277][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=8/256 refcnt=9
[ 1146.856320][    C0]     pending: 3*nsim_dev_hwstats_traffic_work, psi_avgs_work, kfree_rcu_monitor, 2*ovs_dp_masks_rebalance, psi_avgs_work
[ 1146.856452][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=13/256 refcnt=14
[ 1146.856490][    C0]     in-flight: 9646:switchdev_deferred_process_work switchdev_deferred_process_work
[ 1146.856554][    C0]     pending: 4*nsim_dev_hwstats_traffic_work, vmstat_shepherd, 2*ovs_dp_masks_rebalance, psi_avgs_work, ovs_dp_masks_rebalance, psi_avgs_work, kfree_rcu_monitor
[ 1146.856719][    C0] workqueue events_long: flags=0x0
[ 1146.916069][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[ 1146.916120][    C0]     pending: 2*defense_work_handler
[ 1146.916168][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[ 1146.916211][    C0]     pending: 4*defense_work_handler
[ 1146.916256][    C0] workqueue events_unbound: flags=0x2
[ 1146.947962][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=7/512 refcnt=8
[ 1146.948007][    C0]     pending: 2*cfg80211_wiphy_work, 2*nsim_dev_trap_report_work, flush_memcg_stats_dwork, 2*macvlan_process_broadcast
[ 1146.948109][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=14/512 refcnt=15
[ 1146.948141][    C0]     pending: 2*cfg80211_wiphy_work, 3*nsim_dev_trap_report_work, toggle_allocation_gate, 2*nsim_dev_trap_report_work, cfg80211_wiphy_work, crng_reseed, 3*idle_cull_fn, macvlan_process_broadcast
[ 1146.948301][    C0] workqueue events_freezable: flags=0x4
[ 1147.000379][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.000427][    C0]     pending: update_balloon_stats_func
[ 1147.000460][    C0] workqueue events_power_efficient: flags=0x80
[ 1147.020044][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6
[ 1147.020091][    C0]     pending: wg_ratelimiter_gc_entries, neigh_managed_work, do_cache_clean, neigh_periodic_work, gc_worker
[ 1147.020209][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[ 1147.020250][    C0]     pending: neigh_managed_work, neigh_periodic_work, check_lifetime
[ 1147.020322][    C0] workqueue netns: flags=0xe000a
[ 1147.060635][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4
[ 1147.060674][    C0]     in-flight: 11610:cleanup_net
[ 1147.060714][    C0] workqueue mm_percpu_wq: flags=0x8
[ 1147.078187][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.078230][    C0]     pending: vmstat_update
[ 1147.078271][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.078309][    C0]     pending: vmstat_update
[ 1147.078350][    C0] workqueue writeback: flags=0x4a
[ 1147.108045][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2
[ 1147.108090][    C0]     pending: wb_workfn
[ 1147.108130][    C0] workqueue kblockd: flags=0x18
[ 1147.124513][    C0]   pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[ 1147.124558][    C0]     pending: blk_mq_timeout_work
[ 1147.124636][    C0] workqueue dm_bufio_cache: flags=0x8
[ 1147.143061][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.143108][    C0]     pending: work_fn
[ 1147.143144][    C0] workqueue ipv6_addrconf: flags=0xe000a
[ 1147.160617][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=9
[ 1147.160654][    C0]     in-flight: 78:addrconf_verify_work
[ 1147.160691][    C0]     inactive: 5*addrconf_verify_work
[ 1147.160717][    C0] workqueue krxrpcd: flags=0xa001a
[ 1147.184187][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=8
[ 1147.184231][    C0]     pending: rxrpc_peer_keepalive_worker
[ 1147.184267][    C0]     inactive: 4*rxrpc_peer_keepalive_worker
[ 1147.184306][    C0] workqueue bat_events: flags=0xe000a
[ 1147.209547][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=36
[ 1147.209588][    C0]     pending: batadv_nc_worker
[ 1147.209622][    C0]     inactive: 3*batadv_nc_worker, 4*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_mcast_mla_update, 7*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_tt_purge, batadv_dat_purge, 2*batadv_bla_periodic_work, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge
[ 1147.209873][    C0] workqueue wg-kex-wg0: flags=0x6
[ 1147.255525][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3
[ 1147.255573][    C0]     pending: 2*wg_packet_handshake_send_worker
[ 1147.255612][    C0] workqueue wg-kex-wg1: flags=0x6
[ 1147.274315][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3
[ 1147.274359][    C0]     pending: 2*wg_packet_handshake_send_worker
[ 1147.274403][    C0] workqueue wg-kex-wg0: flags=0x6
[ 1147.293102][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2
[ 1147.293146][    C0]     pending: wg_queued_expired_zero_key_material
[ 1147.293178][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3
[ 1147.293225][    C0]     pending: 2*wg_packet_handshake_send_worker
[ 1147.293256][    C0] workqueue wg-kex-wg1: flags=0x6
[ 1147.325741][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3
[ 1147.325785][    C0]     pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material
[ 1147.325839][    C0] workqueue wg-kex-wg2: flags=0x6
[ 1147.347628][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3
[ 1147.347672][    C0]     pending: 2*wg_packet_handshake_send_worker
[ 1147.347708][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2
[ 1147.347741][    C0]     pending: wg_queued_expired_zero_key_material
[ 1147.347771][    C0] workqueue bond1: flags=0xa000a
[ 1147.380189][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.380229][    C0]     pending: bond_mii_monitor
[ 1147.380269][    C0]     inactive: bond_3ad_state_machine_handler
[ 1147.380306][    C0] workqueue bond2: flags=0xa000a
[ 1147.403448][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.403492][    C0]     pending: bond_3ad_state_machine_handler
[ 1147.403526][    C0]     inactive: bond_mii_monitor
[ 1147.403561][    C0] workqueue bond1: flags=0xa000a
[ 1147.426715][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.426755][    C0]     pending: bond_mii_monitor
[ 1147.426791][    C0]     inactive: bond_3ad_state_machine_handler
[ 1147.426827][    C0] workqueue bond2: flags=0xa000a
[ 1147.449990][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.450032][    C0]     pending: bond_mii_monitor
[ 1147.450070][    C0]     inactive: bond_3ad_state_machine_handler
[ 1147.450106][    C0] workqueue bond3: flags=0xa000a
[ 1147.473236][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.473276][    C0]     pending: bond_3ad_state_machine_handler
[ 1147.473321][    C0]     inactive: bond_mii_monitor
[ 1147.473351][    C0] workqueue bond4: flags=0xa000a
[ 1147.496472][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.496512][    C0]     pending: bond_mii_monitor
[ 1147.496550][    C0]     inactive: bond_3ad_state_machine_handler
[ 1147.496592][    C0] workqueue bond5: flags=0xa000a
[ 1147.519748][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.519788][    C0]     pending: bond_3ad_state_machine_handler
[ 1147.519829][    C0]     inactive: bond_mii_monitor
[ 1147.519868][    C0] workqueue wg-crypt-wg0: flags=0x28
[ 1147.543332][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.543377][    C0]     pending: wg_packet_encrypt_worker
[ 1147.543411][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.543452][    C0]     pending: wg_packet_encrypt_worker
[ 1147.543480][    C0] workqueue wg-crypt-wg1: flags=0x28
[ 1147.575321][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.575368][    C0]     pending: wg_packet_encrypt_worker
[ 1147.575401][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.575442][    C0]     pending: wg_packet_encrypt_worker
[ 1147.575470][    C0] workqueue wg-crypt-wg2: flags=0x28
[ 1147.607283][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.607329][    C0]     pending: wg_packet_encrypt_worker
[ 1147.607362][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[ 1147.607403][    C0]     pending: wg_packet_encrypt_worker
[ 1147.607431][    C0] workqueue bond6: flags=0xa000a
[ 1147.639011][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.639052][    C0]     pending: bond_3ad_state_machine_handler
[ 1147.639099][    C0]     inactive: bond_mii_monitor
[ 1147.639129][    C0] workqueue bond4: flags=0xa000a
[ 1147.662259][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.662300][    C0]     pending: bond_3ad_state_machine_handler
[ 1147.662343][    C0]     inactive: bond_mii_monitor
[ 1147.662372][    C0] workqueue bond7: flags=0xa000a
[ 1147.685504][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5
[ 1147.685546][    C0]     pending: bond_mii_monitor
[ 1147.685578][    C0]     inactive: bond_3ad_state_machine_handler
[ 1147.685618][    C0] workqueue hci1: flags=0xa0012
[ 1147.708677][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4
[ 1147.708730][    C0]     pending: hci_conn_timeout
[ 1147.708768][    C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=184s workers=6 idle: 9626 9644 8 13178 12478
[ 1147.708850][    C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=185s workers=14 idle: 49 9505 33 6068 12 11573 3432 1321 1120 4545 987 6067
[ 1147.708958][    C0] Showing backtraces of running workers in stalled CPU-bound worker pools:
[ 1149.447520][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1149.454544][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=105985, q=36 ncpus=2)
[ 1149.462312][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295052040-4295041537), jiffies_till_next_fqs=1, root ->qsmask 0x0
[ 1149.475731][    C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g105985 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1149.487058][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1149.497069][    C1] rcu: RCU grace-period kthread stack dump:
[ 1149.502984][    C1] task:rcu_preempt     state:R  running task     stack:26992 pid:17    ppid:2      flags:0x00004000
[ 1149.513837][    C1] Call Trace:
[ 1149.517158][    C1]  <TASK>
[ 1149.520136][    C1]  __schedule+0x1553/0x45a0
[ 1149.524709][    C1]  ? asan.module_dtor+0x20/0x20
[ 1149.529609][    C1]  ? enqueue_timer+0x4cd/0x550
[ 1149.534429][    C1]  ? __mod_timer+0x984/0xdb0
[ 1149.539085][    C1]  schedule+0xbd/0x170
[ 1149.543205][    C1]  schedule_timeout+0x188/0x2d0
[ 1149.548107][    C1]  ? console_conditional_schedule+0x40/0x40
[ 1149.554056][    C1]  ? update_process_times+0x1b0/0x1b0
[ 1149.559478][    C1]  ? prepare_to_swait_event+0x339/0x360
[ 1149.565074][    C1]  rcu_gp_fqs_loop+0x313/0x1590
[ 1149.569966][    C1]  ? rcu_gp_init+0x1162/0x1560
[ 1149.574774][    C1]  ? rcu_gp_kthread+0x3b0/0x3b0
[ 1149.579667][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1149.585609][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1149.590865][    C1]  ? rcu_gp_init+0x1560/0x1560
[ 1149.595665][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1149.601698][    C1]  ? finish_swait+0xc7/0x1d0
[ 1149.606339][    C1]  rcu_gp_kthread+0x9d/0x3b0
[ 1149.610975][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1149.616129][    C1]  ? __kthread_parkme+0x7a/0x1c0
[ 1149.621110][    C1]  ? __kthread_parkme+0x162/0x1c0
[ 1149.626180][    C1]  kthread+0x2fa/0x390
[ 1149.630291][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1149.635448][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1149.640082][    C1]  ret_from_fork+0x48/0x80
[ 1149.644545][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1149.649189][    C1]  ret_from_fork_asm+0x11/0x20
[ 1149.654013][    C1]  </TASK>
[ 1149.657066][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1149.663433][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 1149.670496][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1149.680603][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 1149.686293][    C1] Code: b9 20 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 54 41 00 fb f4 <c3> 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80
[ 1149.705945][    C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6
[ 1149.712057][    C1] RAX: 47184fc2df9f0f00 RBX: ffffffff8162affd RCX: 47184fc2df9f0f00
[ 1149.720068][    C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9860
[ 1149.728075][    C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65
[ 1149.736087][    C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8
[ 1149.744104][    C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000
[ 1149.752115][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1149.761095][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1149.767715][    C1] CR2: 00007f48840a11e9 CR3: 000000002c8b2000 CR4: 00000000003506e0
[ 1149.775816][    C1] Call Trace:
[ 1149.779133][    C1]  <TASK>
[ 1149.782103][    C1]  default_idle+0x13/0x20
[ 1149.786499][    C1]  default_idle_call+0x6c/0xa0
[ 1149.791324][    C1]  do_idle+0x33d/0x590
[ 1149.795455][    C1]  ? idle_inject_timer_fn+0x60/0x60
[ 1149.800706][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1149.806930][    C1]  cpu_startup_entry+0x43/0x60
[ 1149.811747][    C1]  start_secondary+0xee/0xf0
[ 1149.816393][    C1]  secondary_startup_64_no_verify+0x179/0x17b
[ 1149.822529][    C1]  </TASK>