last executing test programs:

10m34.902945858s ago: executing program 2 (id=3):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0])
setpriority(0x2, 0x0, 0x8000000000000000)
socket$netlink(0x10, 0x3, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000001c0)=0x4)
io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog256-generic\x00'}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000))
r9 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"})
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f00000002800200", 0x2c}], 0x1}, 0x24008080)
syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

10m33.268804405s ago: executing program 2 (id=8):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)

10m32.742207548s ago: executing program 2 (id=10):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000080)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x12, 0xd8}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x1}, 0x10}, 0x94)
r7 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f00000044c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4044880)
ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000140)={{0xbf, 0x1}, {0xf, 0xfc}, 0x3, 0x6})
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
inotify_init1(0x80000)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003ec0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0x5423, 0x0)

10m28.629033892s ago: executing program 2 (id=12):
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

10m13.92472647s ago: executing program 32 (id=12):
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

5m19.467701998s ago: executing program 5 (id=631):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40084)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m9.197170494s ago: executing program 1 (id=658):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)
r2 = eventfd2(0xa, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4})
write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8)

5m9.116550066s ago: executing program 5 (id=660):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r4 = fsmount(r3, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(r1, r5, r7)
fchdir(r4)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000010002104", @ANYRES32], 0x74}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50)

5m7.803936896s ago: executing program 1 (id=664):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x9, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x10000000000001, 0xffffffffffffffff, 0x2000000000000000, 0xee, 0x8d], 0xeeee8000, 0x2010d3})
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000005480)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000600)=""/26)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0x3, 0x2)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m5.654914505s ago: executing program 5 (id=665):
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

5m1.890556902s ago: executing program 5 (id=669):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000ff1c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60", 0x2a}, {&(0x7f00000022c0)="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", 0xfd1}], 0x2}, 0x8000)

4m59.499161487s ago: executing program 1 (id=670):
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

4m58.000599541s ago: executing program 1 (id=673):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$cont(0x19, r5, 0x7effffffffffffff, 0x7)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7ff, 0x9, 0x1, 0xfa, 0x3, 0x7fff, 0x3, 0x7, 0xcc, 0x8, 0x0, 0xa, 0x4, 0x7423, 0x7fff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000580)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110)
sendto$packet(r6, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14)

4m56.186195013s ago: executing program 5 (id=675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r4 = fsmount(r3, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(r1, r5, r7)
fchdir(r4)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000010002104", @ANYRES32], 0x74}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50)

4m52.318812432s ago: executing program 1 (id=681):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x78, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002200)={@fd, @flat=@handle={0x73682a85, 0x101, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x0, 0x3a}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x2000}], 0x0, 0x0, 0x0})

4m51.360862484s ago: executing program 5 (id=683):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040005, 0x0, 0xffffffff, 0x0, 0x40000, 0x0, 0x404}})

4m51.260693116s ago: executing program 1 (id=684):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4d, 0x2000)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x207, 0x80742, 0x0, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}})
ptrace$poke(0x420f, r1, 0x0, 0x101)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'lo\x00'})
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x18)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4m35.640877936s ago: executing program 33 (id=684):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4d, 0x2000)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x207, 0x80742, 0x0, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}})
ptrace$poke(0x420f, r1, 0x0, 0x101)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'lo\x00'})
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x18)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4m35.506245238s ago: executing program 34 (id=683):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040005, 0x0, 0xffffffff, 0x0, 0x40000, 0x0, 0x404}})

2m37.030331431s ago: executing program 3 (id=903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440)
syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)

2m33.986875451s ago: executing program 3 (id=908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m31.406784131s ago: executing program 3 (id=909):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x841)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000340)=""/90)

2m30.020723062s ago: executing program 3 (id=912):
openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101402)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x20, r5, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4000)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10004)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
io_submit(0x0, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r7, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
fcntl$setstatus(r3, 0x4, 0x2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

2m28.793134331s ago: executing program 3 (id=917):
r0 = socket$inet6(0xa, 0x2, 0x0)
setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000340)="cf99c5727c0e6af44ce028c7f8c4cb61eb6eb0be9324f72b384882eda76b9ed19823503416aa82666de4a2d2371eb022f9245f69dd5056737d78b92ea059a066e39e6a87b1c669eaf0424d0a218a903d46662ce36f82d912f97c69238be732a04c8b30d9456477e8864c4ddb655e3e03c887846429438a1a7929cfa1f5825410e079ea8f26a8cd5c49e7e80c796788854dfd4372107e4d37f375479f92fc0064716f55a807722af3cac2074817a59232b66fcd995e6297cd0d1be0404ed020b1e7", 0xc1, 0x1)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, 0x0, 0xfdef)

2m23.961585642s ago: executing program 3 (id=922):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r1, 0x0, 0x4880)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r3=>0x0})
socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x2, 0x7, 0x80000000, {0x6, 0x1, 0x3, 0x6, 0x200, 0xc6}, {0x0, 0x0, 0x1, 0x5, 0x4, 0x10001}, 0x7fffffff, 0x6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

2m8.3855126s ago: executing program 35 (id=922):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r1, 0x0, 0x4880)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r3=>0x0})
socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x2, 0x7, 0x80000000, {0x6, 0x1, 0x3, 0x6, 0x200, 0xc6}, {0x0, 0x0, 0x1, 0x5, 0x4, 0x10001}, 0x7fffffff, 0x6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

26.12374373s ago: executing program 8 (id=1229):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

23.149003018s ago: executing program 8 (id=1237):
openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101402)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x20, r5, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4000)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x14, r7, 0x114, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10004)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
io_submit(0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
fcntl$setstatus(r3, 0x4, 0x2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

20.121636218s ago: executing program 8 (id=1241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0104000000000000000001000002090001004be8a6d10b69d021538c8690ab2873797a30000000002c000000030a010800000000000000000100fffe0900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280001800e000100696d6d65646961746500000014000280080001400000000008000280040001000900010073797a300000000014000000110001"], 0xc8}}, 0x4090)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc04, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0)
iopl(0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r7=>0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000)
mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x81001f, &(0x7f0000000980)='norecovery')

16.365251804s ago: executing program 8 (id=1245):
socket$inet6(0xa, 0x2, 0x3a)
syz_open_dev$sndctrl(&(0x7f0000000080), 0xe544, 0x902)
pipe(&(0x7f0000000000))
eventfd2(0x0, 0x80800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x4)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040))
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xffffeffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xa, 0x0, 0x2000000097, 0x10, 0x4, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15.811051247s ago: executing program 8 (id=1248):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb00", @ANYRESHEX=r0, @ANYRES16=r0], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket(0x28, 0x3, 0x6)
syz_open_dev$dri(0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8820}, 0xc0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0)
ftruncate(r2, 0x101fff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'netdevsim0\x00'})

13.133337438s ago: executing program 8 (id=1255):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x18}, 0x50)
shutdown(r0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2f, 0xc8}}}, 0x6)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000))
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

7.039212859s ago: executing program 6 (id=1265):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0xd0000000)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000300)={@link_local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "d663cd75673f3c2fdc000000000000000100", "056980b2e865284992526b3f12744020cdf770280290c865754e85f2769a66bd"}}}}}}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0)
read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200000)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000021c0), 0x0, 0x80801)
recvmmsg(r8, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)=""/63, 0x3f}], 0x1}, 0x8}], 0x1, 0x1, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
sendfile(r6, r6, 0x0, 0x1002000ff)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0xffffffffffffffda, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.046305644s ago: executing program 7 (id=1266):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004891)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES16=r1, @ANYRES32=0x0], 0xa8}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x28c)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x5, 0x1, 0x609152b0, 0x2, 0x2e, "53ccd200"})
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0xb, 0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/233, 0xe9}], 0x1, &(0x7f0000000740)=""/236, 0xec}, 0xe5}, {{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/162, 0xa2}, 0xf8}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000002000)=@phonet, 0x80, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/38, 0x26}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/3, 0x3}, {&(0x7f0000002240)=""/163, 0xa3}], 0x4, &(0x7f00000047c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000057c0)=@l2tp, 0x80, &(0x7f0000005b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000005ac0)=""/73, 0x49}], 0x4, &(0x7f0000005b80)}, 0x1}, {{&(0x7f0000005bc0)=@tipc, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005c40)=""/108, 0x6c}], 0x1, &(0x7f0000005d80)=""/182, 0xb6}, 0x10}, {{&(0x7f0000007300)=@x25={0x9, @remote}, 0x80, &(0x7f0000007640)=[{0x0}, {0x0}], 0x2, &(0x7f0000007680)=""/114, 0x72}, 0x7}], 0x7, 0x1, &(0x7f0000008a80))
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04050400c8001443a9f6a39a4102c90569311618276faaa1a57d767370291b40957c5557a4f47f70e62771dd3c08e804ce90f7bc5bed779a8071c344031c4993b1dc6551479467d1a70d1517d47646d468bee49c58"], 0x7)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)

4.034644118s ago: executing program 6 (id=1269):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x400869ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

3.893669561s ago: executing program 4 (id=1270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)

3.726312785s ago: executing program 7 (id=1272):
socket$inet6(0xa, 0x2, 0x3a)
syz_open_dev$sndctrl(&(0x7f0000000080), 0xe544, 0x902)
pipe(&(0x7f0000000000))
eventfd2(0x0, 0x80800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x4)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040))
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xffffeffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xa, 0x0, 0x2000000097, 0x10, 0x4, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.682553076s ago: executing program 6 (id=1273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, 0x0, 0x0)

3.258782586s ago: executing program 4 (id=1275):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

3.224327046s ago: executing program 0 (id=1276):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r0)
dup(r0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000)

3.154253938s ago: executing program 7 (id=1277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
socket$alg(0x26, 0x5, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000700)={r2, &(0x7f0000000600)='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n', 0x2001, &(0x7f0000000640)={@_ha_fsid={[0x10000, 0x85b2]}, {0xa3b4, 0x4, 0x8, 0x6b}}, 0x6, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0xfdce})
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d", 0x4a}], 0x3}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
read(r4, &(0x7f0000000100)=""/41, 0x29)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={<r5=>0x0, @multicast1, @empty}, &(0x7f0000000240)=0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x14, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000010)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'gre0\x00', <r9=>0x0, 0x21, 0x7, 0x4, 0x8000, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x66, 0x0, 0x9, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@ra={0x94, 0x3}, @generic={0x89, 0x5, "bf993d"}, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "52aece664f389a8fec2912b0ab"}]}, @cipso={0x86, 0xb, 0x2, [{0x0, 0x5, "2c8a70"}]}, @noop, @rr={0x7, 0x7, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0x6, [@remote, @private=0xa010100, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x4a, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x30000000}, {@multicast2, 0x3000000}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', <r11=>0x0, 0x2f, 0x5, 0x3, 0x9, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x40, 0x8000, 0xfffffff2, 0x7}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf250f000000740001800800010004a4e5e94a2b36ed3e05d57d3acf75ee3d892fd2ab24f8cafcf11d3736c9ae3d3603aa12063ed6d43dc8abf4643092394ad12448e899af5cc9fbc04cd7b3cdb7a8d2af8444efb616fc58541b1668787da30c2c21eb558f69b69ff8bb69714e1067d9fc83896c7e6037f0e09f1f030076d7418bb6d958d64c8aac65d038104a72b9ca283d6fb0a1cff6ec3bc4ad9815f21bebe07dea93ce6bd1ba11eb9150f1a4763df2d7a99be2f97b3c7e61588230ffae34678003fe414e11318b9ee96fbbd3539c54", @ANYRES32=r5, @ANYBLOB="14000200627269646765300000000000000000001400020073797a6b616c6c65723000000000000014000200627269646765300000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000300030000002400018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000300020000"], 0xac}, 0x1, 0x0, 0x0, 0x20042805}, 0x4000004)
r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x80681, 0x0)
pwrite64(r12, &(0x7f0000000080)="625430c10d", 0xff3c, 0x100000001)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x20, 0x0, 0x3, 0x0, 0x800010100000, 0x4}, 0x0, &(0x7f00000000c0)={0x1b, 0x3, 0x0, 0x800000000000000, 0x0, 0x200000000, 0x6a9, 0x4000000000}, 0x0, 0x0)
r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r14, 0x80044dfb, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x18, 0x1c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}]}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)

3.02644939s ago: executing program 4 (id=1278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r4 = fsmount(r3, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(r1, r5, r7)
fchdir(r4)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000010002104", @ANYRES32], 0x74}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50)

2.967877382s ago: executing program 0 (id=1279):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

1.989311975s ago: executing program 6 (id=1280):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.897260057s ago: executing program 4 (id=1281):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

1.808164129s ago: executing program 7 (id=1282):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004891)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES16=r1, @ANYRES32=0x0], 0xa8}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x28c)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x5, 0x1, 0x609152b0, 0x2, 0x2e, "53ccd200"})
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0xb, 0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/233, 0xe9}], 0x1, &(0x7f0000000740)=""/236, 0xec}, 0xe5}, {{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/162, 0xa2}, 0xf8}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000002000)=@phonet, 0x80, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/38, 0x26}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/3, 0x3}, {&(0x7f0000002240)=""/163, 0xa3}], 0x4, &(0x7f00000047c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000057c0)=@l2tp, 0x80, &(0x7f0000005b40)=[{0x0}, {&(0x7f0000005a00)=""/190, 0xbe}, {&(0x7f0000005ac0)=""/73, 0x49}], 0x3, &(0x7f0000005b80)}, 0x1}, {{&(0x7f0000005bc0)=@tipc, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005c40)=""/108, 0x6c}], 0x1, &(0x7f0000005d80)=""/182, 0xb6}, 0x10}, {{&(0x7f0000007300)=@x25={0x9, @remote}, 0x80, &(0x7f0000007640)=[{0x0}, {0x0}], 0x2, &(0x7f0000007680)=""/114, 0x72}, 0x7}], 0x7, 0x1, &(0x7f0000008a80))
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04050400c8001443a9f6a39a4102c90569311618276faaa1a57d767370291b40957c5557a4f47f70e62771dd3c08e804ce90f7bc5bed779a8071c344031c4993b1dc6551479467d1a70d1517d47646d468bee49c58"], 0x7)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)

1.630656363s ago: executing program 0 (id=1283):
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x400869ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

1.574806084s ago: executing program 4 (id=1284):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
clock_gettime(0x0, &(0x7f00000025c0))
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.3247784s ago: executing program 6 (id=1285):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0104000000000000000001000002090001004be8a6d10b69d021538c8690ab2873797a30000000002c000000030a010800000000000000000100fffe0900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280001800e000100696d6d65646961746500000014000280080001400000000008000280040001000900010073797a300000000014000000110001"], 0xc8}}, 0x4090)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc04, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0)
iopl(0x3)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r7=>0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000)
mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x81001f, &(0x7f0000000980)='norecovery')

1.30533895s ago: executing program 7 (id=1286):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)

1.253067332s ago: executing program 0 (id=1287):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0)

1.171169093s ago: executing program 4 (id=1288):
socket$inet6(0xa, 0x2, 0x3a)
syz_open_dev$sndctrl(&(0x7f0000000080), 0xe544, 0x902)
pipe(&(0x7f0000000000))
eventfd2(0x0, 0x80800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x4)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040))
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xffffeffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xa, 0x0, 0x2000000097, 0x10, 0x4, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

189.962326ms ago: executing program 0 (id=1289):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

103.950208ms ago: executing program 6 (id=1290):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006a8f54d97e785f77d65fef669c86915672dfb5857d8e99e64748457b49adcd2922226e079aab8aeb741187b781243f0f348daf03712772700f91057e3792eb64e3fa9e547f73ce400d8edea91c5b99b6e3d8c29854d"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000010001b6f00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

414.931µs ago: executing program 7 (id=1291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r4 = fsmount(r3, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(r1, r5, r7)
fchdir(r4)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000010002104", @ANYRES32], 0x74}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50)

0s ago: executing program 0 (id=1292):
r0 = socket$inet6(0xa, 0x2, 0x0)
setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000340)="cf99c5727c0e6af44ce028c7f8c4cb61eb6eb0be9324f72b384882eda76b9ed19823503416aa82666de4a2d2371eb022f9245f69dd5056737d78b92ea059a066e39e6a87b1c669eaf0424d0a218a903d46662ce36f82d912f97c69238be732a04c8b30d9456477e8864c4ddb655e3e03c887846429438a1a7929cfa1f5825410e079ea8f26a8cd5c49e7e80c796788854dfd4372107e4d37f375479f92fc0064716f55a807722af3cac2074817a59232b66fcd995e6297cd0d1be0404ed020b1e7", 0xc1, 0x1)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f"], 0xfdef)

kernel console output (not intermixed with test programs):

: BINDER_SET_CONTEXT_MGR already set
[  315.683383][ T6323] binder: 6319:6323 ioctl 4018620d 200000000040 returned -16
[  315.762356][ T6329] futex_wake_op: syz.5.445 tries to shift op by 144; fix this program
[  315.798201][ T6329] loop5: detected capacity change from 0 to 256
[  315.856472][ T6329] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  315.918926][   T26] audit: type=1800 audit(1784234976.343:51): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.445" name="file1" dev="loop5" ino=1048631 res=0 errno=0
[  316.617357][ T6342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.449'.
[  317.035158][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  317.041608][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  318.284617][ T6341] 9pnet_virtio: no channels available for device syz
[  318.850148][ T6351] futex_wake_op: syz.3.451 tries to shift op by 144; fix this program
[  318.884927][ T6351] loop3: detected capacity change from 0 to 256
[  319.616723][ T6351] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  319.651550][   T26] audit: type=1800 audit(1784234980.093:52): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.451" name="file1" dev="loop3" ino=1048632 res=0 errno=0
[  319.692502][ T6350] bio_check_eod: 12718 callbacks suppressed
[  319.692516][ T6350] syz.3.451: attempt to access beyond end of device
[  319.692516][ T6350] loop3: rw=0, sector=184, nr_sectors = 120 limit=256
[  319.739646][ T6350] syz.3.451: attempt to access beyond end of device
[  319.739646][ T6350] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256
[  319.754917][ T6350] syz.3.451: attempt to access beyond end of device
[  319.754917][ T6350] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256
[  319.768740][ T6350] syz.3.451: attempt to access beyond end of device
[  319.768740][ T6350] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  319.782222][ T6350] syz.3.451: attempt to access beyond end of device
[  319.782222][ T6350] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  319.795548][ T6350] syz.3.451: attempt to access beyond end of device
[  319.795548][ T6350] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  319.809258][ T6350] syz.3.451: attempt to access beyond end of device
[  319.809258][ T6350] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  319.822541][ T6350] syz.3.451: attempt to access beyond end of device
[  319.822541][ T6350] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  319.835979][ T6350] syz.3.451: attempt to access beyond end of device
[  319.835979][ T6350] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  319.849226][ T6350] syz.3.451: attempt to access beyond end of device
[  319.849226][ T6350] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  320.083404][ T6358] fuse: Unknown parameter 'fd0x0000000000000004'
[  320.983775][ T6363] fuse: Unknown parameter 'user_i00000000000000000000'
[  321.307467][ T6369] netlink: 84 bytes leftover after parsing attributes in process `syz.3.457'.
[  321.338758][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'.
[  321.983364][  T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  323.114029][ T4287] block nbd5: Receive control failed (result -107)
[  323.196428][ T6376] netlink: 'syz.3.457': attribute type 30 has an invalid length.
[  323.277100][  T127] usb 5-1: config 0 has no interfaces?
[  323.298897][  T127] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  323.396392][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.475449][ T6376] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.485432][ T6376] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.494643][ T6376] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.503466][ T6376] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.578454][  T127] usb 5-1: config 0 descriptor??
[  324.061085][ T6376] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.070259][ T6376] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.079666][ T6376] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.088570][ T6376] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.521697][ T6385] fuse: Unknown parameter 'user_i00000000000000000000'
[  324.728037][ T6389] netlink: 52 bytes leftover after parsing attributes in process `syz.1.461'.
[  325.511587][  T954] usb 5-1: USB disconnect, device number 2
[  325.884613][ T6403] futex_wake_op: syz.1.465 tries to shift op by 144; fix this program
[  325.922617][ T6403] loop1: detected capacity change from 0 to 256
[  326.670624][ T6403] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  326.693253][   T26] audit: type=1800 audit(1784234987.133:53): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="file1" dev="loop1" ino=1048633 res=0 errno=0
[  326.716781][ T6402] bio_check_eod: 441 callbacks suppressed
[  326.716799][ T6402] syz.1.465: attempt to access beyond end of device
[  326.716799][ T6402] loop1: rw=0, sector=184, nr_sectors = 120 limit=256
[  326.765980][ T6402] syz.1.465: attempt to access beyond end of device
[  326.765980][ T6402] loop1: rw=524288, sector=664, nr_sectors = 256 limit=256
[  326.768479][ T6405] fuse: Unknown parameter 'fd0x0000000000000004'
[  326.783584][ T6402] syz.1.465: attempt to access beyond end of device
[  326.783584][ T6402] loop1: rw=524288, sector=920, nr_sectors = 256 limit=256
[  326.800085][ T6402] syz.1.465: attempt to access beyond end of device
[  326.800085][ T6402] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  326.813385][ T6402] syz.1.465: attempt to access beyond end of device
[  326.813385][ T6402] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  326.826568][ T6402] syz.1.465: attempt to access beyond end of device
[  326.826568][ T6402] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  326.839783][ T6402] syz.1.465: attempt to access beyond end of device
[  326.839783][ T6402] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  326.852951][ T6402] syz.1.465: attempt to access beyond end of device
[  326.852951][ T6402] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  326.866678][ T6402] syz.1.465: attempt to access beyond end of device
[  326.866678][ T6402] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  326.879933][ T6402] syz.1.465: attempt to access beyond end of device
[  326.879933][ T6402] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  329.520904][ T6424] fuse: Unknown parameter 'user_i00000000000000000000'
[  329.521364][ T6420] device syzkaller0 entered promiscuous mode
[  329.559908][ T6425] 9pnet_virtio: no channels available for device syz
[  330.003104][ T6437] netlink: 52 bytes leftover after parsing attributes in process `syz.0.475'.
[  331.080826][ T6448] futex_wake_op: syz.0.478 tries to shift op by 144; fix this program
[  331.089990][ T6451] loop0: detected capacity change from 0 to 256
[  331.729675][ T6451] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  331.786652][   T26] audit: type=1800 audit(1784234992.223:54): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.478" name="file1" dev="loop0" ino=1048634 res=0 errno=0
[  331.854859][ T6451] bio_check_eod: 319 callbacks suppressed
[  331.854872][ T6451] syz.0.478: attempt to access beyond end of device
[  331.854872][ T6451] loop0: rw=0, sector=184, nr_sectors = 120 limit=256
[  331.901666][ T6446] syz.0.478: attempt to access beyond end of device
[  331.901666][ T6446] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256
[  331.916448][ T6446] syz.0.478: attempt to access beyond end of device
[  331.916448][ T6446] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256
[  331.930192][ T6446] syz.0.478: attempt to access beyond end of device
[  331.930192][ T6446] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  331.943389][ T6446] syz.0.478: attempt to access beyond end of device
[  331.943389][ T6446] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  331.956580][ T6446] syz.0.478: attempt to access beyond end of device
[  331.956580][ T6446] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  331.969796][ T6446] syz.0.478: attempt to access beyond end of device
[  331.969796][ T6446] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  331.983030][ T6446] syz.0.478: attempt to access beyond end of device
[  331.983030][ T6446] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  331.996885][ T6446] syz.0.478: attempt to access beyond end of device
[  331.996885][ T6446] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  332.010076][ T6446] syz.0.478: attempt to access beyond end of device
[  332.010076][ T6446] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  332.466992][ T6441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  332.473852][ T6441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  332.483341][ T6441] vhci_hcd vhci_hcd.0: Device attached
[  332.886459][ T6461] vhci_hcd: connection closed
[  333.443303][ T2966] vhci_hcd: stop threads
[  333.533435][ T4317] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  333.566916][ T2966] vhci_hcd: release socket
[  333.609830][ T2966] vhci_hcd: disconnect device
[  336.044371][ T6481] fuse: Unknown parameter 'user_i00000000000000000000'
[  336.698891][ T6492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.488'.
[  337.606061][ T6503] device syzkaller0 entered promiscuous mode
[  339.191536][ T6515] device bond1 entered promiscuous mode
[  339.197346][ T6515] 8021q: adding VLAN 0 to HW filter on device bond1
[  339.699026][ T4317] vhci_hcd: vhci_device speed not set
[  339.729816][ T6514] [U] 
[  339.807212][ T6522] fuse: Unknown parameter 'user_id00000000000000000000'
[  341.073796][ T6535] 9pnet_virtio: no channels available for device syz
[  341.281458][ T6542] netlink: 52 bytes leftover after parsing attributes in process `syz.0.503'.
[  343.844439][ T6558] futex_wake_op: syz.1.505 tries to shift op by 144; fix this program
[  343.856384][ T6559] loop1: detected capacity change from 0 to 256
[  344.582677][ T6559] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  344.612873][   T26] audit: type=1800 audit(1784235005.053:55): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.505" name="file1" dev="loop1" ino=1048635 res=0 errno=0
[  344.635895][ T6557] bio_check_eod: 669 callbacks suppressed
[  344.635907][ T6557] syz.1.505: attempt to access beyond end of device
[  344.635907][ T6557] loop1: rw=0, sector=184, nr_sectors = 120 limit=256
[  344.676661][ T6557] syz.1.505: attempt to access beyond end of device
[  344.676661][ T6557] loop1: rw=524288, sector=664, nr_sectors = 256 limit=256
[  344.692268][ T6557] syz.1.505: attempt to access beyond end of device
[  344.692268][ T6557] loop1: rw=524288, sector=920, nr_sectors = 256 limit=256
[  344.706046][ T6557] syz.1.505: attempt to access beyond end of device
[  344.706046][ T6557] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  344.719345][ T6557] syz.1.505: attempt to access beyond end of device
[  344.719345][ T6557] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  344.732492][ T6557] syz.1.505: attempt to access beyond end of device
[  344.732492][ T6557] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  344.745643][ T6557] syz.1.505: attempt to access beyond end of device
[  344.745643][ T6557] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  344.758803][ T6557] syz.1.505: attempt to access beyond end of device
[  344.758803][ T6557] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  344.771928][ T6557] syz.1.505: attempt to access beyond end of device
[  344.771928][ T6557] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  344.785669][ T6557] syz.1.505: attempt to access beyond end of device
[  344.785669][ T6557] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  345.144928][ T6562] input: syz1 as /devices/virtual/input/input5
[  346.154043][ T6570] fuse: Unknown parameter 'user_id00000000000000000000'
[  347.421918][ T6582] fuse: Bad value for 'fd'
[  348.844993][ T6602] loop4: detected capacity change from 0 to 256
[  350.190071][ T6602] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  350.208577][   T26] audit: type=1800 audit(1784235010.653:56): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.519" name="file1" dev="loop4" ino=1048636 res=0 errno=0
[  350.231637][ T6602] bio_check_eod: 611 callbacks suppressed
[  350.231653][ T6602] syz.4.519: attempt to access beyond end of device
[  350.231653][ T6602] loop4: rw=0, sector=184, nr_sectors = 120 limit=256
[  350.260967][ T6600] futex_wake_op: syz.4.519 tries to shift op by 144; fix this program
[  350.280453][ T6598] syz.4.519: attempt to access beyond end of device
[  350.280453][ T6598] loop4: rw=524288, sector=8248, nr_sectors = 256 limit=256
[  350.280993][ T6602] syz.4.519: attempt to access beyond end of device
[  350.280993][ T6602] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256
[  350.294779][ T6598] syz.4.519: attempt to access beyond end of device
[  350.294779][ T6598] loop4: rw=0, sector=8376, nr_sectors = 8 limit=256
[  350.312478][ T6602] syz.4.519: attempt to access beyond end of device
[  350.312478][ T6602] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256
[  350.322147][ T6598] syz.4.519: attempt to access beyond end of device
[  350.322147][ T6598] loop4: rw=0, sector=8376, nr_sectors = 8 limit=256
[  350.322312][ T6598] syz.4.519: attempt to access beyond end of device
[  350.322312][ T6598] loop4: rw=0, sector=8376, nr_sectors = 8 limit=256
[  350.322434][ T6598] syz.4.519: attempt to access beyond end of device
[  350.322434][ T6598] loop4: rw=0, sector=8376, nr_sectors = 8 limit=256
[  350.376193][ T6602] syz.4.519: attempt to access beyond end of device
[  350.376193][ T6602] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  350.389407][ T6602] syz.4.519: attempt to access beyond end of device
[  350.389407][ T6602] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  350.717286][ T6606] process 'syz.0.522' launched '/dev/fd/6' with NULL argv: empty string added
[  354.412178][ T6619] fuse: Unknown parameter 'user_id00000000000000000000'
[  354.794744][ T6630] fuse: Bad value for 'fd'
[  355.545750][ T6622] [U] 
[  356.490652][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'.
[  358.257271][ T6655] [U] 
[  358.467836][ T6666] futex_wake_op: syz.4.535 tries to shift op by 144; fix this program
[  358.504481][ T6666] loop4: detected capacity change from 0 to 256
[  358.549562][ T6666] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  358.601357][   T26] audit: type=1800 audit(1784235019.033:57): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.535" name="file1" dev="loop4" ino=1048637 res=0 errno=0
[  358.633829][ T6666] bio_check_eod: 1242 callbacks suppressed
[  358.633861][ T6666] syz.4.535: attempt to access beyond end of device
[  358.633861][ T6666] loop4: rw=0, sector=184, nr_sectors = 120 limit=256
[  358.691732][ T6665] syz.4.535: attempt to access beyond end of device
[  358.691732][ T6665] loop4: rw=524288, sector=2288, nr_sectors = 256 limit=256
[  358.692602][ T6666] syz.4.535: attempt to access beyond end of device
[  358.692602][ T6666] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256
[  358.705726][ T6665] syz.4.535: attempt to access beyond end of device
[  358.705726][ T6665] loop4: rw=0, sector=2416, nr_sectors = 8 limit=256
[  358.721976][ T6666] syz.4.535: attempt to access beyond end of device
[  358.721976][ T6666] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256
[  358.733607][ T6665] syz.4.535: attempt to access beyond end of device
[  358.733607][ T6665] loop4: rw=0, sector=2416, nr_sectors = 8 limit=256
[  358.747213][ T6666] syz.4.535: attempt to access beyond end of device
[  358.747213][ T6666] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  358.760580][ T6665] syz.4.535: attempt to access beyond end of device
[  358.760580][ T6665] loop4: rw=0, sector=2416, nr_sectors = 8 limit=256
[  358.773657][ T6666] syz.4.535: attempt to access beyond end of device
[  358.773657][ T6666] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  358.786715][ T6665] syz.4.535: attempt to access beyond end of device
[  358.786715][ T6665] loop4: rw=0, sector=2416, nr_sectors = 8 limit=256
[  359.173927][ T6673] fuse: Bad value for 'fd'
[  362.041722][ T6687] fuse: Unknown parameter '0x0000000000000003'
[  362.063804][ T6684] device bond4 entered promiscuous mode
[  362.069608][ T6684] 8021q: adding VLAN 0 to HW filter on device bond4
[  362.122955][ T6683] [U] 
[  363.043346][ T6700] input: syz1 as /devices/virtual/input/input6
[  364.170360][ T6709] [U] 
[  364.524201][ T6721] loop3: detected capacity change from 0 to 256
[  365.899033][ T6720] futex_wake_op: syz.3.551 tries to shift op by 144; fix this program
[  365.964293][ T6721] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  365.986880][   T26] audit: type=1800 audit(1784235026.433:58): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.551" name="file1" dev="loop3" ino=1048638 res=0 errno=0
[  366.009326][ T6719] bio_check_eod: 5637 callbacks suppressed
[  366.009337][ T6719] syz.3.551: attempt to access beyond end of device
[  366.009337][ T6719] loop3: rw=0, sector=184, nr_sectors = 120 limit=256
[  366.052796][ T6719] syz.3.551: attempt to access beyond end of device
[  366.052796][ T6719] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256
[  366.067704][ T6719] syz.3.551: attempt to access beyond end of device
[  366.067704][ T6719] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256
[  366.081493][ T6719] syz.3.551: attempt to access beyond end of device
[  366.081493][ T6719] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  366.095702][ T6719] syz.3.551: attempt to access beyond end of device
[  366.095702][ T6719] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  366.108953][ T6719] syz.3.551: attempt to access beyond end of device
[  366.108953][ T6719] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  366.122385][ T6719] syz.3.551: attempt to access beyond end of device
[  366.122385][ T6719] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  366.135609][ T6719] syz.3.551: attempt to access beyond end of device
[  366.135609][ T6719] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  366.148767][ T6719] syz.3.551: attempt to access beyond end of device
[  366.148767][ T6719] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  366.161984][ T6719] syz.3.551: attempt to access beyond end of device
[  366.161984][ T6719] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  366.307879][ T6727] fuse: Bad value for 'fd'
[  366.551154][ T6736] futex_wake_op: syz.5.555 tries to shift op by 144; fix this program
[  366.588561][ T6736] loop5: detected capacity change from 0 to 256
[  366.632875][ T6736] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  366.686188][   T26] audit: type=1800 audit(1784235027.123:59): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.555" name="file1" dev="loop5" ino=1048639 res=0 errno=0
[  367.008436][ T6740] fuse: Unknown parameter '0x0000000000000003'
[  368.464393][ T6748] device bond1 entered promiscuous mode
[  368.488656][ T6748] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.539320][ T6747] [U] 
[  369.456957][ T6760] [U] 
[  369.572202][ T6770] futex_wake_op: syz.0.565 tries to shift op by 144; fix this program
[  369.610473][ T6770] loop0: detected capacity change from 0 to 256
[  370.785447][ T6770] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  370.812016][ T6772] fuse: Bad value for 'fd'
[  370.828308][   T26] audit: type=1800 audit(1784235031.273:60): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.565" name="file1" dev="loop0" ino=1048640 res=0 errno=0
[  371.013170][ T6768] bio_check_eod: 12334 callbacks suppressed
[  371.013190][ T6768] syz.0.565: attempt to access beyond end of device
[  371.013190][ T6768] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  371.032418][ T6768] syz.0.565: attempt to access beyond end of device
[  371.032418][ T6768] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  371.045697][ T6768] syz.0.565: attempt to access beyond end of device
[  371.045697][ T6768] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  371.333624][ T6788] netlink: 84 bytes leftover after parsing attributes in process `syz.0.568'.
[  371.355042][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'.
[  371.500777][ T6788] netlink: 'syz.0.568': attribute type 30 has an invalid length.
[  372.315336][ T6788] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.324438][ T6788] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.333243][ T6788] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.341975][ T6788] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  372.420004][ T6788] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.429261][ T6788] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.438811][ T6788] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.447987][ T6788] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.369467][ T6802] [U] 
[  373.717692][ T6819] futex_wake_op: syz.1.579 tries to shift op by 144; fix this program
[  373.755481][ T6819] loop1: detected capacity change from 0 to 256
[  375.607245][ T6819] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  375.663223][   T26] audit: type=1800 audit(1784235036.103:61): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.579" name="file1" dev="loop1" ino=1048641 res=0 errno=0
[  375.689977][ T6817] syz.1.579: attempt to access beyond end of device
[  375.689977][ T6817] loop1: rw=0, sector=184, nr_sectors = 120 limit=256
[  375.740390][ T6817] syz.1.579: attempt to access beyond end of device
[  375.740390][ T6817] loop1: rw=524288, sector=664, nr_sectors = 256 limit=256
[  375.755429][ T6817] syz.1.579: attempt to access beyond end of device
[  375.755429][ T6817] loop1: rw=524288, sector=920, nr_sectors = 256 limit=256
[  375.769181][ T6817] syz.1.579: attempt to access beyond end of device
[  375.769181][ T6817] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  375.782362][ T6817] syz.1.579: attempt to access beyond end of device
[  375.782362][ T6817] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  375.795702][ T6817] syz.1.579: attempt to access beyond end of device
[  375.795702][ T6817] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  375.808864][ T6817] syz.1.579: attempt to access beyond end of device
[  375.808864][ T6817] loop1: rw=0, sector=664, nr_sectors = 8 limit=256
[  378.643783][ T6855] futex_wake_op: syz.0.590 tries to shift op by 144; fix this program
[  378.661774][ T6855] loop0: detected capacity change from 0 to 256
[  378.673814][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  378.693856][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  378.710543][ T6855] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  378.728437][   T26] audit: type=1800 audit(1784235039.173:62): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.590" name="file1" dev="loop0" ino=1048642 res=0 errno=0
[  378.751740][ T6855] bio_check_eod: 1446 callbacks suppressed
[  378.751752][ T6855] syz.0.590: attempt to access beyond end of device
[  378.751752][ T6855] loop0: rw=0, sector=184, nr_sectors = 120 limit=256
[  378.791769][ T6855] syz.0.590: attempt to access beyond end of device
[  378.791769][ T6855] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256
[  378.806516][ T6855] syz.0.590: attempt to access beyond end of device
[  378.806516][ T6855] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256
[  378.820308][ T6855] syz.0.590: attempt to access beyond end of device
[  378.820308][ T6855] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  378.833534][ T6855] syz.0.590: attempt to access beyond end of device
[  378.833534][ T6855] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  378.846687][ T6855] syz.0.590: attempt to access beyond end of device
[  378.846687][ T6855] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  378.859842][ T6855] syz.0.590: attempt to access beyond end of device
[  378.859842][ T6855] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  378.872972][ T6855] syz.0.590: attempt to access beyond end of device
[  378.872972][ T6855] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  378.886571][ T6855] syz.0.590: attempt to access beyond end of device
[  378.886571][ T6855] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  378.899723][ T6855] syz.0.590: attempt to access beyond end of device
[  378.899723][ T6855] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  384.911364][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.594'.
[  384.939702][ T6878] fuse: Unknown parameter '0x0000000000000004'
[  385.015409][ T6874] netlink: 84 bytes leftover after parsing attributes in process `syz.5.594'.
[  385.094188][ T6876] netlink: 'syz.5.594': attribute type 30 has an invalid length.
[  385.264076][ T6876] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  385.272930][ T6876] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  385.281776][ T6876] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  385.290588][ T6876] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  385.809723][ T6876] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.818881][ T6876] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.827900][ T6876] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.836881][ T6876] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.208146][ T6889] [U] 
[  386.753726][ T4582] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  388.019290][ T6891] device bond2 entered promiscuous mode
[  388.117144][ T6891] 8021q: adding VLAN 0 to HW filter on device bond2
[  388.187156][ T4582] usb 5-1: config 0 has no interfaces?
[  388.196593][ T4582] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  388.423988][ T4582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.751475][ T4582] usb 5-1: config 0 descriptor??
[  389.152670][   T41] usb 5-1: USB disconnect, device number 3
[  389.497583][ T6919] futex_wake_op: syz.3.602 tries to shift op by 144; fix this program
[  389.536103][ T6919] loop3: detected capacity change from 0 to 256
[  390.302384][ T6919] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  390.346131][   T26] audit: type=1800 audit(1784235050.793:63): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.602" name="file1" dev="loop3" ino=1048643 res=0 errno=0
[  390.374437][ T6918] bio_check_eod: 99213 callbacks suppressed
[  390.374450][ T6918] syz.3.602: attempt to access beyond end of device
[  390.374450][ T6918] loop3: rw=0, sector=184, nr_sectors = 120 limit=256
[  390.426190][ T6918] syz.3.602: attempt to access beyond end of device
[  390.426190][ T6918] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256
[  390.440988][ T6918] syz.3.602: attempt to access beyond end of device
[  390.440988][ T6918] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256
[  390.455364][ T6918] syz.3.602: attempt to access beyond end of device
[  390.455364][ T6918] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  390.468566][ T6918] syz.3.602: attempt to access beyond end of device
[  390.468566][ T6918] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  390.481757][ T6918] syz.3.602: attempt to access beyond end of device
[  390.481757][ T6918] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  390.494927][ T6918] syz.3.602: attempt to access beyond end of device
[  390.494927][ T6918] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  390.508077][ T6918] syz.3.602: attempt to access beyond end of device
[  390.508077][ T6918] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  390.521391][ T6918] syz.3.602: attempt to access beyond end of device
[  390.521391][ T6918] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  390.534537][ T6918] syz.3.602: attempt to access beyond end of device
[  390.534537][ T6918] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  390.830981][ T6930] fuse: Unknown parameter '0x0000000000000004'
[  392.404910][ T6953] netlink: 52 bytes leftover after parsing attributes in process `syz.0.612'.
[  393.660937][ T6963] netlink: 84 bytes leftover after parsing attributes in process `syz.3.617'.
[  393.670538][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'.
[  393.735818][ T6968] fuse: Unknown parameter '0x0000000000000004'
[  393.804218][   T48] block nbd8: Receive control failed (result -1)
[  393.832840][ T6963] netlink: 'syz.3.617': attribute type 30 has an invalid length.
[  393.888234][ T6975] futex_wake_op: syz.0.616 tries to shift op by 144; fix this program
[  393.904876][ T6975] loop0: detected capacity change from 0 to 256
[  393.917258][ T6975] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  393.938734][   T26] audit: type=1800 audit(1784235054.383:64): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=1048644 res=0 errno=0
[  394.903706][ T6978] support for the xor transformation has been removed.
[  394.982947][ T6963] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.992140][ T6963] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  395.000970][ T6963] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  395.009798][ T6963] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  395.131993][ T6963] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.141706][ T6963] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.150735][ T6963] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.159727][ T6963] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.583700][   T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  395.809288][   T41] usb 5-1: config 0 has no interfaces?
[  395.818724][   T41] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  395.978089][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.260368][   T41] usb 5-1: config 0 descriptor??
[  399.659631][ T6379] usb 5-1: USB disconnect, device number 4
[  399.999765][ T7001] netlink: 52 bytes leftover after parsing attributes in process `syz.1.626'.
[  405.912761][ T7046] cgroup: fork rejected by pids controller in /syz1
[  406.732039][ T7098] binder: 7097:7098 ioctl c0306201 0 returned -14
[  406.918664][ T7103] netlink: 52 bytes leftover after parsing attributes in process `syz.4.640'.
[  408.305316][ T7117] futex_wake_op: syz.4.646 tries to shift op by 144; fix this program
[  408.344128][ T7117] loop4: detected capacity change from 0 to 256
[  409.339368][ T7117] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  409.361807][   T26] audit: type=1800 audit(1784235069.803:65): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.646" name="file1" dev="loop4" ino=1048645 res=0 errno=0
[  409.387928][ T7116] bio_check_eod: 14546 callbacks suppressed
[  409.387945][ T7116] syz.4.646: attempt to access beyond end of device
[  409.387945][ T7116] loop4: rw=0, sector=184, nr_sectors = 120 limit=256
[  409.436741][ T7116] syz.4.646: attempt to access beyond end of device
[  409.436741][ T7116] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256
[  409.452200][ T7116] syz.4.646: attempt to access beyond end of device
[  409.452200][ T7116] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256
[  409.466050][ T7116] syz.4.646: attempt to access beyond end of device
[  409.466050][ T7116] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  409.479336][ T7116] syz.4.646: attempt to access beyond end of device
[  409.479336][ T7116] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  409.492547][ T7116] syz.4.646: attempt to access beyond end of device
[  409.492547][ T7116] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  409.506285][ T7116] syz.4.646: attempt to access beyond end of device
[  409.506285][ T7116] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  409.519534][ T7116] syz.4.646: attempt to access beyond end of device
[  409.519534][ T7116] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  409.532768][ T7116] syz.4.646: attempt to access beyond end of device
[  409.532768][ T7116] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  409.546234][ T7116] syz.4.646: attempt to access beyond end of device
[  409.546234][ T7116] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  412.619289][ T7146] cgroup: fork rejected by pids controller in /syz4
[  413.610844][ T7196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.656'.
[  423.767686][ T7241] device syzkaller0 entered promiscuous mode
[  426.800106][ T7249] netlink: 52 bytes leftover after parsing attributes in process `syz.3.671'.
[  426.835348][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  426.873777][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  426.881399][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  426.916310][ T7267] device bridge_slave_0 left promiscuous mode
[  426.953722][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.025370][ T7267] device bridge_slave_1 left promiscuous mode
[  427.031651][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.088224][ T7267] bond0: (slave bond_slave_0): Releasing backup interface
[  427.145620][ T7267] bond0: (slave bond_slave_1): Releasing backup interface
[  427.674766][ T7267] team0: Port device team_slave_0 removed
[  427.936373][ T7267] team0: Port device team_slave_1 removed
[  427.942974][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.978104][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.030191][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.089499][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.707510][ T7272] device syzkaller0 entered promiscuous mode
[  432.285834][ T7324] futex_wake_op: syz.0.687 tries to shift op by 144; fix this program
[  432.324082][ T7324] loop0: detected capacity change from 0 to 256
[  432.378761][ T7324] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  432.437396][ T7324] bio_check_eod: 415 callbacks suppressed
[  432.437432][ T7324] syz.0.687: attempt to access beyond end of device
[  432.437432][ T7324] loop0: rw=0, sector=184, nr_sectors = 120 limit=256
[  432.460637][   T26] audit: type=1800 audit(1784235092.873:66): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.687" name="file1" dev="loop0" ino=1048646 res=0 errno=0
[  432.515574][ T7322] syz.0.687: attempt to access beyond end of device
[  432.515574][ T7322] loop0: rw=524288, sector=2400, nr_sectors = 256 limit=256
[  432.516274][ T7324] syz.0.687: attempt to access beyond end of device
[  432.516274][ T7324] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256
[  432.529695][ T7322] syz.0.687: attempt to access beyond end of device
[  432.529695][ T7322] loop0: rw=0, sector=2528, nr_sectors = 8 limit=256
[  432.546012][ T7324] syz.0.687: attempt to access beyond end of device
[  432.546012][ T7324] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256
[  432.557772][ T7322] syz.0.687: attempt to access beyond end of device
[  432.557772][ T7322] loop0: rw=0, sector=2528, nr_sectors = 8 limit=256
[  432.570838][ T7324] syz.0.687: attempt to access beyond end of device
[  432.570838][ T7324] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  432.584078][ T7322] syz.0.687: attempt to access beyond end of device
[  432.584078][ T7322] loop0: rw=0, sector=2528, nr_sectors = 8 limit=256
[  432.597311][ T7324] syz.0.687: attempt to access beyond end of device
[  432.597311][ T7324] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  432.610264][ T7322] syz.0.687: attempt to access beyond end of device
[  432.610264][ T7322] loop0: rw=0, sector=2528, nr_sectors = 8 limit=256
[  437.301040][ T7352] input: syz1 as /devices/virtual/input/input8
[  438.716801][ T7365] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  438.800648][ T7365] kvm: pic: single mode not supported
[  438.801016][ T7365] kvm: pic: non byte read
[  438.829525][ T7365] kvm: pic: level sensitive irq not supported
[  438.830316][ T7365] kvm: pic: non byte read
[  438.882433][ T7365] kvm: pic: level sensitive irq not supported
[  438.882512][ T7365] kvm: pic: non byte read
[  438.933402][ T7365] kvm: pic: level sensitive irq not supported
[  438.933471][ T7365] kvm: pic: non byte read
[  439.915811][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  439.922312][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  439.985194][ T7377] cgroup: fork rejected by pids controller in /syz0
[  443.537820][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  443.738609][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.771947][    T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  443.824259][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.566302][    T7] usb 5-1: config 0 descriptor??
[  446.305857][    T7] usb 5-1: can't set config #0, error -71
[  446.312910][    T7] usb 5-1: USB disconnect, device number 5
[  447.727491][ T7455] input: syz1 as /devices/virtual/input/input9
[  448.283760][ T7466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  448.294770][ T7466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  448.302650][ T7466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  448.330563][ T7466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  448.338242][ T7466] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  448.345811][ T7466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  448.588839][ T7466] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  448.598442][ T7466] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  448.606568][ T7466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  448.614595][ T7466] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  448.622942][ T7466] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  448.630718][ T7466] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  449.038373][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'.
[  449.099203][   T48] block nbd9: Receive control failed (result -1)
[  450.087185][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.094548][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.394227][   T48] Bluetooth: hci5: command 0x0409 tx timeout
[  450.804206][ T4321] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  450.953777][   T48] Bluetooth: hci6: command 0x0409 tx timeout
[  451.042457][ T4321] usb 5-1: config 0 has no interfaces?
[  451.054650][ T4321] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  451.100937][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.187170][ T4321] usb 5-1: config 0 descriptor??
[  452.473264][   T48] Bluetooth: hci5: command 0x041b tx timeout
[  453.033368][   T48] Bluetooth: hci6: command 0x041b tx timeout
[  453.184768][    T7] usb 5-1: USB disconnect, device number 6
[  453.356302][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.407252][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.870262][ T7475] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.879555][ T7475] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.888578][ T7475] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.897698][ T7475] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.073317][ T7477] netlink: 84 bytes leftover after parsing attributes in process `syz.3.717'.
[  454.091512][ T7479] netlink: 'syz.3.717': attribute type 30 has an invalid length.
[  454.110013][ T7479] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  454.119068][ T7479] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  454.128153][ T7479] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  454.136957][ T7479] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  454.262366][ T7479] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.271703][ T7479] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.280664][ T7479] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.289627][ T7479] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  454.553416][   T48] Bluetooth: hci5: command 0x040f tx timeout
[  455.113217][   T48] Bluetooth: hci6: command 0x040f tx timeout
[  455.286953][ T7500] input: syz1 as /devices/virtual/input/input10
[  456.147638][ T5248] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.396518][ T5248] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.578544][ T5248] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.633206][   T48] Bluetooth: hci5: command 0x0419 tx timeout
[  457.023205][ T4313] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  457.185944][ T5248] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.194036][   T48] Bluetooth: hci6: command 0x0419 tx timeout
[  457.247200][ T4313] usb 1-1: config 0 has no interfaces?
[  457.254395][ T4313] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  457.377127][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.534706][ T4313] usb 1-1: config 0 descriptor??
[  460.286444][ T4317] usb 1-1: USB disconnect, device number 3
[  460.854655][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.730'.
[  460.913501][ T7525] netem: invalid attributes len -8
[  460.918729][ T7525] netem: change failed
[  460.957858][ T7471] chnl_net:caif_netlink_parms(): no params data found
[  460.981654][ T7465] chnl_net:caif_netlink_parms(): no params data found
[  461.143868][ T7525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.730'.
[  462.264579][ T7552] netlink: 84 bytes leftover after parsing attributes in process `syz.3.733'.
[  462.283834][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'.
[  462.316795][   T48] block nbd10: Receive control failed (result -1)
[  462.380305][ T7559] netlink: 'syz.3.733': attribute type 30 has an invalid length.
[  462.472405][ T7559] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  462.481607][ T7559] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  462.490456][ T7559] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  462.499226][ T7559] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.582926][ T7559] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.592467][ T7559] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.601524][ T7559] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.610509][ T7559] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.730677][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.750907][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.768425][ T7465] device bridge_slave_0 entered promiscuous mode
[  462.826000][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.839541][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.882270][ T7471] device bridge_slave_0 entered promiscuous mode
[  462.906011][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.920943][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.946290][ T7465] device bridge_slave_1 entered promiscuous mode
[  463.007132][ T7572] input: syz1 as /devices/virtual/input/input11
[  463.033183][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.040357][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.076989][ T7471] device bridge_slave_1 entered promiscuous mode
[  463.190356][ T7465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.292548][ T7465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.317567][ T7579] overlayfs: missing 'lowerdir'
[  463.346183][ T7471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.392966][ T7471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.952545][ T7465] team0: Port device team_slave_0 added
[  464.370581][ T7471] team0: Port device team_slave_0 added
[  464.390489][ T7465] team0: Port device team_slave_1 added
[  464.472036][ T7471] team0: Port device team_slave_1 added
[  464.581019][ T7590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'.
[  464.608705][ T7590] netem: invalid attributes len -8
[  464.626667][ T7590] netem: change failed
[  464.646061][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.654339][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.688977][ T7471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.752716][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.772272][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.836695][ T7465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.877859][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.741'.
[  464.908008][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.928765][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.954750][    C0] vkms_vblank_simulate: vblank timer overrun
[  464.971089][ T7471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.990093][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.997610][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.031365][ T7465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.055963][ T5248] device hsr_slave_0 left promiscuous mode
[  465.072207][ T5248] device hsr_slave_1 left promiscuous mode
[  465.153888][ T5248] device veth1_macvtap left promiscuous mode
[  465.170261][ T5248] device veth0_macvtap left promiscuous mode
[  465.180859][ T5248] device veth1_vlan left promiscuous mode
[  465.203316][ T5248] device veth0_vlan left promiscuous mode
[  465.616481][ T5248] bond1 (unregistering): Released all slaves
[  466.093210][  T127] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  468.600415][  T127] usb 4-1: config 0 has no interfaces?
[  468.615206][  T127] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  468.654524][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.733855][  T127] usb 4-1: config 0 descriptor??
[  469.040529][  T127] usb 4-1: USB disconnect, device number 2
[  470.421220][ T7617] XFS (nullb0): Invalid superblock magic number
[  471.059172][ T5248] bond0 (unregistering): Released all slaves
[  471.519763][ T7471] device hsr_slave_0 entered promiscuous mode
[  471.533994][ T7471] device hsr_slave_1 entered promiscuous mode
[  471.568846][ T7471] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  471.623223][ T7471] Cannot create hsr debugfs directory
[  471.661675][ T7632] futex_wake_op: syz.4.745 tries to shift op by 144; fix this program
[  471.698285][ T7632] loop4: detected capacity change from 0 to 256
[  472.457738][ T7632] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  472.486273][   T26] audit: type=1800 audit(1784235132.933:67): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.745" name="file1" dev="loop4" ino=1048647 res=0 errno=0
[  472.509344][ T7631] bio_check_eod: 6246 callbacks suppressed
[  472.509357][ T7631] syz.4.745: attempt to access beyond end of device
[  472.509357][ T7631] loop4: rw=0, sector=184, nr_sectors = 120 limit=256
[  472.548458][ T7631] syz.4.745: attempt to access beyond end of device
[  472.548458][ T7631] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256
[  472.563880][ T7631] syz.4.745: attempt to access beyond end of device
[  472.563880][ T7631] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256
[  472.577679][ T7631] syz.4.745: attempt to access beyond end of device
[  472.577679][ T7631] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  472.591364][ T7631] syz.4.745: attempt to access beyond end of device
[  472.591364][ T7631] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  472.604567][ T7631] syz.4.745: attempt to access beyond end of device
[  472.604567][ T7631] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  472.617766][ T7631] syz.4.745: attempt to access beyond end of device
[  472.617766][ T7631] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  472.631007][ T7631] syz.4.745: attempt to access beyond end of device
[  472.631007][ T7631] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  472.644237][ T7631] syz.4.745: attempt to access beyond end of device
[  472.644237][ T7631] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  472.657427][ T7631] syz.4.745: attempt to access beyond end of device
[  472.657427][ T7631] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  472.807582][ T7465] device hsr_slave_0 entered promiscuous mode
[  472.839291][ T7465] device hsr_slave_1 entered promiscuous mode
[  472.930915][ T7465] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.949061][ T7465] Cannot create hsr debugfs directory
[  473.062809][  T954] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  473.253378][  T954] usb 4-1: Using ep0 maxpacket: 32
[  473.262410][  T954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.427414][  T954] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  473.639533][  T954] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  473.780473][  T954] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  474.035503][  T954] usb 4-1: Product: syz
[  474.039868][  T954] usb 4-1: Manufacturer: syz
[  474.075475][  T954] usb 4-1: SerialNumber: syz
[  474.208175][  T954] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12
[  474.518755][ T7465] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  474.586797][ T7465] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  474.602004][ T7659] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  474.620728][ T7465] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  474.650765][ T7465] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  474.847602][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.753'.
[  474.923412][ T7664] netem: invalid attributes len -8
[  474.970520][ T7664] netem: change failed
[  475.028017][ T7471] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  475.069910][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.753'.
[  475.089721][ T7672] block nbd0: shutting down sockets
[  475.121421][ T7471] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  475.166516][ T7471] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  475.206241][ T7471] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  475.322710][ T7465] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.390075][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  475.411101][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  475.435119][ T7465] 8021q: adding VLAN 0 to HW filter on device team0
[  475.487750][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  475.517000][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  475.544659][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.551826][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.578499][   T22] usb 4-1: USB disconnect, device number 3
[  475.663553][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  475.694821][   T22] appletouch 4-1:1.0: input: appletouch disconnected
[  475.703969][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  475.745887][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  475.763721][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.770899][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.845145][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  475.869416][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  476.665192][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  476.676103][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  476.702104][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  476.737861][ T7471] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.252618][ T7689] XFS (nullb0): Invalid superblock magic number
[  477.588310][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  477.642215][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  477.721236][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  477.737652][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  477.746241][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  477.758228][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  477.782350][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  477.794018][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  477.807402][ T7465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  477.828643][ T7471] 8021q: adding VLAN 0 to HW filter on device team0
[  477.889921][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  477.911816][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  477.952342][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.960507][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.035875][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  478.050426][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  478.062533][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  478.076818][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.084081][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.146414][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  478.198820][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  478.232509][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  478.282783][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  478.321893][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  478.371990][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  478.388891][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  478.420325][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  478.451396][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  478.481936][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  478.494550][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  478.528776][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  478.816884][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  479.698547][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  479.749602][ T7465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.747201][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  480.760577][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  480.787917][ T7471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  482.357394][ T7780] futex_wake_op: syz.3.768 tries to shift op by 144; fix this program
[  482.454008][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  482.460736][ T7780] loop3: detected capacity change from 0 to 256
[  482.490516][ T7780] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  482.523793][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  482.571680][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  482.588843][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  482.609959][ T7465] device veth0_vlan entered promiscuous mode
[  482.628747][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  482.639123][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  482.671899][ T7465] device veth1_vlan entered promiscuous mode
[  482.695923][   T26] audit: type=1800 audit(1784235143.143:68): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.768" name="file1" dev="loop3" ino=1048648 res=0 errno=0
[  482.729215][ T7780] bio_check_eod: 633 callbacks suppressed
[  482.729232][ T7780] syz.3.768: attempt to access beyond end of device
[  482.729232][ T7780] loop3: rw=0, sector=184, nr_sectors = 120 limit=256
[  482.782570][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  482.804808][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  482.849007][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  482.899183][ T7780] syz.3.768: attempt to access beyond end of device
[  482.899183][ T7780] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256
[  483.051925][ T7777] syz.3.768: attempt to access beyond end of device
[  483.051925][ T7777] loop3: rw=0, sector=736, nr_sectors = 8 limit=256
[  483.112517][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  483.144560][ T7465] device veth0_macvtap entered promiscuous mode
[  483.195050][ T7465] device veth1_macvtap entered promiscuous mode
[  483.484895][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  483.528383][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  483.557817][ T7791] XFS (nullb0): Invalid superblock magic number
[  483.706820][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.748341][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.779312][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.810531][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.834243][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  483.854855][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  483.911060][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.955507][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  483.983991][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  484.029529][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  484.052258][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  484.079987][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.101431][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.119322][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.131971][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.147856][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.199549][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.247876][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  484.295894][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  484.317849][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  484.370838][ T7471] device veth0_vlan entered promiscuous mode
[  486.120106][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  486.233685][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  486.334195][ T7465] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.343404][ T7465] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.352190][ T7465] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.363217][ T7465] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.393926][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  486.403741][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  486.418208][ T7471] device veth1_vlan entered promiscuous mode
[  486.561772][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  486.579927][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  486.647419][ T7471] device veth0_macvtap entered promiscuous mode
[  486.707786][ T7471] device veth1_macvtap entered promiscuous mode
[  486.715330][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.732768][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.812925][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  486.830697][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  486.864556][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  486.901574][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.933263][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.966857][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.993253][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.029120][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.060755][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.091272][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.113231][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.335518][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.349832][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  487.543907][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  487.629676][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.645577][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.663882][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.713148][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.735166][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.828805][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.975174][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.750083][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.791157][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.811548][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.881588][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.032656][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  489.046485][ T7841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.778'.
[  489.064307][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  489.106062][ T7841] netlink: 43 bytes leftover after parsing attributes in process `syz.3.778'.
[  489.117093][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  489.118223][ T7841] netlink: 'syz.3.778': attribute type 5 has an invalid length.
[  489.143267][ T7841] netlink: 43 bytes leftover after parsing attributes in process `syz.3.778'.
[  489.190013][ T7471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.200119][ T7844] futex_wake_op: syz.4.779 tries to shift op by 144; fix this program
[  489.223212][ T7471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.242359][ T7471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.267749][ T7844] loop4: detected capacity change from 0 to 256
[  489.279793][ T7471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.300764][ T7844] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  489.358601][   T26] audit: type=1800 audit(1784235149.803:69): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.779" name="file1" dev="loop4" ino=1048649 res=0 errno=0
[  489.458301][ T7844] syz.4.779: attempt to access beyond end of device
[  489.458301][ T7844] loop4: rw=0, sector=184, nr_sectors = 120 limit=256
[  489.688161][ T7844] syz.4.779: attempt to access beyond end of device
[  489.688161][ T7844] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256
[  489.771082][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.787700][ T7842] syz.4.779: attempt to access beyond end of device
[  489.787700][ T7842] loop4: rw=0, sector=712, nr_sectors = 8 limit=256
[  489.818657][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.880597][ T7844] syz.4.779: attempt to access beyond end of device
[  489.880597][ T7844] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256
[  489.983944][ T7844] syz.4.779: attempt to access beyond end of device
[  489.983944][ T7844] loop4: rw=0, sector=664, nr_sectors = 8 limit=256
[  490.013969][ T6051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  490.111091][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.128510][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.163855][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  493.877381][ T7879] XFS (nullb0): Invalid superblock magic number
[  496.271673][ T7922] netlink: 84 bytes leftover after parsing attributes in process `syz.4.789'.
[  496.414031][ T7925] netlink: 'syz.4.789': attribute type 30 has an invalid length.
[  496.471957][ T7925] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  496.480977][ T7925] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  496.489966][ T7925] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  496.498744][ T7925] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  496.628903][ T7936] loop3: detected capacity change from 0 to 256
[  498.013527][ T7935] futex_wake_op: syz.3.791 tries to shift op by 144; fix this program
[  498.040463][ T7936] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  498.067587][   T26] audit: type=1800 audit(1784235158.513:70): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.791" name="file1" dev="loop3" ino=1048656 res=0 errno=0
[  498.092781][ T7933] syz.3.791: attempt to access beyond end of device
[  498.092781][ T7933] loop3: rw=0, sector=184, nr_sectors = 120 limit=256
[  498.131061][ T7933] syz.3.791: attempt to access beyond end of device
[  498.131061][ T7933] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256
[  498.146018][ T7933] syz.3.791: attempt to access beyond end of device
[  498.146018][ T7933] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256
[  498.160075][ T7933] syz.3.791: attempt to access beyond end of device
[  498.160075][ T7933] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  498.173683][ T7933] syz.3.791: attempt to access beyond end of device
[  498.173683][ T7933] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  498.187540][ T7933] syz.3.791: attempt to access beyond end of device
[  498.187540][ T7933] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  498.201118][ T7933] syz.3.791: attempt to access beyond end of device
[  498.201118][ T7933] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  498.214580][ T7933] syz.3.791: attempt to access beyond end of device
[  498.214580][ T7933] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  498.227944][ T7933] syz.3.791: attempt to access beyond end of device
[  498.227944][ T7933] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  498.241324][ T7933] syz.3.791: attempt to access beyond end of device
[  498.241324][ T7933] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  500.677731][ T7925] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.686989][ T7925] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.696001][ T7925] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.704992][ T7925] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.358229][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  501.364747][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  503.193296][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  503.426701][    T7] usb 5-1: config 0 has no interfaces?
[  503.435495][    T7] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  503.654729][ T7955] netlink: 32 bytes leftover after parsing attributes in process `syz.7.796'.
[  503.681321][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.976624][    T7] usb 5-1: config 0 descriptor??
[  505.090565][ T4317] usb 5-1: USB disconnect, device number 7
[  506.475914][ T4287] block nbd6: Receive control failed (result -110)
[  506.554844][ T7993] futex_wake_op: syz.3.803 tries to shift op by 144; fix this program
[  506.591446][ T7993] loop3: detected capacity change from 0 to 256
[  507.794044][ T7993] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  507.819690][   T26] audit: type=1800 audit(1784235168.263:71): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.803" name="file1" dev="loop3" ino=1048657 res=0 errno=0
[  507.842571][ T7992] bio_check_eod: 470 callbacks suppressed
[  507.842583][ T7992] syz.3.803: attempt to access beyond end of device
[  507.842583][ T7992] loop3: rw=0, sector=184, nr_sectors = 120 limit=256
[  507.883186][ T7992] syz.3.803: attempt to access beyond end of device
[  507.883186][ T7992] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256
[  507.898844][ T7992] syz.3.803: attempt to access beyond end of device
[  507.898844][ T7992] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256
[  507.913480][ T7992] syz.3.803: attempt to access beyond end of device
[  507.913480][ T7992] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  507.927064][ T7992] syz.3.803: attempt to access beyond end of device
[  507.927064][ T7992] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  507.940311][ T7992] syz.3.803: attempt to access beyond end of device
[  507.940311][ T7992] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  507.953480][ T7992] syz.3.803: attempt to access beyond end of device
[  507.953480][ T7992] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  507.966737][ T7992] syz.3.803: attempt to access beyond end of device
[  507.966737][ T7992] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  507.979889][ T7992] syz.3.803: attempt to access beyond end of device
[  507.979889][ T7992] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  507.993165][ T7992] syz.3.803: attempt to access beyond end of device
[  507.993165][ T7992] loop3: rw=0, sector=664, nr_sectors = 8 limit=256
[  511.275432][ T8010] netlink: 84 bytes leftover after parsing attributes in process `syz.0.807'.
[  511.658779][ T8013] netlink: 'syz.0.807': attribute type 30 has an invalid length.
[  511.726677][ T8013] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  511.735544][ T8013] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  511.744428][ T8013] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  511.753248][ T8013] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  512.331874][ T8013] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  512.341324][ T8013] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  512.350373][ T8013] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  512.359334][ T8013] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  512.817529][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.7.811'.
[  512.869655][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.7.811'.
[  513.163529][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  513.373586][    T7] usb 5-1: config 0 has no interfaces?
[  513.392244][    T7] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  513.523416][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.683690][    T7] usb 5-1: config 0 descriptor??
[  516.714047][ T4285] block nbd7: Receive control failed (result -110)
[  516.757439][  T127] usb 5-1: USB disconnect, device number 8
[  519.469006][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.476412][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.715726][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.771964][ T8021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.225568][ T8021] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  523.234585][ T8021] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  523.243526][ T8021] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  523.252383][ T8021] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  523.765255][ T8100] fuse: Bad value for 'fd'
[  523.829314][ T8098] futex_wake_op: syz.6.820 tries to shift op by 144; fix this program
[  524.059050][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'.
[  524.383434][ T8102] netlink: 84 bytes leftover after parsing attributes in process `syz.7.824'.
[  524.531438][ T8102] netlink: 'syz.7.824': attribute type 30 has an invalid length.
[  524.573827][ T8098] loop6: detected capacity change from 0 to 256
[  524.681428][ T8098] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  524.722951][ T8102] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  524.731992][ T8102] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  524.740804][ T8102] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  524.749718][ T8102] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  524.779346][   T26] audit: type=1800 audit(1784235185.223:72): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.820" name="file1" dev="loop6" ino=1048658 res=0 errno=0
[  524.804478][ T8098] bio_check_eod: 597 callbacks suppressed
[  524.804495][ T8098] syz.6.820: attempt to access beyond end of device
[  524.804495][ T8098] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  524.890160][ T8102] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.899239][ T8102] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.909307][ T8102] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.918917][ T8102] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.953974][ T8092] syz.6.820: attempt to access beyond end of device
[  524.953974][ T8092] loop6: rw=524288, sector=664, nr_sectors = 120 limit=256
[  524.954929][ T8098] syz.6.820: attempt to access beyond end of device
[  524.954929][ T8098] loop6: rw=524288, sector=784, nr_sectors = 136 limit=256
[  525.090028][ T8092] syz.6.820: attempt to access beyond end of device
[  525.090028][ T8092] loop6: rw=0, sector=672, nr_sectors = 8 limit=256
[  525.165087][ T8098] syz.6.820: attempt to access beyond end of device
[  525.165087][ T8098] loop6: rw=0, sector=664, nr_sectors = 8 limit=256
[  525.643290][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  525.866181][ T4320] usb 4-1: config 0 has no interfaces?
[  525.872501][ T4320] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  526.011173][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.217907][ T4320] usb 4-1: config 0 descriptor??
[  528.375376][ T4317] usb 4-1: USB disconnect, device number 4
[  529.936103][ T8156] netlink: 36 bytes leftover after parsing attributes in process `syz.6.835'.
[  530.519386][ T8151] [U] 
[  531.393375][ T6379] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  532.135697][ T6379] usb 4-1: config 0 has no interfaces?
[  532.749187][ T6379] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  532.889236][ T6379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.900228][ T6379] usb 4-1: config 0 descriptor??
[  534.233684][ T6379] usb 4-1: can't set config #0, error -71
[  534.254675][ T6379] usb 4-1: USB disconnect, device number 5
[  537.900288][ T8194] syz.6.846 (8194): drop_caches: 2
[  538.073436][ T8220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.852'.
[  538.850635][ T8218] [U] 
[  539.813258][ T4317] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  540.581502][ T4317] usb 1-1: config 0 has no interfaces?
[  541.169947][ T4317] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  541.309044][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.536494][ T4317] usb 1-1: config 0 descriptor??
[  541.996652][ T4317] usb 1-1: USB disconnect, device number 4
[  546.871174][ T8295] futex_wake_op: syz.6.871 tries to shift op by 144; fix this program
[  547.096476][ T8295] loop6: detected capacity change from 0 to 256
[  547.162023][ T8295] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  547.275958][   T26] audit: type=1800 audit(1784235207.723:73): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.871" name="file1" dev="loop6" ino=1048659 res=0 errno=0
[  547.309632][ T8299] syz.6.871: attempt to access beyond end of device
[  547.309632][ T8299] loop6: rw=0, sector=184, nr_sectors = 120 limit=256
[  548.153818][ T4320] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  549.506056][ T4320] usb 1-1: config 0 has no interfaces?
[  549.520904][ T4320] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  549.737250][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.774016][ T4320] usb 1-1: config 0 descriptor??
[  551.718827][ T4320] usb 1-1: can't set config #0, error -71
[  551.733523][ T4320] usb 1-1: USB disconnect, device number 5
[  554.956419][ T4285] Bluetooth: hci6: link tx timeout
[  554.962053][ T4285] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  554.971659][ T4285] Bluetooth: hci6: link tx timeout
[  554.976938][ T4285] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  554.984689][ T4285] Bluetooth: hci6: link tx timeout
[  554.992357][ T4285] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  555.272235][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  555.470303][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.493260][    T7] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  555.551259][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.586441][    T7] usb 4-1: config 0 descriptor??
[  555.633287][ T4320] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  555.805621][    T7] usbhid 4-1:0.0: can't add hid device: -71
[  555.823989][    T7] usbhid: probe of 4-1:0.0 failed with error -71
[  555.831910][ T4320] usb 1-1: config 0 has no interfaces?
[  555.838580][ T4320] usb 1-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb
[  555.849541][ T8354] binder: BINDER_SET_CONTEXT_MGR already set
[  555.893348][ T8354] binder: 8353:8354 ioctl 4018620d 200000000180 returned -16
[  555.901091][    T7] usb 4-1: USB disconnect, device number 6
[  555.911066][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.965457][ T4320] usb 1-1: config 0 descriptor??
[  556.423324][    T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  556.653534][    T7] usb 4-1: Using ep0 maxpacket: 32
[  556.667707][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  557.033413][ T4285] Bluetooth: hci6: command 0x0406 tx timeout
[  557.353128][    T7] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  557.363322][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.380839][    T7] usb 4-1: config 0 descriptor??
[  558.516430][ T4316] usb 1-1: USB disconnect, device number 6
[  559.753473][ T4320] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  560.071758][    T7] usb 4-1: can't set config #0, error -71
[  560.081219][    T7] usb 4-1: USB disconnect, device number 7
[  560.214089][ T4320] usb 5-1: device descriptor read/all, error -71
[  562.239109][ T8378] [U] 
[  562.291146][ T8385] ceph: No mds server is up or the cluster is laggy
[  562.300485][ T4316] libceph: connect (1)[c::]:6789 error -101
[  562.320801][ T4316] libceph: mon0 (1)[c::]:6789 connect error
[  562.491850][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  562.499315][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  562.508136][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.516657][ T8386] 8021q: adding VLAN 0 to HW filter on device team0
[  562.602079][ T8386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  562.620330][ T8401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.896'.
[  562.746541][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'.
[  562.795486][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  562.801995][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  564.266932][ T8417] futex_wake_op: syz.0.900 tries to shift op by 144; fix this program
[  564.287090][ T8417] loop0: detected capacity change from 0 to 256
[  564.298892][ T8417] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  564.327992][   T26] audit: type=1800 audit(1784235224.773:74): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.900" name="file1" dev="loop0" ino=1048660 res=0 errno=0
[  564.354920][ T8417] syz.0.900: attempt to access beyond end of device
[  564.354920][ T8417] loop0: rw=0, sector=184, nr_sectors = 120 limit=256
[  564.414805][ T8417] syz.0.900: attempt to access beyond end of device
[  564.414805][ T8417] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256
[  564.429800][ T8417] syz.0.900: attempt to access beyond end of device
[  564.429800][ T8417] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256
[  564.444268][ T8417] syz.0.900: attempt to access beyond end of device
[  564.444268][ T8417] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  564.457596][ T8417] syz.0.900: attempt to access beyond end of device
[  564.457596][ T8417] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  564.470945][ T8417] syz.0.900: attempt to access beyond end of device
[  564.470945][ T8417] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  564.484218][ T8417] syz.0.900: attempt to access beyond end of device
[  564.484218][ T8417] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  564.497429][ T8417] syz.0.900: attempt to access beyond end of device
[  564.497429][ T8417] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  564.510708][ T8417] syz.0.900: attempt to access beyond end of device
[  564.510708][ T8417] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  564.524105][ T8417] syz.0.900: attempt to access beyond end of device
[  564.524105][ T8417] loop0: rw=0, sector=664, nr_sectors = 8 limit=256
[  569.441431][ T7443] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  570.413356][ T4313] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  571.532709][ T8443] IPVS: Error connecting to the multicast addr
[  571.655843][ T7443] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  571.667234][ T4313] usb 5-1: config 0 has no interfaces?
[  571.672739][ T4313] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  571.733382][ T7443] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  571.773250][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.801660][ T7443] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.828284][ T4313] usb 5-1: config 0 descriptor??
[  571.867485][ T7443] usb 8-1: config 0 descriptor??
[  571.990933][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.6.910'.
[  572.742402][ T8454] [U] 
[  572.988804][ T3599] usb 5-1: USB disconnect, device number 11
[  573.236655][ T7443] usbhid 8-1:0.0: can't add hid device: -71
[  573.245416][ T7443] usbhid: probe of 8-1:0.0 failed with error -71
[  574.092441][ T7443] usb 8-1: USB disconnect, device number 2
[  574.514602][ T8487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.916'.
[  575.113523][ T4287] Bluetooth: hci5: command 0x0406 tx timeout
[  579.063899][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.6.919'.
[  579.198328][ T8501] netlink: 32 bytes leftover after parsing attributes in process `syz.6.919'.
[  580.344403][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'.
[  582.499339][ T8510] [U] 
[  582.643364][ T4329] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  582.858881][ T4329] usb 7-1: config 0 has no interfaces?
[  582.875623][ T4329] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  582.993390][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'.
[  583.014018][ T4329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.080666][ T4329] usb 7-1: config 0 descriptor??
[  584.327610][   T41] usb 7-1: USB disconnect, device number 2
[  585.244617][ T4313] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  585.593481][ T4313] usb 7-1: config 0 has no interfaces?
[  585.663483][ T4313] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  585.758635][ T4313] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  585.811129][ T4313] usb 7-1: Product: syz
[  585.831021][ T4313] usb 7-1: Manufacturer: syz
[  585.864662][ T4313] usb 7-1: SerialNumber: syz
[  585.925833][ T4313] usb 7-1: config 0 descriptor??
[  586.172338][ T4329] usb 7-1: USB disconnect, device number 3
[  586.583950][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.935'.
[  586.716688][ T8579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.935'.
[  586.830006][ T8582] netlink: 'syz.6.936': attribute type 10 has an invalid length.
[  586.912805][ T8582] team0 (unregistering): Port device team_slave_0 removed
[  586.928304][ T8582] team0 (unregistering): Port device team_slave_1 removed
[  587.633259][ T7443] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  587.903595][ T7443] usb 5-1: Using ep0 maxpacket: 32
[  587.920579][ T7443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.080512][ T7443] usb 5-1: config 0 has no interfaces?
[  588.211130][ T7443] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  588.360857][ T7443] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  588.507529][ T7443] usb 5-1: Product: syz
[  588.571952][ T7443] usb 5-1: Manufacturer: syz
[  588.663145][ T7443] usb 5-1: SerialNumber: syz
[  588.800253][ T7443] usb 5-1: config 0 descriptor??
[  590.615653][   T41] usb 5-1: USB disconnect, device number 12
[  595.104309][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.947'.
[  595.123792][ T8625] netem: invalid attributes len -8
[  595.128969][ T8625] netem: change failed
[  595.318513][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.6.947'.
[  596.066750][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  596.085612][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  596.095768][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  596.097210][   T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  596.114358][   T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0
[  596.121772][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  596.131849][   T48] Workqueue: hci5 hci_rx_work
[  596.136703][   T48] Call Trace:
[  596.140027][   T48]  <TASK>
[  596.143068][   T48]  dump_stack_lvl+0x188/0x24e
[  596.147827][   T48]  ? show_regs_print_info+0x12/0x12
[  596.153060][   T48]  ? load_image+0x410/0x410
[  596.157617][   T48]  sysfs_create_dir_ns+0x26a/0x290
[  596.162803][   T48]  ? __lock_acquire+0x7c40/0x7c40
[  596.167857][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  596.172609][   T48]  ? do_raw_spin_unlock+0x11d/0x230
[  596.177852][   T48]  kobject_add_internal+0x617/0xca0
[  596.183095][   T48]  kobject_add+0x160/0x230
[  596.187562][   T48]  ? kobject_init+0x1c0/0x1c0
[  596.192264][   T48]  ? __raw_spin_lock_init+0x41/0x100
[  596.197587][   T48]  ? klist_children_get+0x50/0x50
[  596.202716][   T48]  ? get_device_parent+0x121/0x3e0
[  596.207855][   T48]  device_add+0x470/0x1050
[  596.212297][   T48]  hci_conn_add_sysfs+0xd1/0x1e0
[  596.217333][   T48]  le_conn_complete_evt+0xf69/0x1560
[  596.222663][   T48]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  596.228926][   T48]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  596.234654][   T48]  ? mutex_unlock+0x10/0x10
[  596.239183][   T48]  ? skb_pull_data+0xec/0x1f0
[  596.243930][   T48]  hci_le_conn_complete_evt+0x183/0x440
[  596.249500][   T48]  ? hci_remote_host_features_evt+0x230/0x230
[  596.255594][   T48]  hci_event_packet+0x7b3/0x1290
[  596.260559][   T48]  ? __lock_acquire+0x7c40/0x7c40
[  596.265610][   T48]  ? bis_list+0x280/0x280
[  596.269958][   T48]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  596.275889][   T48]  ? kcov_remote_start+0x4b0/0x7e0
[  596.281119][   T48]  ? mt_dump_node+0x1330/0x1900
[  596.286005][   T48]  ? hci_send_to_monitor+0x9c/0x4a0
[  596.291221][   T48]  hci_rx_work+0x3eb/0xd40
[  596.295656][   T48]  ? _raw_spin_unlock+0x40/0x40
[  596.300533][   T48]  ? process_one_work+0x7b4/0x1160
[  596.305719][   T48]  process_one_work+0x8ab/0x1160
[  596.310686][   T48]  ? worker_detach_from_pool+0x240/0x240
[  596.316345][   T48]  ? _raw_spin_lock_irq+0xb7/0xf0
[  596.321419][   T48]  ? _raw_spin_lock_irqsave+0x100/0x100
[  596.326982][   T48]  ? wq_worker_running+0x97/0x190
[  596.332076][   T48]  worker_thread+0xaf5/0x12a0
[  596.336837][   T48]  kthread+0x29d/0x330
[  596.340949][   T48]  ? worker_clr_flags+0x1a0/0x1a0
[  596.346004][   T48]  ? kthread_blkcg+0xd0/0xd0
[  596.350615][   T48]  ret_from_fork+0x1f/0x30
[  596.355084][   T48]  </TASK>
[  596.358234][    C1] vkms_vblank_simulate: vblank timer overrun
[  596.362317][ T7466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  596.371407][   T48] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  596.385544][   T48] Bluetooth: hci5: failed to register connection device
[  596.394602][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  596.402109][ T7466] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  596.714302][ T8656] chnl_net:caif_netlink_parms(): no params data found
[  596.862771][ T8677] netlink: 228 bytes leftover after parsing attributes in process `syz.4.952'.
[  596.902177][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.909709][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.928056][ T8656] device bridge_slave_0 entered promiscuous mode
[  596.946832][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.988146][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.072857][ T8656] device bridge_slave_1 entered promiscuous mode
[  597.688298][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.773816][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.806065][ T8656] team0: Port device team_slave_0 added
[  597.815224][ T8656] team0: Port device team_slave_1 added
[  597.837029][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  597.844377][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.473150][ T7466] Bluetooth: hci0: command 0x0409 tx timeout
[  598.663897][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.684381][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.701644][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.727555][    C0] vkms_vblank_simulate: vblank timer overrun
[  598.755787][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  599.738662][ T8656] device hsr_slave_0 entered promiscuous mode
[  599.751587][ T8656] device hsr_slave_1 entered promiscuous mode
[  599.775763][ T8656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  599.786595][ T8656] Cannot create hsr debugfs directory
[  600.082254][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.959'.
[  600.110378][ T8704] netem: invalid attributes len -8
[  600.133713][ T8704] netem: change failed
[  600.241155][ T8712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.959'.
[  600.553100][ T4287] Bluetooth: hci0: command 0x041b tx timeout
[  600.614701][ T8656] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  600.678611][ T8656] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  600.787649][ T8656] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  600.902268][ T8656] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  601.113333][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.129465][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  601.171100][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  601.247232][ T8656] 8021q: adding VLAN 0 to HW filter on device team0
[  602.144912][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  602.225333][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  602.398223][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.405437][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  602.513633][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  602.553126][ T4287] Bluetooth: hci5: command 0x0406 tx timeout
[  602.633202][ T4287] Bluetooth: hci0: command 0x040f tx timeout
[  602.669863][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  602.712487][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  602.755558][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.762750][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  602.828245][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  602.871836][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  602.929859][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  602.964560][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  602.991968][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  603.017672][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  603.049240][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  603.084104][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  603.102464][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.967'.
[  603.126302][ T8656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  603.159382][ T8656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  603.184089][ T4287] block nbd0: Receive control failed (result -1)
[  603.204917][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  603.221738][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  603.274943][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  603.290815][ T8758] netlink: 'syz.7.967': attribute type 30 has an invalid length.
[  603.304333][ T8758] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  603.313216][ T8758] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  603.321985][ T8758] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  603.330804][ T8758] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  603.344609][ T8758] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  603.353720][ T8758] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  603.362640][ T8758] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  603.371638][ T8758] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  604.713568][ T4287] Bluetooth: hci0: command 0x0419 tx timeout
[  604.891598][ T8778] device bond2 entered promiscuous mode
[  604.898397][ T8778] 8021q: adding VLAN 0 to HW filter on device bond2
[  605.569685][ T8773] [U] 
[  605.644012][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.7.972'.
[  605.663441][ T8787] netem: invalid attributes len -8
[  605.668614][ T8787] netem: change failed
[  605.788329][ T8793] netlink: 32 bytes leftover after parsing attributes in process `syz.7.972'.
[  606.793409][ T4287] Bluetooth: hci0: command 0x0406 tx timeout
[  608.234643][ T8809] XFS (nullb0): Invalid superblock magic number
[  608.349435][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  608.363321][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  608.453969][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.637331][ T8860] 9pnet_virtio: no channels available for device syz
[  611.868467][ T8864] device bond3 entered promiscuous mode
[  611.876225][ T8864] 8021q: adding VLAN 0 to HW filter on device bond3
[  612.275170][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  612.428490][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  612.535467][ T8862] [U] 
[  612.659283][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  612.700864][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  612.752075][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  612.798910][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  612.825940][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.986'.
[  613.135449][ T8871] netem: invalid attributes len -8
[  613.336354][ T8871] netem: change failed
[  613.535329][ T8656] device veth0_vlan entered promiscuous mode
[  613.768024][ T8656] device veth1_vlan entered promiscuous mode
[  613.855590][ T8871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'.
[  613.978780][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  614.000464][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  614.020633][ T8656] device veth0_macvtap entered promiscuous mode
[  614.290682][ T8656] device veth1_macvtap entered promiscuous mode
[  614.751614][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  614.839733][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  614.854154][ T8897] block device autoloading is deprecated and will be removed.
[  614.945485][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.973199][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.990726][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.018949][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.055836][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.193674][ T4317] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  615.218636][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.282865][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.293834][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.305907][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.318182][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.335858][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.346287][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.357157][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.367605][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.378784][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.389214][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.400625][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.412717][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.424794][ T8656] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.434397][ T8656] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.443952][ T8656] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.452838][ T8656] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.457425][ T4317] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  615.490929][ T4317] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  615.716378][ T4317] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  615.861416][ T4317] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  615.880908][ T4317] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  615.920903][ T4317] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  615.970882][ T4317] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  616.003561][ T4317] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  616.041820][ T4317] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  616.094892][ T4317] usb 1-1: string descriptor 0 read error: -22
[  616.102749][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  616.126261][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  616.134786][ T4317] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  616.146591][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  616.155111][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.164284][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  616.179342][ T4317] adutux 1-1:168.0: interrupt endpoints not found
[  616.188226][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'.
[  617.191217][ T8930] [U] 
[  617.234077][   T22] usb 1-1: USB disconnect, device number 7
[  617.353560][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.381788][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.418001][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  617.504019][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.511953][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.564669][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  620.240715][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'.
[  620.256205][ T8968] netem: invalid attributes len -8
[  620.262477][ T8968] netem: change failed
[  620.409041][ T8978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1002'.
[  621.255240][ T8998] device bond1 entered promiscuous mode
[  621.261792][ T8998] 8021q: adding VLAN 0 to HW filter on device bond1
[  621.815550][ T8993] [U] 
[  624.237603][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  624.246135][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  625.050478][ T9057] XFS (nullb0): Invalid superblock magic number
[  626.564703][ T9067] [U] 
[  629.640678][ T9108] XFS (nullb0): Invalid superblock magic number
[  634.553429][ T9154] XFS (nullb0): Invalid superblock magic number
[  635.273198][ T6379] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  636.036955][ T9186] device syzkaller0 entered promiscuous mode
[  636.045341][ T6379] usb 8-1: config 0 has no interfaces?
[  636.051068][ T6379] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  636.064315][ T6379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.084950][ T6379] usb 8-1: config 0 descriptor??
[  636.149282][ T9186] tipc: Started in network mode
[  636.159378][ T9186] tipc: Node identity 06f5de81d1de, cluster identity 4711
[  636.172206][ T9186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  636.189134][ T9185] tipc: Resetting bearer <eth:syzkaller0>
[  636.249015][ T9185] tipc: Disabling bearer <eth:syzkaller0>
[  636.298071][   T41] usb 8-1: USB disconnect, device number 3
[  642.673142][   T41] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  642.876290][   T41] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  642.893072][   T41] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  642.913358][   T41] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  642.927714][   T41] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  642.940651][   T41] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  642.956693][   T41] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  642.968385][   T41] usb 9-1: Product: syz
[  642.974751][   T41] usb 9-1: Manufacturer: syz
[  642.986791][ T9230] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  642.996526][   T41] cdc_wdm 9-1:1.0: skipping garbage
[  643.001818][   T41] cdc_wdm 9-1:1.0: skipping garbage
[  643.007710][   T41] cdc_wdm: probe of 9-1:1.0 failed with error -22
[  643.269502][   T41] usb 9-1: USB disconnect, device number 2
[  643.873268][   T41] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  644.074594][   T41] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  644.103078][   T41] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  644.123628][   T41] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  644.163079][   T41] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  644.192502][   T41] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  644.217483][   T41] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  644.226162][   T41] usb 9-1: Product: syz
[  644.232605][   T41] usb 9-1: Manufacturer: syz
[  644.241184][ T9230] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  644.250232][   T41] cdc_wdm 9-1:1.0: skipping garbage
[  644.255860][   T41] cdc_wdm 9-1:1.0: skipping garbage
[  644.269723][   T41] cdc_wdm: probe of 9-1:1.0 failed with error -22
[  644.465399][ T3599] usb 9-1: USB disconnect, device number 3
[  644.673154][   T41] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  645.718628][   T41] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  646.050759][   T41] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  646.588112][   T41] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  646.600720][   T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.620639][ T9256] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  646.933213][ T6379] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  647.143150][ T6379] usb 7-1: Using ep0 maxpacket: 8
[  648.433552][ T6379] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  648.441718][ T6379] usb 7-1: config 120 has too many interfaces: 48, using maximum allowed: 32
[  648.451528][ T6379] usb 7-1: config 120 has an invalid descriptor of length 102, skipping remainder of the config
[  648.462313][ T6379] usb 7-1: config 120 has 0 interfaces, different from the descriptor's value: 48
[  648.472058][ T6379] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  648.481399][ T6379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.678214][ T4329] usb 8-1: USB disconnect, device number 4
[  649.914599][ T6379] usb 7-1: string descriptor 0 read error: -71
[  649.940515][ T6379] usb 7-1: USB disconnect, device number 4
[  651.102954][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  651.112770][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  651.120904][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  651.148705][ T9313] device bridge_slave_0 left promiscuous mode
[  651.170948][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.207632][ T9313] device bridge_slave_1 left promiscuous mode
[  651.223975][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.298365][ T9313] bond0: (slave bond_slave_0): Releasing backup interface
[  651.336596][ T9313] bond0: (slave bond_slave_1): Releasing backup interface
[  651.476305][ T9313] team0: Port device team_slave_0 removed
[  652.426849][ T9313] team0: Port device team_slave_1 removed
[  652.433550][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.440979][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.481340][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.498324][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.530584][ T9333] XFS (nullb0): Invalid superblock magic number
[  652.770499][ T9340] netlink: 'syz.4.1098': attribute type 13 has an invalid length.
[  652.849471][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  652.933192][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  652.956527][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  657.293243][ T9397] fuse: Unknown parameter '0x000000000000000700000000000000000000'
[  660.149878][ T9410] syz.0.1112 (9410): drop_caches: 2
[  660.425235][ T9427] 9pnet_virtio: no channels available for device syz
[  665.803064][ T4320] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  666.013258][ T4320] usb 5-1: Using ep0 maxpacket: 8
[  666.023887][ T4320] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  666.050202][ T4320] usb 5-1: config 0 has no interface number 0
[  666.076731][ T4320] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  666.116528][ T4320] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  666.146591][ T4320] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  666.193094][ T4320] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  666.222730][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.264142][ T4320] usb 5-1: config 0 descriptor??
[  668.354822][ T4320] ldusb 5-1:0.55: Interrupt in endpoint not found
[  669.253368][ T4329] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  669.370482][ T7443] usb 5-1: USB disconnect, device number 13
[  669.564674][ T4329] usb 8-1: config 0 has no interfaces?
[  669.570256][ T4329] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  669.731154][ T4329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.800233][ T4329] usb 8-1: config 0 descriptor??
[  670.075008][ T9529] syz.6.1140 (9529): drop_caches: 2
[  670.478542][ T6379] usb 8-1: USB disconnect, device number 5
[  671.578645][ T9565] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  672.243184][ T7443] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  674.753080][ T7443] usb 7-1: Using ep0 maxpacket: 8
[  675.055793][ T7443] usb 7-1: device descriptor read/all, error -71
[  676.249914][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.257289][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.273763][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.318306][ T9617] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  676.347978][ T9617] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  676.431348][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.442893][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.454590][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.467688][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.477907][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.489621][ T9617] bond0 speed is unknown, defaulting to 1000
[  676.500099][ T9617] bond0 speed is unknown, defaulting to 1000
[  678.714803][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1172'.
[  678.743873][ T9647] netem: invalid attributes len -8
[  678.749134][ T9647] netem: change failed
[  678.845891][ T9648] trusted_key: encrypted_key: insufficient parameters specified
[  680.145088][ T9647] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1172'.
[  680.453606][   T22] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  681.423166][   T22] usb 8-1: Using ep0 maxpacket: 8
[  681.440277][   T22] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  681.468986][   T22] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  681.501349][   T22] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  681.524844][   T22] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  681.559971][   T22] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  681.609552][   T22] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  681.631620][   T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.877833][   T22] usb 8-1: usb_control_msg returned -32
[  681.883839][   T22] usbtmc 8-1:16.0: can't read capabilities
[  682.155848][ T4320] usb 8-1: USB disconnect, device number 6
[  682.804026][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1186'.
[  682.821358][ T9702] netem: invalid attributes len -8
[  682.826674][ T9702] netem: change failed
[  682.954275][ T9709] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1186'.
[  682.993809][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  683.026262][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  683.053318][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  683.133594][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  683.201286][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  683.279892][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  685.676662][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  685.683051][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  685.933115][   T22] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  686.140372][   T22] usb 9-1: config 0 has no interfaces?
[  686.149633][   T22] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  686.194274][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.216333][   T22] usb 9-1: config 0 descriptor??
[  686.236219][ T9769] __nla_validate_parse: 4 callbacks suppressed
[  686.236269][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1200'.
[  686.291094][ T9769] netem: invalid attributes len -8
[  686.313137][ T9769] netem: change failed
[  686.416834][ T9776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1200'.
[  686.488988][ T4329] usb 9-1: USB disconnect, device number 4
[  689.814413][ T9814] IPv6: NLM_F_CREATE should be specified when creating new route
[  689.822324][ T9814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  689.830020][ T9814] IPv6: NLM_F_CREATE should be set when creating new route
[  689.837334][ T9814] IPv6: NLM_F_CREATE should be set when creating new route
[  690.983407][ T9831] block nbd7: shutting down sockets
[  691.960090][ T9826] lo: Caught tx_queue_len zero misconfig
[  692.994527][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1217'.
[  693.029676][ T9858] netem: invalid attributes len -8
[  693.055137][ T9858] netem: change failed
[  693.184172][ T9863] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1217'.
[  694.803170][ T4329] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  694.957179][ T4316] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  695.165364][ T4329] usb 9-1: config 0 has no interfaces?
[  695.165501][ T4329] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  695.165528][ T4329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.192509][ T4316] usb 8-1: config 0 has no interfaces?
[  695.192702][ T4316] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  695.192816][ T4316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.210175][ T4329] usb 9-1: config 0 descriptor??
[  695.219906][ T4316] usb 8-1: config 0 descriptor??
[  695.634551][ T4320] usb 9-1: USB disconnect, device number 5
[  696.817650][ T4320] usb 8-1: USB disconnect, device number 7
[  697.117347][ T9895] fuse: root generation should be zero
[  697.133308][ T9896] block nbd0: shutting down sockets
[  698.803254][ T9912] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  698.831871][ T9912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  699.513510][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1233'.
[  699.734339][ T9921] netem: invalid attributes len -8
[  699.773932][ T9921] netem: change failed
[  699.811262][ T9921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1233'.
[  703.063373][ T4313] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  703.288244][ T4313] usb 1-1: config 0 has no interfaces?
[  703.295502][ T4313] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  703.394767][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.580248][ T4313] usb 1-1: config 0 descriptor??
[  706.485314][ T9944] XFS (nullb0): Invalid superblock magic number
[  706.538456][   T22] usb 1-1: USB disconnect, device number 8
[  707.453536][ T9973] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1248'.
[  707.474157][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1249'.
[  707.493336][ T9975] netem: invalid attributes len -8
[  707.498675][ T9975] netem: change failed
[  707.624755][ T9981] 9pnet_virtio: no channels available for device syz
[  707.641078][ T9982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1249'.
[  713.443344][ T3599] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  713.670542][ T3599] usb 1-1: config 0 has no interfaces?
[  713.700965][ T3599] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  713.836055][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.017281][ T3599] usb 1-1: config 0 descriptor??
[  715.691080][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1263'.
[  715.840104][T10040] veth0_macvtap: Caught tx_queue_len zero misconfig
[  715.998766][T10040] netem: invalid attributes len -8
[  716.227273][T10040] netem: change failed
[  716.902057][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1263'.
[  717.644943][ T7443] usb 1-1: USB disconnect, device number 9
[  719.663748][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'.
[  720.074377][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1277'.
[  720.113337][T10107] netem: invalid attributes len -8
[  720.118615][T10107] netem: change failed
[  720.922192][T10117] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1277'.
[  722.344668][T10148] XFS (nullb0): Invalid superblock magic number
[  722.798350][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  723.143386][ T8506] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  723.169505][T10167] netlink: 'syz.6.1290': attribute type 1 has an invalid length.
[  723.226606][T10167] 8021q: adding VLAN 0 to HW filter on device bond2
[  724.134136][T10167] bond2: (slave vlan2): Enslaving as an active interface with a down link