last executing test programs:

5m31.681024881s ago: executing program 1 (id=340):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b7050000302f469c40b4400754a85d999fbe17893eec2a34f0d00e0e4a7c009500000000e0f8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

5m29.989557493s ago: executing program 1 (id=344):
unshare(0x2040400)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f00000008c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r2, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f00000002c0), 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

5m29.762319692s ago: executing program 1 (id=346):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfd, 0x1}, 0x10)
r4 = dup2(r1, r0)
close_range(r4, 0xffffffffffffffff, 0x0)

5m29.387642082s ago: executing program 1 (id=348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M'])
chdir(&(0x7f0000000140)='./file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)

5m28.747629337s ago: executing program 1 (id=349):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f00000001c0)=ANY=[])

5m26.03850183s ago: executing program 1 (id=359):
r0 = io_uring_setup(0x30d3, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, r3, 0x10c}}}, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m25.137095491s ago: executing program 32 (id=359):
r0 = io_uring_setup(0x30d3, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, r3, 0x10c}}}, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m33.489279221s ago: executing program 5 (id=501):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
read(r2, &(0x7f0000000100)=""/85, 0x55)

4m32.314158514s ago: executing program 5 (id=502):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
writev(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x68)

4m28.848656606s ago: executing program 5 (id=507):
r0 = syz_open_dev$radio(&(0x7f0000000780), 0x2, 0x2)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
socket$alg(0x26, 0x5, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

4m27.551878126s ago: executing program 5 (id=510):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M'])
chdir(&(0x7f0000000140)='./file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)

4m26.72286056s ago: executing program 5 (id=516):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})

4m25.922440238s ago: executing program 5 (id=517):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001000000000fcc4"], 0x18}}, 0x20000840)

4m25.279660646s ago: executing program 33 (id=517):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001000000000fcc4"], 0x18}}, 0x20000840)

1m16.642143629s ago: executing program 3 (id=1086):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x4040, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r5=>0x0)
fcntl$setown(r0, 0x8, r5)
truncate(&(0x7f0000000140)='./file0\x00', 0x9)

1m14.437145575s ago: executing program 3 (id=1094):
r0 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r0, &(0x7f0000000580)=""/220, 0xdc, 0x100, 0x0, 0x0)
sendto$l2tp(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}, 0x10)
recvfrom$l2tp(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
dup(r1)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x0, 0xff, {"2a4332c3fefcb7080000000000000037"}, 0x101, 0x4, 0xfff}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74fc6820fc3a1409b4500000900"})
syz_usb_connect(0x0, 0x2b6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x2, 0x4, 0x20, 0x80}, 0x125, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x1, [{0x0, 0x0}]})
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
accept$ax25(r4, &(0x7f00000006c0)={{0x3, @netrom}, [@default, @default, @bcast, @rose, @null, @null, @bcast, @bcast]}, &(0x7f0000000740)=0x48)

1m11.254516205s ago: executing program 3 (id=1105):
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40044582, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r3 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f0000000840)=[{0x0, 0x7010, 0xfff5, 0x0}], 0x1})

1m8.541405477s ago: executing program 3 (id=1111):
mkdir(&(0x7f00000003c0)='./file1\x00', 0x16)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, <r2=>r1}, './file0\x00'})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20c00, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file1\x00'})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

1m8.292545339s ago: executing program 3 (id=1115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="2000080100000000000000ab4a"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r3 = socket(0x200000000000011, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x80000000001, 0x1c9080)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$packet(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)

1m7.762014494s ago: executing program 3 (id=1117):
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40001)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m7.508950919s ago: executing program 34 (id=1117):
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40001)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

15.935420523s ago: executing program 6 (id=1260):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f00000012c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$kcm(0x29, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, r2, 0xa09, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x24044894)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))

14.642584286s ago: executing program 6 (id=1264):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
io_setup(0x3, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000700)='9', 0x1}])
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x118)
ioctl$TIOCPKT(r1, 0x5420, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = syz_open_pts(r1, 0x41)
r5 = dup3(r4, r1, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000))

13.71308346s ago: executing program 7 (id=1265):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)

12.560200547s ago: executing program 0 (id=1268):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4880)
fcntl$setpipe(r3, 0x407, 0x0)

12.555977612s ago: executing program 7 (id=1269):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_open_dev$loop(0x0, 0x1, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="ee43a8f8855298a8290b47b6eb9ecbe3b5cc7d6c5531c6b9218388565017628705c4c32fd55292c0c3f883dbf2e8034edf548838c491174fa9ac73e1c9cc70bf5a3522661ea6daeb623ad80d7d2c07b34a3c60821044fcdef7787b6571dfdf4179e6fe0b1d1a55e1804b1c64f153b46f3ea2ddeb087377540bd71dd01663b7fcb827815c7f8a0045e3e851ccf0c6e73fee19fedd3098a97fbef63ff5eb7c1c1f2facda43aba1f2cdf493a3539ab05e525711238ea2b5e70c7bf56091e3fdd7de8cc3ff7b43e649b5c7378c1f9538f8cd9adc78d0893204f65f7d3b0c7d4d5dd1441cf6d19035e5382545c8c91521551b6347bf4d2356b015b77d05a492e1f8a5a356afeec8b308d8f2c838bd0c9b28dde9239783312362e311e727d23d8545f171dfad77a54fc618378a8088c4627b29643e40ddabc200ae14284084d327e439fa1901f9bf6c52e9a2b7176cd308b3c0d82f6ac370a95055c37b56478f8f33648164250f2c4ec4ff44ff22fc62308909ac5f6b3ee783169933dd421a77bdc238b6e54ed292d033fc80b2f4f6e9200589ef32be4de445d981ed0df390fa2691cf5a22eb7dd1277eed9f79cc489fcbd424f9e42683b4891d54d93d1d12eb6076af805bd5ab5a6007da7daa9eaa4763c5ff36b4d6547145e90e5b74041e24bd3c4b996412637757dcc343784511f09bce6e91908b1a3d4f2bc8310105bef2474b2a7e3204a475a1aa5b6189ca02892342e4ce48e4e7a34eac5f5a973ad1fdeb2404e8899bfa9e40f411c84f75d76a4c680ca107e8cc134527f942d15a17011ffed9f11947a2054d8875d6a562a10685e73c92b78ed8b8c05ac12bdc7b627f0f00a2048027ef15085179610b3142e65b73e931ffd17a40f207e682cd567213c4b88ece6f8e41917944da92b7b834027b0ca18d3f1d1264a920dda9f494bdc359e060be1298dcf3be313cbbc61a70bc02dadc0bbaa4fcc2ce0575651adf3d277f0d4e0bf7ef449e0a6a9d9ff5a20f659fd0b5515d46dd1ed1b412b19a7ab40eff607d26b71056de718acdf6ac40f5e50bfd2a65984242fc20d69bba826d308e0cbafe1b6bd336bc2f1c205bd454a06e5199a23ca1c0a7595cae2550c21aae006001cfa7cdc428cded037397e6b6d009f6b9bee1615aa52da336538e045bf324c71dad2997d87801f87d4d3e0a9a7038573b6220b0676af9b56240f3db4af583ff2a8b9242a6568bc0994d89639a88fea8ede9c59b04591378ec636088dd6ec82c4de4c9de7776ca070a3e7103551ad58eee1ccc0e4d3a0392285802d23b8b5be7b407bb8e38dd7fb793c295c16167c6761ab88f28d509854314f5b7120eaa00f0665c4131cad14a86cd4a758716426eb189b9ad7736d7c7b4a49e7be11019cd28d8869a9f30d8ae52ce35c5a69163d514884fb0e404f59bb7f378dae93d3b1c77db574c5115136a7a0d751486cb0dfc6231b3e242ef88c0d983f65e78e74001e50019fd124d1a0761362cd0ee6d6212c55f37837e21356db7fb5fe79c05db8e45425222f3c4d1fc09667accd4164b8ef336ae3db5b215c82dc0ae4e44c98db78481b9942555dc0ca311c4cabdddd318c5e4f8d477294aa43820f3e4c334987423acd6736196a2990789b4b2d65f48ba3039eeecb2ab8abbf1004c10cc1b563ad368df3513b152878c08fefe65744210432347bf4a67f09dda78be9f1024e077c7191f39b718eb12d7bc7500e855f40673d9975c12ac0bc3526d5017cbfa2a07263f58293bb8c7500b8e365533161295d9ca65c6b8b29482ce3078295a6454bdb574476249c0f7b4cdf3ae3ef55afa3ef653e712f14dd7e270ef728ff4c4f38d09b03daad2868e922a7723ec00884ddfd19a527744ef6cecbc74e8c74aa37b62734286ef94d400a7f884f20c2891ebe78b70a7ea6535c1f1d2a421fd3a05a45749f1511a10eb6f45e54e1b83a2e437df5127be5b54cdaf39bbc96187e46cde341a948bc6999ff738a8abb8da9b943e8e2de28d37cd07c346d05b18b90dc98310d8de6286c42bad83393f3f57ab3c54ad753588909c7eaa08eaccfbda485af7423bcfb58966a0f2b1362801223a99228865b1dfba3d102b63fe3a1dfedd561d205358a276d3887612ce91de546ce6d0b9f5420b667675bc597964910891bf71f949e186f4fe96324b1690c53a8ac12bcbd86e046f3752453bc8c3abc04ca05aeaa4539419dcc2985eb0ba64faa63733a417c25eb4e0a94d4237c9f305fc1a5575b85835f2a71d9dbebbf13a8f58ae798feac3f36af38970b89a705fdb4964ad62c2e3bcf80078a03bff48b9a7c948010789fcd4930999ab49c8dbac946ae3e51ce06b24d0a96fd51070e79950f4477fa39452180ae8cf0dae34079354e0772283d07f0580fc9e03cdac4b27edcf59587746871b1739daf3db43e78d832039f3d82f2fc9aee5798b4d19ae96b9b81c73bc2633a32db2b0452bd22a0cc557d20d46343b244051e0aa33edb3edf35d26114e59424454225e4468131ba1ab70c320a321d5771f18c8fc48617763f77cd3d0b51d90a0d05bef340cc4d52fd65e6b39f2e4f7a7bb8722641df73ec3931541a6cdc43cafa6c5e885ebcc00d230f5d03e59e46feb996da8fa59d16d1e271b0faf2f3f1e1eeda53b9f6bee341b94f4ac6c2f0431253c2beb3d3dac49ae543643a2a4b6aaf5ae46d85a102b71d7ae6cbcd50ab8c6a7a61a972cd6c0ecc8ac1cb7c2b7b732e268c0155b918559afe4f470a9f3e61a41acdee97605332613bce6cb5eadf3786a6ab6bd90d672cd4861f273b1a16998a22c03a81fd8295f6a3068581844ffee8b1e7b95b246167b367b2696508d51b2fa3ccdaae9edd68a04a85a95603b28c273f24715267b8e066cfbbce136ea2cbcc9087fcfe17da753734ce7c47195d9aa65149dc2d0e6155d52ac5173160b84d21906704ea06b34c6f7696f81f39ea3c3b2e5ccb3866357143da1ea3362fa2567b3822f3cfa547cab553f16c589339cefd6620f290273be6375afe68d09f910c6121c84d787b6fbb46ea6561f78459d08a15d8e712606015709fbf5902e46f84ac3d270df370acb8f6c7ee59f61eccd167a885068da639fb3f1c4c7722d7a0fed2489855dd31783bfe807926dff94b6d98535364ea1117592025d20942d2090b0706ae357f98f1e2b7511a9f37b3a9d3d2bacc5aff1e8b3d5f3d5134e75f8af24bf348d50a5222eb0cb2ac2a53ae4e069bce30cda581df56adfe41f7c1831bb2e4370914be2d3c6b5f33c5414597c7248d402e373aa246535d69385da9da1c4a3584b8d280fea95ab160ac8c4303c3f2800ccb7b5797395418b4f3c7dc728dac80404c576e6731644089bc7fc82bc3c6abbd5e174a40e6f1d56c5023669aa08130eee2a0b7263eb215af283b7422689b1966d0bb8e34b8b2b8acd118f125c3d45c4297ff38e1e45c5eb1f3d9b5ef283a7f188baf6ca030b9dbf624e23f8455bb8afe8314bc1acd0beda0cd477a16d982ddbc9c525c8c24b9e53ddb4ff9d03c6db15b121738c4d5a24e638a0c238e3cb865eb7433d672401f6dae1ce7ffe330045e44644f185b2d47c82108dd6052d2a928d7f49e9e22b7cdd94c09a6c9820ff22169acc82e08b430926c5af7d290ca92598fa2d212154a10e17e5af05b5c2141475d7ab034bd384cf663fec9e1f9d8f50c1d3e0406f2665cb273ca0185281ee3a65cd76a1a350fe9aeae6e49cb8f0eb4dba4c19ecf27479833fc47dfee6ae7806723ba5c2f24c62e26a3d8a74cb43546d28acb0fbf287c03dcdac6699c3c7f9a3b806ac2318118395fa4e052eb620f02a90dc0556e6338266d5529f968359372a21c5b54a46ae61dcd528d7569435311abf1133be800f466dc19ade70b233ab4a5fa04ddcc476ba44aafd2c443a0c6738a422477a8da46420dbc8cf09302e8e59ce967a4832b46e74bf81306ccb497bcd35ae1e552566c5414982ba51151a4f1b13dc1d0065ea65e5272d9a004ffa84574ce96d94561d46664659dd9ebabd1a907b5127b140801720c1d92a40530040c03a869debffa977a57a8d6196cfc24e844f2486639ed630f5eae1dafd32ebaa1d71a7cfbe98badd7f0962fdce731e2ebd4b97fbbfb82a6cbf94d9d67a58f74d0856ae50e757823976f018281590e6adb9b6d5c0e58833d747957196d502f0f96f70bc351fb9599dd3d177162d087f25f4ef07c2796d2b3b1d2ed1d45bd3ee150d0b9569c4ba640526df0c91825fa8442045ca8397aaa16a39f179dd04fa63c9195617849868f0018756391089827fd090b898b165c0528f835d7726c18cd81f1613c5607d54d074d0c3e37a76c884f963ff8070cb25e441d215c02328ea43f518e139a5df4c033e429a27ca9ec62b103578c075baee7a047e070892c169401bd1d3b9b94bb3375af9ef41d75e4199e486042c0c50bf7b2b883251938ec16150cdcd3806b1df7c6bf190567afbfc540145e9f4885a02a2e0a32f878c097799b728eb6db95061c741526f9a8f988f6c6c24b459fa236b27e978628e38c6a4e0a88199f645e64a535a13e8aec318c43c55c7e61160851d534383b76e300718553a710ddbf937f2f16bff9a2cb883d4d96151b2ce87b6269dce42b153d8d4d7cdd1f1d041bd0a58e76f169f8a3ca5fe9d1cd0d5023b9caaec86fbd65b67c7a972a9616cbeee989942b965d6fc0eaa1ac40240dbc910a72cb5ac4af89b390eabfa9fb8740028f0db6c52036df330d65b958d54b92e156a560648e83fc662d63f1a2af989c03a035f539ae047d611c3eff899ea684e02eb0021ab1a7a20ada3a7bc671935238232b785bc740aeda2a9a8107d63aaea386b9b4462921f2a57c9f681ac4d2e5688de78480826fd0c2646c6922a337a121efad078e8032b9adae398d02da7ab5144f9cde3cc6306c4250788f365f7a51f59e4bd7b4944f5c3acf6046e5ac66fb5d0f83ffbd24de6b43ca32547138609099bb2615fb1ffd971a7117b21e2b70002b5de395f14bf5bd96869bb858687c69026453e2f2f058736603f95f80d8c8d0a22f4f547bf5873ec896f46ce6699682f375cc3d460e836ab58e19830d10dd6458eca0b31dc8b568a1d99b7f01ae483f8c9e99245a5437d4af82b3925aee36b3dc77d5b588d9e225050ee847bbf1c4d0a26fa55eed6f8586d979e9b0e0fadafc8cb56bb74f16efdf4967627a11f669aa5eea716f957d2352e158dec9d295f9d50ca846fda87fcbaeac91df406b7250da41177587dc7102f8fcd9086e263feec335ed1312b71d74403f81c7c7d5731d4b8a10475f86bfeb59a52e769d8c1322facd03960286cda9b6fbea84b06b443baf710d29a209e01d572beb43ddd6ffef3c35afd79a3b12099680a377ee7469610fa26210522d8764d93a00d4a63061f7d0c777199984217b34b4f247ceabff49eed8f404739cb76c6a3f3a1c5804074756266294e2ed4fb15ef2f2cbbf98183dc5dfcb568da748ddf2e5ff56688e1ea25410321d0015c45ceb9eff7c855f683e6a7da716ae15363f98a17fa602edc2cda3ba3bf3d0f53adf56618b2629d4feb77bf70f80c68beea0a37034270c6599498d995c91468fcc4c6650471227af2e38eb3ba208bb7c3c7c326ef744c58bb10e548a770caf35e0ee64053bd8820cdcb4cee1f5ef3dc45ecf8f2a6a0d8e3978c5456ea5989316d75ec5743faf8e63c6b1d68186c7dc2bb8b04f239b42af853e39a43d5891ba3479c0efcb885466710ea1112bd2a7561a6ddbb744ba207ab8ff1e755f3f304d286de3a739b2801af5bab3fd7f034ede2dd38da60415393d6b12ea96ee6cf3b1a87b12b034719e9d907497e1114c888ff2ead6cbc00aa4e9db18186913c35147c9ad06748971a7aed0fa87b4c864150ff06e37b2ef984f0d6e2838e099bcfb92939c75082fa5dc9c7c8455b119866939ef78a594d48b1e233ab2530058a7c2ae8f4147528d0ba328aabdd8d61c2270fb9ab790fbf913e97d15d5e20553016791855e617131474ef0b75081a0c43fc5fa1ecb67c7edeeecc97cd7d941845dad2e54b42e18e68ce41f849313143fe0152e104a2a401e42f982145d9bce7ed874705bf7576ce102ebbe11d6187acba2d06e2b3762cdc8c3f67aa66fd1d70e4ee55e739ebe0b390c8205edc63a9895969ec6fd13b798d5a0401c2e18a580f10505d5abc79a799088d59481a6c26b94180efda1c5c23e9b884f658d8fb0cd80e8e6b3a20c81676f47e929433c27bacb24257edf3e8630755e17d800d8db4f2be1fda9317ba2ecb53756fb0ca80701e49e209859f006a4324c0de093b3da7c23be79567990c7d887a03ab64b787832dbaf2579e76d343d41d37431475d11e918393296bff7a33feb659948d554405fac79bf7cc7c4f702e0d74a3cc384f44bdcb800cb24ee11c9531418c1c82453c0410514391cf5679e4d0d9949a8ce20ac70c12694ea6ca08a87307a98a05d48c7608783e0acc829c65425d8677f103a92e1c852164f09ab67f9a155f3575b2ec3ccfd7cb9ad431dd875369abb7ea31b994e2e39a59e5bd93bc8852ea3e2efff3707c8e1319e6c16be14e3386ad2bb5affb435c2436762b58dc6ffeec0743ea0dca0384ef1217db3d6219fb2921861b176fa0b714decb2e5bfe305691d92c4c65a427ab02b8cbf11a701fe74c20de74ef56ed85fd9136ca03b15d0d99e553ba4ebc8ac4e6c41506c97a33c9a05ce53d19bf62cf6ff16ede1bdbee982553bcf11ea5d2d4922f4e7ba82c83a6307610e34da0ca81c43193cdd16a8bd73b6b119461dd245e1f033da72e644614743741b34bc7813a3937a6447e499f036440781a43ccef1bcc15c8b58999e60ad807e82529bd8c819194f0e396b0d93168fc800c0fec2b7b260d1b6c18956d66ad2db20acb3117a2bd17ddb5c046559461f5e91c74b89535c49efb89bf78ec20743017eae6e1f7c393d28f5c8f7c0f0914a30eb2626a294a3ed7ada207e51bd7a95204605af2b8586c29fdf88ece2a3a5a068430a571d98c26e51a45bbb50231197363845c76f58506bf31738a23fe792f678c042e30d7dd5f19ed5ab4bb36536671e160925d4af6ff078c2b7dbdf9c55ed31e61eacc01babc62d9d2e671bc6c1932e170e3dcc5ad67a9ea7d46fca2f256fbf781019782d4066331fe10f62a6ae077a8b9569dc4bac6b90fb730a968f1782cbfc5e005bad8d9b00ae9199c81e317d91196abc75f1887cb8ffcb440f37a972d4ced20f158844e0ee36111a4247dfda14cc5cada6d372e75ee370149d7fa822f73ef0edc835a338c6d5699911fea2fedd7f3e381caff836a690331327f96ab7904a461ef5a36ce5f552bc1d1d9968106a7b8e07eef4aae2e716422a2fb7b0c1e05f09c29ca83f3405adb80e237d6f145383ec4885573e50ca2ad014308ed70477257f4d904089eec809c55d85684265a1d3b00718cfb14d644463623ba225aa95bee2a95e13a0817e2c98d96b822e6e4ef36d18a831699889034d116c84e45467f46140b88c765339b04ee65e3ef12356fe6d7ef1c80653d2e34af6e03c4503431f775e161ab7edbbfd9316372084e5e69d98443d529c9488e26c40734a636d3cb2f3b7e9bf248d647382937e623f1a7119a8deb731db5e2dbb5cc9d7b60e80f35ada2ee398d3a6c1d1d9c485d4c31c4e3beb69017bc92d9d1eba03994832aa7081bc0d29d97154c20f29d183c589e939f2e62ee71ebcbbf42ecdc9b0342920112b6a50bfa1558ca9b8af99008a8a9be29d121b4cb879ad0f61a21d57698cbda61acf65abd1912e1956226ee646c1e87315939ec9d98db2e49101964e26b28350c7fa529bbcad3c1794c2c52fa63755f09b6e1e2ee4d63050f7197b8d013296b1594a8aa16aafbb3cd4cead348e1c1a9cbdcbc09908e8696a72528ecdf12579e3a9d16afcc7b995398e3f0e6c169363195c454c0d761b20a073c962b29d0dc6dc053a586fe928ca31a759781744ed81844ae0c002b039c32538d35cc293d1fe828123110c07a81e6e0ecabf7075cd890c88c4b67a900464a234dc7043ad678f189c4c47068f16d9cc2ea87211cac5d3c3db3e220eb2463a548d4329093d486ea81c020bb72bffaaf205490011900e3dec6dc911343298a47019dd4d18a8bd71cad38ada40ffe14072790ab40c0a586a3ce452dc15940847ce5c794a6840ff6222c934893226bf8315a0be2f2fb6371cfeeedfe94736af945259bee27ce07827b4fa6dfab66e28ebde09053cf8ec25861aad91cfd1efcb69e60cf8ff3c1b8283301c0b5c1122f7b0733fcfe7f71066d74da3a0fa3abe052de9acf07aa091c139120bf5a35fadf7894d494d34f4e10b5cba392de299c971b1cd8eb8c5fcfba94585f58b995c89136383742f318bb3c738ecf00014d9025b7b01b905aafbb58910a873e6dad1227dc062455b1390d8835e1ca0e0799993239fcc387f2bcc85380286c7931000000000000000019b4847c97840fab93d928a2d664edf10c610110188c69cbcba07e95a7659ee5311dbb4fbbdb63c8c561a1d8e6f3c8c940c4ea4d8ebf8e18ca586f8da46e82dfd1fe22a396518f81b97fed2a3b1d36a7e5348e64838594f9f9aacc3494d01f2bf7cf78c5ab4d715aaa3300b384d80265c9675a9db90ea034d91731dd4c0186bdf370df405a8c3aac525aee5dc5174d61e0ea993b79f47f63ca6d7fa2cb2ac622020e7f7b1c4701a248835de588056c4ca462777cca604c3df4d4984ae969c3bfd440906360341b624a234f28de5e5f2fd22b13daae2ce5afcec92a7950930b771c18f18926cedbfe440ec532e343ba80da0ae9f5f5357094052c26d554715a08670aa16bc4d7787a5d81af654e37133e3557d36ca5a9b6206b0d5a0e82c210e4f9693a91d8a5d7d074cce6c9b9f52ca31f0895add87f9fd430b6cf3e9ad17aeae6ed22278b41a2ae03eebb14d679a11372a5850d2456714bf379799d4b8fae37c0e6176c2b6017a73c2234133632a4f0b582a79573e3fb1669a94708da158443266feefe6cfe3b618d1a9cadc213952c420267016deed5cdcfbd521fb8d0f93f5d445b682a67f214d73467c4c76719eef00990fbcbc327ad082a111bc618593bdb67bad926a47c4a5bf18a37abb8f8b6808d69c36520e9dd74799f565cdb5cdea0d89888b4e83b885aaf1c08131f9bb680392b83aae52911f824865a0678160aceebbfb599871399319c4743ae40fdb9d8219ff9ca1c910e42eeb8e79c902b2bfa71ca623ca5ab04b191c50a2a131dbfa051fa4419161285e39ba8eced0fa666b0a83d7677e786396e63efcb0122c437b2396d4b93047320c136e965f24884bbc7f7211c92330205241b1b50013881ba99c1f630f9942be247bbb8db79d517d60d71d16270d7abc0780b812efba3dec50711bd7cbdfa1606bafca8401c44f3672b64a5fd53fd6f8f4dbde88e3dee77df73eba8deeebe60ebbea469fc95e69210be69cf3c483c1ed1e109dd96f4c87e23a2350574e7c6d856628dced7383176ec275fcec450a0cd3c3762d7646ea93c3dc83914127c344c05f6d951e733da419dc5ffb448cbac887194560a0e6072c4bb6c46678a15e6c4086dcae730ac7100d2fa6885002ee67fdb3191179646fcbffd570d4c788e21557acddb0a169e358b3ad891db2013f5155793a8cd8b30a89081709a9d32abe87b8c659439443c5b2a2b4154a531220c7ed0a1719b379d0586ba129b64c6c648546e127e2a9e12121d7a23d453ced5d1659fae2e8472d0a57837dea21faae210abdc7647491cff768dc4b22a3848be5fa919f475117eb9be58660db072ca53c4496308c75a341deb2637c58b58d33e06659d0ef2b89f2e39d7489365ff42204353887b2911b8ab780ca4939033717223286671fe3a91eace5eb8ef8e613cb2256e9cf98a828f3568e89a8124a23f796f49243a5d9e194f4dc832a756fa800cf25a919ca672d027b9aea023261f8d2e923020f9f80292e9a5288160632ceb2017c3f355d1e87371a2db60d6ef950161c9aab029e9e41d3539ec0b73041586063d060e7c1a03d40347b25f6c304f37babf81ad29acd7e7843a15024de14d6f4eb41ac1bf595938c8c831802bddfda06c714c05ffd88954b230d1bdcc1e186ce5e856483b571b7181770c29df1b1997916949194066134a3ec3ad3ffe2075cc4c327f6a50dedb03c63e791f5d2ecc04fe56c96d7e24175c6d9fa6c0f9bbbc51686ae9ad58c7ce31744610e4ba65c86f19cb03cb93fc570d5b8a3e14b5500df16c8929e263193f57d6dd358a1d958bb43a21b5bb59e218bf7eac475c852a0291fdda5a07c8a35a34ffe25d869c769242bc2ac43b9a7a3c6699a5dc51d5289a075406e893adc7cf3bc460914fe02f287c8bed53fb562c36561caee0a49aeb021235aecfa1897bd118f876d7b10b274ce0328eae9b6586296347c8021ea5d3bb651d7fc7ef7810dd8358850c0f6bd2e17b56cd904c52d6f09f3488c6888e78558cc2c1ec1ae10aee278a3d6aa94ea83e2c62fb3fe9f109e34b1911f87cc37d4ec57f0df5aeae79aa4fa669efef94a35298d9cb0221dceb1579094df98bbbc2f5934c52c4dceca9c3296e8a19ca944c8a9222cd0a98dcdc399fd7ed7eee87d90faa80c5a87a13dd195683e94ff03eed98cc5015a31e587497f9152e43423b8f60df798384be82b41736aba5e40ce8ddfd4197637769fa8143886dd72af1ec9bb9b2860fb23f64ac33e8dfa5496fe2099a0d2a7d6c5991e858b909221981dd426bdaa2f98a4d85d8bc6bbe054861c83c2a7c817ed30aff28942165c0a97e0705a759d38c204b41d757501cf5692645c561e9f74e9fc0e77aa2c72880066d7397be02931ac1e51e3a4a624110e89d782479b7566d711504c62724617648ddae642e45696909bc03f4dee792cb7065ad13b4098400bb1f5b85602f8abb6c3cd0e113a04df48cc27b3524de423bcd2468b96262059958c3b576fd755a3f47e6e8adb9707b781545eff74eba17e3165e0aa070a113c9dfe8e02628581a31284d10b4bae5fed080f3fc34785e388e4ea17107945e3542f103e2991084d55165ddc8a42e66ab8011d030c9b2b8ce7dbbe556b40bd37e8adb463cbcb98f721dbafec0effa06975360cf73d1402f973fad361769f7a6fc58b4e4309e973b180662ce8bcbcd2856dc869cad595c9403c34745f59a48648397c8bac67e3df1f5f9463f4ee0cdb6f0e0e14d88b7b56627bad0e79c9b1449efe71517125591671122b482887b36af65250efb90d6de209b38285305fb4460d418046e422c5726b095ea16396878d2884bf0342f3909b9b497cad70fb25d6a6edd41df986bd4586608c45c9dbe452424f1b339cea49d88b2c4e9968e27da1b6bbb62074fd24368cc0f60dadb5965efaf09788d618a76cec20920bcf1634c93b101f15cdf12ad81ab311a0963679be0b1fa1fddada5c37e0fee1cf92952375133b518edac696889a54c6c42bf655f8b982704ee2356133d78c20ef8ec58bc4b1b3b71b8440aca555ddb82e8c6774970298116369847d443e0fc134aab890c658bce45801df1e1ca6b2eb433e0af4ccf7436d700", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1})

11.786094772s ago: executing program 6 (id=1271):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e)

11.498891335s ago: executing program 0 (id=1274):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x40000080806, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000140000000800000040"], 0x50)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
dup(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x4}, 0x0, 0x0)

10.704802978s ago: executing program 2 (id=1277):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

9.656573079s ago: executing program 2 (id=1278):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff8000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x150)
getresuid(0x0, 0x0, &(0x7f0000000180))
statx(0xffffffffffffffff, 0x0, 0x6000, 0x40, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000026c0))
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x2)
shmdt(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x48)
unshare(0x66000080)

9.631959498s ago: executing program 0 (id=1279):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0)
dup(0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/74, &(0x7f0000000d80)=""/83})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x2182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x2, 0x0, 0x0, "08ece944", "9b829e72"}}, 0x0}, 0x0)

9.558604858s ago: executing program 6 (id=1280):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket(0x40000000002, 0x3, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)

8.62627108s ago: executing program 6 (id=1281):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000077ceb5d48500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ppoll(&(0x7f0000000900)=[{r0}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x100000}, 0x0, 0x0)

8.596000523s ago: executing program 7 (id=1282):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x5b, 0x20040)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_out(r2, 0x2, &(0x7f0000000380))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.452761085s ago: executing program 2 (id=1284):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000))

7.254566773s ago: executing program 4 (id=1285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x95d3, 0x0, 0x2}, &(0x7f00000000c0), &(0x7f0000000140))
io_uring_enter(r3, 0x0, 0xe38e, 0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)

5.972886611s ago: executing program 4 (id=1286):
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f00000002c0))

5.626600333s ago: executing program 0 (id=1287):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

4.713208742s ago: executing program 4 (id=1288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_GET_IO_FLUSHER(0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x3c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x3c}}, 0x0)

4.604135096s ago: executing program 7 (id=1289):
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x8800)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000380)={{0xa, 0x0, 0x4, 0x0, 'syz0\x00', 0xff}, 0x0, [0x2, 0x3800, 0xffffffffffffffff, 0x401, 0xd0b3, 0xfffffffffffffff7, 0x3, 0xc0000000000000, 0x716c, 0xe8, 0xf, 0x3, 0x1, 0x270, 0x4, 0x80000001, 0xda, 0x8, 0x8, 0xc46, 0x7, 0x2, 0x5, 0xf, 0x100, 0xfffffffffffffffa, 0x7fffffff, 0x4, 0x7, 0x86, 0x2, 0x9, 0x6, 0x9, 0x2, 0x0, 0xc, 0x7, 0x4, 0x9, 0x8, 0xe, 0x6, 0x11, 0x605f, 0x4, 0xdd, 0x6, 0xe2df, 0x2, 0x27, 0x3, 0x4, 0xe413, 0x58c7, 0x7, 0x7, 0xffffffffffffffff, 0x200, 0xffffffff, 0x9, 0x4, 0x5, 0x1000, 0x9, 0x1, 0x7, 0x719, 0x2, 0x7, 0x7f, 0x4, 0x8, 0x400, 0xff, 0x800, 0x2, 0x58aa, 0x1, 0xa, 0x91a, 0x8, 0xe, 0x7, 0x400, 0x100000001, 0x8, 0x4, 0x9, 0x5, 0x0, 0x5, 0x7, 0x4, 0x7fff, 0xffffffffffffff12, 0xbfc6, 0xd, 0xfc00000000000000, 0xd, 0x7, 0x4, 0x6, 0xe, 0x9, 0x2e, 0x4, 0x7, 0xc00000000, 0x0, 0x8, 0x2, 0x4, 0x1, 0x5, 0x8858, 0x3, 0x9, 0x9, 0x20000000007ff, 0x1, 0x7fff, 0x1, 0x1, 0x3, 0x1, 0x100, 0x5]})

4.578327421s ago: executing program 2 (id=1290):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setreuid(0x0, 0xee00)
r1 = msgget$private(0x0, 0x100)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000005c0)={{0x0, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000})
r2 = add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x20000004)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r2, 0x0, 0x0)

4.553073367s ago: executing program 0 (id=1291):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0xf}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4.552264415s ago: executing program 6 (id=1292):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
fanotify_init(0x200, 0x0)
r1 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

2.531516231s ago: executing program 7 (id=1293):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0)
r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0x0)

2.530451853s ago: executing program 4 (id=1294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
signalfd(r1, &(0x7f0000000040)={[0x8]}, 0x8)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
dup(0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24)

1.878592483s ago: executing program 2 (id=1295):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e0000001000000000000000000000000ffffffff00000000000000000000000000000000000700000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b'], 0x68}}, 0x4004040)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1.712480253s ago: executing program 4 (id=1296):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETS(r0, 0x40045431, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0004040000000000fc00000000000000100000b0423b8e556231"], 0x28)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='*\x00', 0x2}, {&(0x7f0000000180)="96d01480bbb6", 0x6}], 0x2}, 0x24048884)

673.941735ms ago: executing program 4 (id=1297):
r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

167.064649ms ago: executing program 2 (id=1298):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
fcntl$setstatus(r0, 0x4, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)

121.394632ms ago: executing program 0 (id=1299):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x122008, 0x6, 0x800, 0x1, 0xfffffff7, 0x0, 0x0, 0x10, 0xe}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 7 (id=1300):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100), 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2f607798bfbe0776}, 0x0)

kernel console output (not intermixed with test programs):

bmit urb error = -90
[  104.332220][ T2147] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  104.414130][ T2147] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6
[  104.557271][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  104.654240][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  104.704185][ T6184] capability: warning: `syz.4.87' uses deprecated v2 capabilities in a way that may be insecure
[  104.734328][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  104.784192][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  104.871969][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  104.954549][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  105.004090][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  105.073173][ T6183] syzkaller0: entered promiscuous mode
[  105.079208][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  105.110262][ T6183] syzkaller0: entered allmulticast mode
[  105.124113][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  105.196242][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  105.230114][ T6193] uprobe: syz.4.92:6193 failed to unregister, leaking uprobe
[  105.514099][ T2147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  105.536939][ T2147] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  105.584038][ T2147] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  105.657789][ T2147] usb 3-1: USB disconnect, device number 2
[  105.782572][ T6201] binder: BINDER_SET_CONTEXT_MGR already set
[  105.790184][ T6201] binder: 6200:6201 ioctl 4018620d 20000040 returned -16
[  106.376180][ T5964] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  106.544356][ T5964] usb 5-1: Using ep0 maxpacket: 8
[  106.574906][ T5964] usb 5-1: unable to get BOS descriptor or descriptor too short
[  106.594130][ T5964] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  106.602383][ T5964] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  106.624567][ T5964] usb 5-1: config 4 has no interface number 0
[  106.646996][ T5964] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  106.656709][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.673759][ T5964] usb 5-1: Product: syz
[  106.678955][ T5964] usb 5-1: Manufacturer: syz
[  106.685721][ T5964] usb 5-1: SerialNumber: syz
[  106.897067][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b5ed400: rx timeout, send abort
[  106.927784][ T5964] usb 5-1: Found UVC 0.02 device syz (04f2:b746)
[  106.944442][ T5964] uvcvideo 5-1:4.147: Entity type for entity Output 1 was not initialized!
[  106.953746][ T5964] usb 5-1: Failed to create links for entity 1
[  106.969367][ T5964] usb 5-1: Failed to register entities (-22).
[  107.002762][ T5964] usb 5-1: USB disconnect, device number 3
[  107.406615][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b5ed400: abort rx timeout. Force session deactivation
[  109.323827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.426191][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.528616][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.859854][ T6235] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.105'.
[  110.582365][ T6214] netlink: 236 bytes leftover after parsing attributes in process `syz.2.99'.
[  110.596317][ T6230] netlink: 'syz.1.105': attribute type 21 has an invalid length.
[  110.624096][ T6230] netlink: 'syz.1.105': attribute type 1 has an invalid length.
[  110.634080][   T47] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  110.942533][ T6253] Zero length message leads to an empty skb
[  111.035834][   T47] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  111.044107][   T47] usb 5-1: config 0 has no interface number 0
[  111.050287][   T47] usb 5-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  111.067774][   T47] usb 5-1: config 0 interface 2 has no altsetting 0
[  112.003484][   T47] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66
[  112.015409][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.023490][   T47] usb 5-1: Product: syz
[  112.027800][   T47] usb 5-1: Manufacturer: syz
[  112.032573][   T47] usb 5-1: SerialNumber: syz
[  112.058072][   T47] usb 5-1: config 0 descriptor??
[  112.065233][ T6243] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  112.329509][   T29] audit: type=1326 audit(1734539766.903:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.366618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.385776][ T6264] binder: 6263:6264 ioctl c0306201 0 returned -14
[  112.413064][   T29] audit: type=1326 audit(1734539766.913:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.517051][   T29] audit: type=1326 audit(1734539766.913:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.542113][   T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  112.584477][   T29] audit: type=1326 audit(1734539766.913:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.606232][   T29] audit: type=1326 audit(1734539766.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.634057][   T29] audit: type=1326 audit(1734539766.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.655596][   T29] audit: type=1326 audit(1734539766.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.677034][   T29] audit: type=1326 audit(1734539766.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.688225][   T47] usb 5-1: invalid MIDI in EP 0
[  112.698515][   T29] audit: type=1326 audit(1734539766.943:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.725433][   T29] audit: type=1326 audit(1734539766.943:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x7ffc0000
[  112.936525][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[  112.986258][   T47] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22
[  112.996795][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'.
[  113.031844][   T47] usb 5-1: USB disconnect, device number 4
[  113.079042][ T6274] overlayfs: failed to get inode (-116)
[  113.094650][ T6274] overlayfs: failed to get inode (-116)
[  113.127064][ T6274] overlayfs: failed to get inode (-116)
[  113.164322][ T6274] overlayfs: failed to get inode (-116)
[  113.315366][ T6112] udevd[6112]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.725420][ T5835] Bluetooth: hci0: unexpected Set CIG Parameters response data
[  114.738815][ T5835] Bluetooth: hci0: unexpected event for opcode 0x2062
[  114.979592][ T6309] netlink: 1224 bytes leftover after parsing attributes in process `syz.1.126'.
[  115.564140][   T94] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  115.746409][   T94] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  115.774074][   T94] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.812535][   T94] usb 3-1: config 0 descriptor??
[  115.830352][   T94] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  116.543336][ T6342] netlink: 'syz.1.139': attribute type 4 has an invalid length.
[  116.615961][ T6342] netlink: 'syz.1.139': attribute type 4 has an invalid length.
[  116.959917][ T6350] ipt_REJECT: TCP_RESET invalid for non-tcp
[  117.578354][   T94] gspca_stv06xx: I2C: Read error writing address: -71
[  117.587331][   T94] usb 3-1: USB disconnect, device number 3
[  117.616160][ T5835] Bluetooth: hci2: command tx timeout
[  118.594986][ T6376] kvm: pic: non byte write
[  118.818632][ T5835] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  118.827384][ T5835] Bluetooth: hci0: Injecting HCI hardware error event
[  118.837172][ T5835] Bluetooth: hci0: hardware error 0x00
[  119.585115][ T6386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.855425][ T6386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.140334][ T6386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.284477][ T6386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.448744][ T6386] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.478426][ T6386] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.515810][ T6386] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.561036][ T6386] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.055505][ T6415] bridge_slave_0: left allmulticast mode
[  121.061612][ T6415] bridge_slave_0: left promiscuous mode
[  121.072777][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.303933][ T6415] bridge_slave_1: left allmulticast mode
[  121.312058][ T6415] bridge_slave_1: left promiscuous mode
[  121.320066][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.332489][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  121.539723][ T6415] bond0: (slave bond_slave_0): Releasing backup interface
[  121.598380][ T6417] binder_alloc: 6416: binder_install_single_page failed to insert page at offset 1000 with -14
[  121.616988][ T6415] bond0: (slave bond_slave_1): Releasing backup interface
[  121.728661][ T6415] team0: Port device team_slave_0 removed
[  121.798216][ T6415] team0: Port device team_slave_1 removed
[  121.805627][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.813161][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.864825][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.884454][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.995907][ T6422] dlm: no local IP address has been set
[  122.002015][ T6422] dlm: cannot start dlm midcomms -107
[  122.514810][ T6415] bond0: (slave wlan1): Releasing backup interface
[  125.536035][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'.
[  126.500712][ T6474] netlink: 'syz.3.184': attribute type 1 has an invalid length.
[  126.638566][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'.
[  126.648141][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'.
[  126.658621][ T6480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.187'.
[  126.717969][ T5835] block nbd0: Receive control failed (result -107)
[  126.727158][ T6481] kvm: user requested TSC rate below hardware speed
[  126.758072][ T6474] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  127.008541][ T6474] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  127.528080][ T6502] input: syz0 as /devices/virtual/input/input7
[  128.234250][ T5964] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  128.239512][ T6512] netlink: 140 bytes leftover after parsing attributes in process `syz.1.196'.
[  128.464175][ T5964] usb 3-1: Using ep0 maxpacket: 16
[  128.585779][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.717081][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.788992][ T5964] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  128.811036][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.845020][ T5964] usb 3-1: config 0 descriptor??
[  129.204405][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.224406][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.276012][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'.
[  129.318567][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'.
[  129.367491][ T5964] usbhid 3-1:0.0: can't add hid device: -71
[  129.373681][ T5964] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  129.495080][ T5964] usb 3-1: USB disconnect, device number 4
[  129.543784][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'.
[  129.553008][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'.
[  129.571539][ T6532] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  129.580890][ T6532] syz_tun: entered promiscuous mode
[  129.593317][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[  129.664859][ T6528] syz_tun: entered promiscuous mode
[  129.670757][ T6528] macvtap1: entered promiscuous mode
[  129.707374][ T6528] macvtap1: entered allmulticast mode
[  129.747344][ T6528] syz_tun: entered allmulticast mode
[  129.852756][ T6534] syz_tun: left allmulticast mode
[  129.864380][ T6534] syz_tun: left promiscuous mode
[  129.867861][ T2147] IPVS: starting estimator thread 0...
[  129.870890][ T6535] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  130.844220][ T6538] IPVS: using max 19 ests per chain, 45600 per kthread
[  131.753499][ T6558] netlink: 128 bytes leftover after parsing attributes in process `syz.0.210'.
[  131.765489][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'.
[  132.066615][ T6564] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[  132.364289][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  132.569000][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  132.694305][ T5915] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  132.714859][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.815279][ T5915] usb 4-1: Product: syz
[  132.828930][ T5915] usb 4-1: Manufacturer: syz
[  132.834708][ T5915] usb 4-1: SerialNumber: syz
[  132.895624][ T5915] usb 4-1: config 0 descriptor??
[  132.999516][ T6577] netlink: 'syz.2.218': attribute type 2 has an invalid length.
[  133.152540][ T5915] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  133.221911][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  133.229022][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  133.250017][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'.
[  133.404722][   T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  133.461866][ T6586] dns_resolver: Unsupported server list version (0)
[  133.567068][   T47] usb 3-1: Using ep0 maxpacket: 32
[  133.580645][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.598078][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.618676][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  133.634292][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.656092][   T47] usb 3-1: config 0 descriptor??
[  133.664953][   T47] hub 3-1:0.0: USB hub found
[  133.871657][   T47] hub 3-1:0.0: 1 port detected
[  135.268104][ T2147] hub 3-1:0.0: activate --> -90
[  135.407593][ T5915] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  135.449319][ T5915] usb 4-1: USB disconnect, device number 2
[  136.145198][ T6626] bond0: entered promiscuous mode
[  136.151412][ T6626] bond_slave_0: entered promiscuous mode
[  136.163590][ T6626] bond_slave_1: entered promiscuous mode
[  136.425119][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  136.433076][ T6629] UDF-fs: Scanning with blocksize 512 failed
[  136.441674][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  136.449337][ T6629] UDF-fs: Scanning with blocksize 1024 failed
[  136.457078][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  136.465078][ T6629] UDF-fs: Scanning with blocksize 2048 failed
[  136.472958][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  136.480597][ T6629] UDF-fs: Scanning with blocksize 4096 failed
[  137.252280][ T2147] usb 3-1-port1: config error
[  137.459720][ T2147] usb 3-1-port1: cannot disable (err = -71)
[  137.493990][ T2147] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  137.505184][   T47] usb 3-1: USB disconnect, device number 5
[  137.511410][ T2147] hub_port_connect: 9 callbacks suppressed
[  137.511457][ T2147] usb 3-1-port1: connect-debounce failed
[  138.209592][ T6642] capability: warning: `syz.3.240' uses 32-bit capabilities (legacy support in use)
[  139.406479][ T6658] xt_l2tp: v2 doesn't support IP mode
[  139.492344][ T6660] netlink: 'syz.4.245': attribute type 4 has an invalid length.
[  139.553317][ T6660] netlink: 'syz.4.245': attribute type 4 has an invalid length.
[  139.554418][   T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  139.716455][   T25] usb 4-1: device descriptor read/64, error -71
[  139.974752][   T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  140.224112][   T25] usb 4-1: device descriptor read/64, error -71
[  140.334660][   T25] usb usb4-port1: attempt power cycle
[  140.685145][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  140.733527][   T25] usb 4-1: device descriptor read/8, error -71
[  141.076917][ T6692] Illegal XDP return value 3587332800 on prog  (id 76) dev N/A, expect packet loss!
[  141.109625][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  141.137526][   T25] usb 4-1: device descriptor read/8, error -71
[  141.244702][   T25] usb usb4-port1: unable to enumerate USB device
[  145.791056][ T6764] Invalid source name
[  145.795667][ T6764] UBIFS error (pid: 6764): cannot open "/dev/sg0", error -22
[  147.843107][ T6773] netlink: 'syz.3.285': attribute type 4 has an invalid length.
[  148.196704][ T6779] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  149.599054][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'.
[  149.770572][ T6799] bridge_slave_1: left allmulticast mode
[  149.784168][ T6799] bridge_slave_1: left promiscuous mode
[  149.804476][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.867110][ T6799] bridge_slave_0: left allmulticast mode
[  149.872842][ T6799] bridge_slave_0: left promiscuous mode
[  149.904658][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.933670][   T29] audit: type=1800 audit(1734539804.513:21): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.293" name="/" dev="9p" ino=2 res=0 errno=0
[  150.506847][ T5835] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  150.515877][ T5835] Bluetooth: hci1: Injecting HCI hardware error event
[  150.532780][ T5835] Bluetooth: hci1: hardware error 0x00
[  151.381271][ T6827] binder_alloc: 6826: pid 6826 spamming oneway? 1 buffers allocated for a total size of 4096
[  152.744201][ T5835] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  155.651736][ T6882] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  155.970136][ T6882] kvm: pic: non byte read
[  155.994331][ T6882] kvm: pic: non byte read
[  155.999338][ T6882] kvm: pic: level sensitive irq not supported
[  155.999448][ T6882] kvm: pic: non byte read
[  156.056561][ T6882] kvm: pic: non byte read
[  156.131310][ T6888] VFS: could not find a valid V7 on nullb0.
[  156.942081][ T6890] syzkaller1: entered promiscuous mode
[  156.977131][ T6890] syzkaller1: entered allmulticast mode
[  157.294157][ T5915] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  157.504647][ T5915] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  157.513808][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.526057][ T5915] usb 3-1: Product: syz
[  157.530278][ T5915] usb 3-1: Manufacturer: syz
[  157.543214][ T5915] usb 3-1: SerialNumber: syz
[  157.556264][ T5915] usb 3-1: config 0 descriptor??
[  157.779820][ T5915] hso 3-1:0.0: Failed to find BULK IN ep
[  157.795612][ T5915] usb-storage 3-1:0.0: USB Mass Storage device detected
[  158.072990][ T5915] usb 3-1: USB disconnect, device number 6
[  158.545875][ T5915] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  158.754704][ T5915] usb 1-1: Using ep0 maxpacket: 32
[  158.802044][ T5915] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  158.835495][ T5915] usb 1-1: config 0 has no interface number 0
[  158.862278][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  158.897984][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.940360][ T5915] usb 1-1: Product: syz
[  158.967270][ T5915] usb 1-1: Manufacturer: syz
[  158.971961][ T5915] usb 1-1: SerialNumber: syz
[  159.105376][ T5915] usb 1-1: config 0 descriptor??
[  159.168746][ T5915] smsc95xx v2.0.0
[  159.302046][ T6933] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  159.343708][ T6933] kvm: pic: non byte read
[  159.981768][ T6933] kvm: pic: single mode not supported
[  159.981815][ T6933] kvm: pic: level sensitive irq not supported
[  160.057510][ T6933] kvm: pic: non byte read
[  160.435481][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  161.389238][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  162.393485][ T6958] kvm: emulating exchange as write
[  162.564067][   T25] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  162.850863][   T25] usb 5-1: config index 0 descriptor too short (expected 63186, got 210)
[  162.859748][   T25] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  162.868159][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.878526][   T25] usb 5-1: config 0 has no interface number 0
[  162.885549][   T25] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  162.896168][   T25] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 208, setting to 64
[  162.907278][   T25] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  162.921826][   T25] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  162.931167][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.965131][   T25] usb 5-1: config 0 descriptor??
[  162.971723][ T6957] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  163.107746][   T25] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  163.242070][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  163.284680][ T5915] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  163.302603][ T5971] usb 5-1: Failed to submit usb control message: -71
[  163.311892][   T94] usb 5-1: USB disconnect, device number 5
[  163.337722][ T5971] usb 5-1: unable to send the bmi data to the device: -71
[  163.352621][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.347'.
[  163.366716][ T5971] usb 5-1: unable to get target info from device
[  163.372909][ T5915] usb 1-1: USB disconnect, device number 3
[  163.396378][ T5971] usb 5-1: could not get target info (-71)
[  163.511321][ T5971] usb 5-1: could not probe fw (-71)
[  166.336333][ T5820] Bluetooth: hci3: command 0x0406 tx timeout
[  166.745247][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'.
[  166.919735][ T7013] Device name cannot be null; rc = [-22]
[  167.944183][ T7018] usb usb4: usbfs: process 7018 (syz.4.361) did not claim interface 0 before use
[  168.011384][   T29] audit: type=1326 audit(1734539822.593:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.036058][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  168.050699][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  168.060627][   T29] audit: type=1326 audit(1734539822.593:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.060633][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  168.104847][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  168.142955][ T7024] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  168.144281][   T29] audit: type=1326 audit(1734539822.593:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.175485][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  168.183071][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  168.334073][   T29] audit: type=1326 audit(1734539822.593:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.438771][   T29] audit: type=1326 audit(1734539822.603:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.518044][   T29] audit: type=1326 audit(1734539822.603:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.590697][   T29] audit: type=1326 audit(1734539822.603:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.641637][   T29] audit: type=1326 audit(1734539822.613:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.686125][   T29] audit: type=1326 audit(1734539822.613:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  168.742913][   T29] audit: type=1326 audit(1734539822.613:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  170.263075][ T5820] Bluetooth: hci4: command tx timeout
[  171.554651][ T7052] =======================================================
[  171.554651][ T7052] WARNING: The mand mount option has been deprecated and
[  171.554651][ T7052]          and is ignored by this kernel. Remove the mand
[  171.554651][ T7052]          option from the mount to silence this warning.
[  171.554651][ T7052] =======================================================
[  172.266002][ T7061] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  172.948695][ T5820] Bluetooth: hci4: command tx timeout
[  173.444209][ T7061] syz.3.374 (7061): drop_caches: 2
[  173.742025][ T7072] random: crng reseeded on system resumption
[  174.444088][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  174.594179][   T25] usb 3-1: Using ep0 maxpacket: 32
[  174.628660][   T25] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  174.636964][   T25] usb 3-1: config 0 has no interface number 0
[  174.643134][   T25] usb 3-1: config 0 interface 12 has no altsetting 0
[  174.662828][   T25] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  174.672302][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.680533][   T25] usb 3-1: Product: syz
[  174.684855][   T25] usb 3-1: Manufacturer: syz
[  174.689493][   T25] usb 3-1: SerialNumber: syz
[  174.704743][   T25] usb 3-1: config 0 descriptor??
[  174.980171][ T5835] Bluetooth: hci4: command tx timeout
[  175.038046][ T7039] bridge_slave_0: left allmulticast mode
[  175.044089][ T7039] bridge_slave_0: left promiscuous mode
[  175.050009][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.062130][ T7039] bridge_slave_1: left allmulticast mode
[  175.072988][ T7039] bridge_slave_1: left promiscuous mode
[  175.080630][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.110478][ T7039] bond0: (slave bond_slave_0): Releasing backup interface
[  175.122829][ T7039] bond0: (slave bond_slave_1): Releasing backup interface
[  175.158711][ T7039] team0: Port device team_slave_0 removed
[  175.176462][ T7039] team0: Port device team_slave_1 removed
[  175.183430][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.191738][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.209385][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.217302][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.839028][ T7020] chnl_net:caif_netlink_parms(): no params data found
[  175.909955][ T7101] bridge_slave_0: left allmulticast mode
[  175.922083][ T7101] bridge_slave_0: left promiscuous mode
[  175.928546][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.945838][ T7101] bridge_slave_1: left allmulticast mode
[  175.952865][ T7101] bridge_slave_1: left promiscuous mode
[  176.049351][ T7105] ALSA: mixer_oss: invalid OSS volume ''
[  176.071390][ T7105] ALSA: mixer_oss: invalid OSS volume 'DIGITA'
[  176.074882][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.415751][ T7101] bond0: (slave bond_slave_0): Releasing backup interface
[  176.571605][ T7101] bond_slave_0: left promiscuous mode
[  176.640967][ T7101] bond0: (slave bond_slave_1): Releasing backup interface
[  176.666688][ T7101] bond_slave_1: left promiscuous mode
[  176.751003][ T7101] team0: Port device team_slave_0 removed
[  176.824891][ T7101] team0: Port device team_slave_1 removed
[  176.871809][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.899375][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.927976][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.961866][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.006659][ T7101] bond1: (slave veth3): Releasing backup interface
[  177.020415][ T7101] bond1: (slave veth3): the permanent HWaddr of slave - 6a:d2:4c:ad:a3:27 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  177.054110][ T5835] Bluetooth: hci4: command tx timeout
[  177.060688][ T7101] bond1: (slave veth5): Releasing backup interface
[  177.327934][ T7115] process 'syz.3.388' launched '/dev/fd/3' with NULL argv: empty string added
[  177.359548][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.373009][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.392833][ T7020] bridge_slave_0: entered allmulticast mode
[  177.404975][ T7020] bridge_slave_0: entered promiscuous mode
[  177.436306][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.445564][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.452959][ T7020] bridge_slave_1: entered allmulticast mode
[  177.461443][ T7020] bridge_slave_1: entered promiscuous mode
[  177.481991][   T25] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  177.501823][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.524448][   T25] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  177.534101][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.544314][   T25] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  177.581389][   T25] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  177.630951][   T25] usb 3-1: USB disconnect, device number 7
[  177.642648][ T7020] team0: Port device team_slave_0 added
[  177.698511][ T7020] team0: Port device team_slave_1 added
[  177.825942][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.841738][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.870876][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.891556][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.905742][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.980775][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.205846][ T7020] hsr_slave_0: entered promiscuous mode
[  179.225211][ T7020] hsr_slave_1: entered promiscuous mode
[  179.242694][ T7020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.265385][ T7020] Cannot create hsr debugfs directory
[  180.811481][ T7020] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  180.971438][ T7020] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.047964][ T7020] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  181.125815][ T7020] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  181.410547][ T7156] warning: `syz.3.400' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  183.487503][ T7163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.118273][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.138155][ T7020] 8021q: adding VLAN 0 to HW filter on device team0
[  184.156308][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.163490][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.215756][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.224055][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.269043][   T45] wlan1: Trigger new scan to find an IBSS to join
[  184.414364][ T7163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.973802][ T7184] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.983770][ T7184] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.992933][ T7184] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.002349][ T7184] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.014024][ T7184] bridge0: port 1(vxlan0) entered blocking state
[  185.020651][ T7184] bridge0: port 1(vxlan0) entered disabled state
[  185.027920][ T7184] vxlan0: entered allmulticast mode
[  185.034744][ T7184] vxlan0: entered promiscuous mode
[  185.047711][ T7184] bridge0: port 1(vxlan0) entered blocking state
[  185.054807][ T7184] bridge0: port 1(vxlan0) entered forwarding state
[  185.185493][ T7163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.273210][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  185.273230][   T29] audit: type=1326 audit(1734539839.853:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.302285][   T29] audit: type=1326 audit(1734539839.853:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.336548][   T29] audit: type=1326 audit(1734539839.883:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e38584690 code=0x7ffc0000
[  185.374030][   T29] audit: type=1326 audit(1734539839.913:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e38584690 code=0x7ffc0000
[  185.428954][   T29] audit: type=1326 audit(1734539839.913:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.530794][   T29] audit: type=1326 audit(1734539839.913:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.622506][ T7163] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  185.647835][ T7163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.668973][   T29] audit: type=1326 audit(1734539839.913:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.762132][   T29] audit: type=1326 audit(1734539839.913:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.838215][   T29] audit: type=1326 audit(1734539839.913:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.921559][   T29] audit: type=1326 audit(1734539839.913:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7185 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f9e38585d29 code=0x7ffc0000
[  185.988160][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.033554][ T7163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.163818][ T7163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.237403][ T7163] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.298341][ T7163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.642908][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'.
[  186.774261][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'.
[  186.819316][ T7214] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  186.831366][ T7218] 9pnet_fd: Insufficient options for proto=fd
[  186.872352][ T7214] syz_tun: entered promiscuous mode
[  186.883512][ T7214] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  186.994584][ T7214] Cannot create hsr debugfs directory
[  187.932888][ T7020] veth0_vlan: entered promiscuous mode
[  188.025336][ T7020] veth1_vlan: entered promiscuous mode
[  188.118847][ T7020] veth0_macvtap: entered promiscuous mode
[  188.184563][ T7020] veth1_macvtap: entered promiscuous mode
[  188.264324][ T5919] wlan1: Trigger new scan to find an IBSS to join
[  188.308303][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.382453][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.419814][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.470969][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.569179][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.623132][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.634509][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.674021][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.698549][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.772645][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.574729][ T7020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.593976][ T7020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.633967][ T7020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.683747][ T7020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.852851][ T5919] wlan1: Creating new IBSS network, BSSID d2:6b:fa:d4:28:6d
[  190.511276][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.617425][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.661985][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.670093][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.958016][ T7255] ALSA: mixer_oss: invalid OSS volume 'u'
[  191.356442][ T7253] dvmrp0: entered allmulticast mode
[  191.707262][ T7258] pimreg: entered allmulticast mode
[  191.814647][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.875985][ T7253] batadv_slave_1: entered promiscuous mode
[  194.731008][ T7288] ptrace attach of "./syz-executor exec"[5827] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  194.907045][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  195.626577][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  195.950619][ T7277] Cannot find del_set index 3 as target
[  196.904216][   T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  197.096972][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  197.106732][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.265349][   T47] usb 3-1: config 0 descriptor??
[  197.327507][   T47] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  198.717802][ T7322] block nbd3: shutting down sockets
[  200.118900][   T47] gspca_stv06xx: I2C: Read error writing address: -71
[  200.331586][   T47] usb 3-1: USB disconnect, device number 8
[  200.618210][ T7333] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  200.629914][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'.
[  200.746112][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'.
[  200.784155][ T7338] nbd: device at index 64 is going down
[  202.034317][ T5820] Bluetooth: hci2: command 0x0406 tx timeout
[  204.629862][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.461'.
[  205.252195][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  205.912856][ T5915] usb 6-1: Using ep0 maxpacket: 8
[  205.927913][ T5915] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  205.946160][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.960490][ T5915] usb 6-1: config 0 has no interface number 0
[  205.967294][ T5915] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.980520][ T5915] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  206.002277][ T5915] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  206.021412][ T5915] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.049902][ T5915] usb 6-1: config 0 interface 52 has no altsetting 0
[  206.062530][ T5915] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  206.076404][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.485535][ T5915] usb 6-1: config 0 descriptor??
[  206.880007][ T7415] dlm: no local IP address has been set
[  206.886424][ T7415] dlm: cannot start dlm midcomms -107
[  207.364045][ T5915] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input8
[  207.624389][ T5915] usb 6-1: USB disconnect, device number 2
[  207.624562][    C1] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  207.918894][ T7418] vxlan0: left allmulticast mode
[  208.968970][ T7418] vxlan0: left promiscuous mode
[  208.978280][ T7418] bridge0: port 1(vxlan0) entered disabled state
[  209.329354][ T7428] kvm: pic: single mode not supported
[  209.333505][ T7428] kvm: pic: single mode not supported
[  209.341766][ T7428] kvm: pic: single mode not supported
[  212.739425][ T7106] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  213.826479][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'.
[  214.182052][ T7475] VFS: could not find a valid V7 on nullb0.
[  215.154373][ T7477] dlm: no local IP address has been set
[  215.160165][ T7477] dlm: cannot start dlm midcomms -107
[  217.816900][ T7511] netdevsim netdevsim3: Direct firmware load for � failed with error -2
[  217.832676][ T7511] netdevsim netdevsim3: Falling back to sysfs fallback for: �
[  218.313972][ T7520] nbd2: detected capacity change from 0 to 20
[  218.402608][ T7524] block nbd2: Send control failed (result -89)
[  218.427779][ T7524] block nbd2: Request send failed, requeueing
[  218.638669][ T5835] block nbd2: Receive control failed (result -32)
[  219.005565][   T10] block nbd2: Dead connection, failed to find a fallback
[  219.013223][   T10] block nbd2: shutting down sockets
[  219.020578][   T10] blk_print_req_error: 27 callbacks suppressed
[  219.020600][   T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.036744][   T10] buffer_io_error: 27 callbacks suppressed
[  219.036762][   T10] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.054618][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.094256][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.103209][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.114602][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.122622][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.132198][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.140991][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.150616][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.249091][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.324288][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.332314][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.345385][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.353479][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.419540][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.438355][ T7524] ldm_validate_partition_table(): Disk read failed.
[  219.468199][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.547969][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.582578][ T7524] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  219.651214][ T7524] Buffer I/O error on dev nbd2, logical block 0, async page read
[  219.697923][ T7524] Dev nbd2: unable to read RDB block 0
[  219.725866][ T7524]  nbd2: unable to read partition table
[  219.814521][ T7524] nbd2: partition table beyond EOD, truncated
[  219.935535][ T7381] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  219.935925][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  220.225453][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=9, location=9
[  220.237690][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8, location=8
[  220.252972][ T5822] ldm_validate_partition_table(): Disk read failed.
[  220.274609][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=7, location=7
[  220.297594][ T5822] Dev nbd2: unable to read RDB block 0
[  220.307383][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  220.324382][ T5822]  nbd2: unable to read partition table
[  220.341032][ T5822] nbd2: partition table beyond EOD, truncated
[  220.386217][ T5822] ldm_validate_partition_table(): Disk read failed.
[  220.395983][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  220.420945][ T5822] Dev nbd2: unable to read RDB block 0
[  220.431509][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=4, location=4
[  220.451883][ T5822]  nbd2: unable to read partition table
[  220.461776][ T5822] nbd2: partition table beyond EOD, truncated
[  220.479433][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=3, location=3
[  220.519196][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2, location=2
[  220.551643][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  220.598152][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  220.644314][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1
[  220.654489][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0
[  220.694285][ T7524] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  220.708591][ T7531] syz.3.500 (7531): drop_caches: 2
[  220.879361][ T7524] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  223.122792][ T7552] dlm: no local IP address has been set
[  223.128620][ T7552] dlm: cannot start dlm midcomms -107
[  223.503819][ T7555] binder: BINDER_SET_CONTEXT_MGR already set
[  223.511835][ T7555] binder: 7554:7555 ioctl 4018620d 20000040 returned -16
[  224.021800][ T7560] vivid-001: =================  START STATUS  =================
[  224.029862][ T7560] vivid-001: Radio HW Seek Mode: Bounded
[  224.035975][ T7560] vivid-001: Radio Programmable HW Seek: false
[  224.042405][ T7560] vivid-001: RDS Rx I/O Mode: Block I/O
[  224.048076][ T7560] vivid-001: Generate RBDS Instead of RDS: false
[  224.054670][ T7560] vivid-001: RDS Reception: true
[  224.059711][ T7560] vivid-001: RDS Program Type: 0 inactive
[  224.065688][ T7560] vivid-001: RDS PS Name:  inactive
[  224.070968][ T7560] vivid-001: RDS Radio Text:  inactive
[  224.077896][ T7560] vivid-001: RDS Traffic Announcement: false inactive
[  224.086059][ T7560] vivid-001: RDS Traffic Program: false inactive
[  224.122285][ T7560] vivid-001: RDS Music: false inactive
[  224.137730][ T7560] vivid-001: ==================  END STATUS  ==================
[  224.154429][ T7564] syzkaller1: entered promiscuous mode
[  224.160030][ T7564] syzkaller1: entered allmulticast mode
[  225.504497][ T7583] netlink: 140 bytes leftover after parsing attributes in process `syz.4.511'.
[  227.637623][ T7220] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.959119][ T7220] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.747068][ T7220] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.168359][ T7612] binder: 7606:7612 ioctl c0306201 20000680 returned -14
[  229.375600][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  229.394546][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  229.409127][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  229.429887][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  229.446472][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  229.458085][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  229.722352][ T7220] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.820100][ T7220] bridge_slave_1: left allmulticast mode
[  230.867655][ T7220] bridge_slave_1: left promiscuous mode
[  230.878171][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.969601][ T7220] bridge_slave_0: left allmulticast mode
[  231.029488][ T7220] bridge_slave_0: left promiscuous mode
[  231.070124][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.694177][ T5826] Bluetooth: hci4: command tx timeout
[  232.585566][ T7220] dvmrp0 (unregistering): left allmulticast mode
[  233.811845][ T5826] Bluetooth: hci4: command tx timeout
[  234.372356][ T7220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.423169][ T7220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.486891][ T7220] bond0 (unregistering): Released all slaves
[  234.682499][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  234.728857][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  234.996214][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.433245][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.440839][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.448389][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.456059][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.463497][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.474070][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.481916][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.490649][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.498504][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.506119][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.513573][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.521187][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.528725][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.536494][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.543987][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.551435][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.558974][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.566575][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.574116][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.581570][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.589482][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.600454][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.608023][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.615734][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.623196][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.630783][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.638293][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.645828][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.653272][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.660799][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.668312][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.675862][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.683311][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.692128][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.701942][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.709763][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.717409][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.736039][ T7660] : entered promiscuous mode
[  235.780795][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.788720][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.796686][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  235.826751][ T5902] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  235.864214][ T5826] Bluetooth: hci4: command tx timeout
[  235.930938][ T7609] chnl_net:caif_netlink_parms(): no params data found
[  236.164692][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'.
[  236.216639][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'.
[  236.756188][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.764154][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.771604][ T7609] bridge_slave_0: entered allmulticast mode
[  236.861441][ T7609] bridge_slave_0: entered promiscuous mode
[  236.924063][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.962145][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.970032][ T7609] bridge_slave_1: entered allmulticast mode
[  236.992102][ T7609] bridge_slave_1: entered promiscuous mode
[  237.045280][ T7220] hsr_slave_0: left promiscuous mode
[  237.093602][ T7220] hsr_slave_1: left promiscuous mode
[  237.174311][ T7220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.181897][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.220009][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.262510][ T7220] veth1_macvtap: left promiscuous mode
[  237.276013][ T7220] veth0_macvtap: left promiscuous mode
[  237.282027][ T7220] veth1_vlan: left promiscuous mode
[  237.289101][ T7220] veth0_vlan: left promiscuous mode
[  237.522971][ T7220] pimreg (unregistering): left allmulticast mode
[  237.937546][ T5826] Bluetooth: hci4: command tx timeout
[  239.997262][ T7220] team0 (unregistering): Port device team_slave_1 removed
[  240.000159][ T7180] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  240.128060][ T7220] team0 (unregistering): Port device team_slave_0 removed
[  240.163992][ T7180] usb 1-1: Using ep0 maxpacket: 16
[  240.170852][ T7180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.188966][ T7180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  240.220956][ T7180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  240.247842][ T7180] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  240.277065][ T7180] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.305206][ T7180] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  240.331319][ T7180] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  240.340113][ T7180] usb 1-1: Manufacturer: syz
[  240.381175][ T7180] usb 1-1: config 0 descriptor??
[  240.714357][ T7180] rc_core: IR keymap rc-hauppauge not found
[  240.721738][ T7180] Registered IR keymap rc-empty
[  240.727613][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  240.763700][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  240.804832][ T7180] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  240.818413][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.832946][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.858643][ T7180] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9
[  240.868960][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.891080][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.906093][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  240.949447][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  240.979455][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.007764][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.051292][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.085512][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.105926][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.151321][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.174053][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.204092][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.244359][ T7180] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  241.271327][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.301514][ T7180] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  241.310373][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.315105][ T7180] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  241.357519][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.409498][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.499357][ T7180] usb 1-1: USB disconnect, device number 5
[  241.641958][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.733609][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.737550][ T7609] team0: Port device team_slave_0 added
[  242.836854][ T7609] team0: Port device team_slave_1 added
[  243.197644][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.226402][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.297678][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.440601][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.448080][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.497103][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.653709][ T7609] hsr_slave_0: entered promiscuous mode
[  243.676278][ T7609] hsr_slave_1: entered promiscuous mode
[  243.710028][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.728020][ T7609] Cannot create hsr debugfs directory
[  243.807794][ T7795] syzkaller0: entered promiscuous mode
[  243.813383][ T7795] syzkaller0: entered allmulticast mode
[  244.598635][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  244.598652][   T29] audit: type=1326 audit(1734539899.173:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7818 comm="syz.3.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x0
[  247.679892][ T7840] syz.3.577[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  247.680015][ T7840] syz.3.577[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  247.692001][ T7840] syz.3.577[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  247.764007][   T29] audit: type=1326 audit(1734539902.333:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7839 comm="syz.3.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9cd385d29 code=0x0
[  248.049304][ T7847] binder: BINDER_SET_CONTEXT_MGR already set
[  248.056058][ T7847] binder: 7846:7847 ioctl 4018620d 200001c0 returned -16
[  248.740740][ T7851] mmap: syz.3.581 (7851) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  250.600257][   T29] audit: type=1800 audit(1734539905.183:68): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.586" name="file1" dev="overlay" ino=707 res=0 errno=0
[  252.918210][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'.
[  252.948977][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'.
[  253.230575][   T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  253.427697][ T7896] tipc: Started in network mode
[  253.432936][ T7896] tipc: Node identity 4, cluster identity 4711
[  253.462237][ T7896] tipc: Node number set to 4
[  254.586681][ T7609] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  254.668390][ T7609] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  254.693159][ T7904] binder: 7903:7904 ioctl c0306201 20000680 returned -14
[  254.736778][ T7609] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  254.791560][ T7609] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  255.098921][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.126351][ T7609] 8021q: adding VLAN 0 to HW filter on device team0
[  255.142693][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.149960][ T7220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.195582][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.202779][ T7220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.704150][ T2147] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  255.815247][ T7947] netlink: 92 bytes leftover after parsing attributes in process `syz.3.605'.
[  255.861212][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.894022][ T2147] usb 1-1: Using ep0 maxpacket: 8
[  256.099451][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  256.107473][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.138652][ T2147] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.149484][ T2147] usb 1-1: config 0 has no interfaces?
[  256.157249][ T2147] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  256.167367][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.175746][ T2147] usb 1-1: Product: syz
[  256.179970][ T2147] usb 1-1: Manufacturer: syz
[  256.195413][ T2147] usb 1-1: SerialNumber: syz
[  256.342455][ T2147] usb 1-1: config 0 descriptor??
[  257.125660][ T5902] usb 1-1: USB disconnect, device number 6
[  257.702190][ T7609] veth0_vlan: entered promiscuous mode
[  257.786856][ T7609] veth1_vlan: entered promiscuous mode
[  257.871427][ T7609] veth0_macvtap: entered promiscuous mode
[  257.904569][ T7106] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  258.007509][ T7609] veth1_macvtap: entered promiscuous mode
[  258.013402][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.074500][ T7106] usb 5-1: Using ep0 maxpacket: 32
[  258.084990][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.104213][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.117308][ T7106] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf
[  258.129805][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.167086][ T7106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.181323][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.193483][ T7106] usb 5-1: Product: syz
[  258.199630][ T7106] usb 5-1: Manufacturer: syz
[  258.204500][ T7106] usb 5-1: SerialNumber: syz
[  258.224383][ T7106] usb 5-1: config 0 descriptor??
[  258.246865][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.247684][ T7106] usb 5-1: MBOX3: Invalid descriptor size=18.
[  258.375069][ T8003] ALSA: mixer_oss: invalid OSS volume ''
[  258.390608][ T8003] ALSA: mixer_oss: invalid OSS volume 'DIGITA'
[  258.411342][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.422507][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.432973][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.443617][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.505189][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.942204][ T7609] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.962430][ T7609] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.971326][ T7609] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.980272][ T7609] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.563219][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.625576][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.740376][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.782128][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.585136][   T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  260.601061][ T5902] usb 5-1: USB disconnect, device number 6
[  260.796073][   T25] usb 7-1: config 0 has an invalid interface number: 171 but max is 0
[  260.804371][   T25] usb 7-1: config 0 has no interface number 0
[  260.810490][   T25] usb 7-1: config 0 interface 171 has no altsetting 0
[  260.837257][   T25] usb 7-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  260.846599][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.854739][   T25] usb 7-1: Product: syz
[  260.858940][   T25] usb 7-1: Manufacturer: syz
[  260.863575][   T25] usb 7-1: SerialNumber: syz
[  260.896160][   T25] usb 7-1: config 0 descriptor??
[  260.905718][   T25] usb-storage 7-1:0.171: USB Mass Storage device detected
[  261.886831][ T2147] usb 7-1: USB disconnect, device number 2
[  263.854842][ T8059] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer.
[  264.682213][ T8078] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  268.440597][ T8166] netlink: 'syz.6.648': attribute type 4 has an invalid length.
[  268.546916][ T8166] netlink: 'syz.6.648': attribute type 4 has an invalid length.
[  269.017145][ T5830] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  269.112133][ T8186] netlink: 156 bytes leftover after parsing attributes in process `syz.3.656'.
[  269.225682][ T5830] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  269.237324][ T5830] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  269.257623][ T5830] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  269.282093][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.308432][ T8175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  269.320624][ T5830] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  269.443806][ T8195] netlink: 'syz.6.654': attribute type 2 has an invalid length.
[  270.106795][ T8201] bond0: (slave bond_slave_0): Releasing backup interface
[  270.181279][ T5830] usb 3-1: USB disconnect, device number 9
[  271.396950][ T8201] bond0: (slave bond_slave_1): Releasing backup interface
[  271.547010][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  271.622183][ T8201] team0: Port device team_slave_0 removed
[  271.676858][ T8201] team0: Port device team_slave_1 removed
[  271.695423][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.703410][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.885851][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.893348][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.817924][ T8192] vlan2: entered promiscuous mode
[  272.823040][ T8192] ip6gretap0: entered promiscuous mode
[  272.902751][ T8192] ip6gretap0: left promiscuous mode
[  273.010057][ T8202] team0: Mode changed to "loadbalance"
[  273.019798][ T8207] tipc: Started in network mode
[  273.025583][ T8207] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  273.034139][ T8207] tipc: Enabled bearer <eth:team0>, priority 0
[  273.235323][ T7220] tipc: Resetting bearer <eth:team0>
[  273.242981][ T8213] netlink: 'syz.6.661': attribute type 11 has an invalid length.
[  273.404593][ T8236] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  273.483245][ T8243] kvm: pic: non byte read
[  273.499801][ T8243] kvm: pic: single mode not supported
[  273.499863][ T8243] kvm: pic: level sensitive irq not supported
[  273.518799][ T8243] kvm: pic: non byte read
[  273.539710][ T8243] kvm: pic: non byte read
[  273.562809][ T8243] kvm: pic: non byte read
[  273.575241][ T8243] kvm: pic: single mode not supported
[  273.575268][ T8243] kvm: pic: level sensitive irq not supported
[  273.587510][ T8243] kvm: pic: non byte read
[  273.635121][ T8243] kvm: pic: single mode not supported
[  273.635206][ T8243] kvm: pic: non byte read
[  273.668707][ T8243] kvm: pic: non byte read
[  274.083097][    T9] tipc: Node number set to 11578026
[  274.732107][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'.
[  276.829034][   T29] audit: type=1800 audit(1734539931.413:69): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.679" name="bus" dev="overlay" ino=902 res=0 errno=0
[  277.678920][ T8293] can: request_module (can-proto-0) failed.
[  278.000227][ T8313] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  278.049432][ T8313] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  278.208745][ T8324] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  278.582137][ T8313] syz.0.683: attempt to access beyond end of device
[  278.582137][ T8313] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  278.814671][ T8313] syz.0.683: attempt to access beyond end of device
[  278.814671][ T8313] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  278.902393][ T8313] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  278.968248][ T8313] syz.0.683: attempt to access beyond end of device
[  278.968248][ T8313] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  279.032076][ T8313] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  279.623243][ T8313] syz.0.683: attempt to access beyond end of device
[  279.623243][ T8313] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  279.636568][ T8313] syz.0.683: attempt to access beyond end of device
[  279.636568][ T8313] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  279.649712][ T8313] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  279.665177][ T8313] syz.0.683: attempt to access beyond end of device
[  279.665177][ T8313] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  279.706105][ T8313] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  279.774732][ T8313] syz.0.683: attempt to access beyond end of device
[  279.774732][ T8313] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  279.788667][ T8313] syz.0.683: attempt to access beyond end of device
[  279.788667][ T8313] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0
[  279.835043][ T8313] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  279.881067][ T8313] syz.0.683: attempt to access beyond end of device
[  279.881067][ T8313] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0
[  280.007819][ T8313] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  280.017502][ T8313] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  281.499802][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'.
[  282.800140][ T8393] hsr0: entered promiscuous mode
[  283.096585][ T8393] hsr_slave_0: left promiscuous mode
[  283.353648][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  283.760193][ T8393] hsr_slave_1: left promiscuous mode
[  283.804044][    T9] usb 3-1: Using ep0 maxpacket: 32
[  283.831136][    T9] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf
[  283.846961][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.930019][    T9] usb 3-1: Product: syz
[  283.934681][    T9] usb 3-1: Manufacturer: syz
[  283.939341][    T9] usb 3-1: SerialNumber: syz
[  284.562480][    T9] usb 3-1: config 0 descriptor??
[  284.758770][    T9] usb 3-1: can't set config #0, error -71
[  284.805422][    T9] usb 3-1: USB disconnect, device number 10
[  285.543760][ T7220] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  287.399348][ T8446] ALSA: mixer_oss: invalid OSS volume ''
[  287.467720][ T8446] ALSA: mixer_oss: invalid OSS volume 'DIGITA'
[  288.157691][ T8469] xt_CT: You must specify a L4 protocol and not use inversions on it
[  291.597732][   T29] audit: type=1804 audit(1734539946.143:70): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.730" name="/newroot/156/file1" dev="fuse" ino=1 res=1 errno=0
[  291.630190][   T29] audit: type=1800 audit(1734539946.153:71): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.730" name="/" dev="fuse" ino=1 res=0 errno=0
[  291.649982][   T29] audit: type=1804 audit(1734539946.203:72): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.729" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0
[  291.669692][   T29] audit: type=1800 audit(1734539946.203:73): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.729" name="/" dev="fuse" ino=1 res=0 errno=0
[  291.688942][   T29] audit: type=1804 audit(1734539946.213:74): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.729" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0
[  291.708764][   T29] audit: type=1804 audit(1734539946.213:75): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.729" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0
[  291.729450][   T29] audit: type=1800 audit(1734539946.213:76): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.729" name="/" dev="fuse" ino=1 res=0 errno=0
[  291.757237][ T8520] netfs: Couldn't get user pages (rc=-14)
[  293.119172][ T8550] 9pnet: p9_errstr2errno: server reported unknown error �@�΂�(����QhI�%
[  293.119172][ T8550] 
[  294.107235][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'.
[  294.199839][   T29] audit: type=1800 audit(1734539948.743:77): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.738" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  294.254220][ T5830] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  295.201327][ T5830] usb 7-1: Using ep0 maxpacket: 8
[  295.257472][ T5830] usb 7-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  295.266894][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.518838][ T5830] usb 7-1: config 0 descriptor??
[  295.528523][ T5830] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[  295.536051][ T5830] pwc: Warning: more than 1 configuration available.
[  296.306971][ T8601] binder: BINDER_SET_CONTEXT_MGR already set
[  296.319699][ T8601] binder: 8599:8601 ioctl 4018620d 20000040 returned -16
[  298.616442][ T5830] pwc: recv_control_msg error -32 req 02 val 2b00
[  298.633211][ T5830] pwc: recv_control_msg error -32 req 02 val 2700
[  298.667375][ T5830] pwc: recv_control_msg error -32 req 04 val 1600
[  298.683633][ T5830] pwc: recv_control_msg error -32 req 02 val 2c00
[  298.721294][ T5830] pwc: recv_control_msg error -71 req 04 val 1000
[  298.812686][   T25] IPVS: starting estimator thread 0...
[  298.918206][ T5830] pwc: recv_control_msg error -71 req 04 val 1300
[  298.934947][ T8621] IPVS: using max 21 ests per chain, 50400 per kthread
[  298.965220][ T5830] pwc: recv_control_msg error -71 req 04 val 1400
[  298.979670][ T5830] pwc: recv_control_msg error -71 req 02 val 2000
[  298.989928][ T5830] pwc: recv_control_msg error -71 req 02 val 2100
[  298.999900][ T5830] pwc: recv_control_msg error -71 req 06 val 0600
[  299.009234][ T5830] pwc: recv_control_msg error -71 req 04 val 1500
[  299.016398][ T5830] pwc: recv_control_msg error -71 req 02 val 2500
[  299.023771][ T5830] pwc: recv_control_msg error -71 req 02 val 2400
[  299.044002][ T5830] pwc: recv_control_msg error -71 req 02 val 2600
[  299.070101][ T5830] pwc: recv_control_msg error -71 req 02 val 2900
[  299.264715][ T8637] random: crng reseeded on system resumption
[  299.657092][ T5830] pwc: recv_control_msg error -71 req 02 val 2800
[  299.744538][ T5830] pwc: recv_control_msg error -71 req 04 val 1100
[  299.884260][ T5830] pwc: recv_control_msg error -71 req 04 val 1200
[  299.911021][ T5830] pwc: Registered as video103.
[  299.943431][ T5830] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10
[  300.019734][ T5830] usb 7-1: USB disconnect, device number 3
[  300.031271][ T8653] fuse: Bad value for 'fd'
[  300.225919][ T8639] bond0: left promiscuous mode
[  300.753954][ T5830] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  300.831312][ T8639] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.860986][ T8639] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.918095][ T8639] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.918464][ T5830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.939094][ T8639] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.993635][ T5830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  301.013593][ T5830] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  301.033915][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  301.042161][ T5830] usb 5-1: SerialNumber: syz
[  302.146432][ T5830] usb 5-1: 0:2 : does not exist
[  302.151517][ T5830] usb 5-1: unit 255 not found!
[  302.158493][ T8676] overlayfs: statfs failed on './file0'
[  302.167672][ T5830] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  302.276935][ T5830] usb 5-1: USB disconnect, device number 7
[  302.439014][ T5902] kernel write not supported for file [eventfd] (pid: 5902 comm: kworker/0:7)
[  302.555234][ T7557] udevd[7557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  302.721378][ T7180] libceph: connect (1)[c::]:6789 error -101
[  302.727871][ T7180] libceph: mon0 (1)[c::]:6789 connect error
[  303.854487][ T8697] ceph: No mds server is up or the cluster is laggy
[  303.864913][ T7180] libceph: connect (1)[c::]:6789 error -101
[  303.873681][ T7180] libceph: mon0 (1)[c::]:6789 connect error
[  304.435197][   T25] libceph: connect (1)[c::]:6789 error -101
[  304.462992][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  306.091035][ T8756] 9pnet_fd: Insufficient options for proto=fd
[  306.274112][ T5902] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  306.444946][ T5830] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  306.736083][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.751394][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.787308][ T5830] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  306.807221][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.833993][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.842077][ T5830] usb 3-1: Product: syz
[  306.846429][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.854785][ T5902] usb 5-1: Product: syz
[  306.859307][ T5902] usb 5-1: Manufacturer: syz
[  306.864064][ T5830] usb 3-1: Manufacturer: syz
[  306.868716][ T5830] usb 3-1: SerialNumber: syz
[  306.873906][ T5902] usb 5-1: SerialNumber: syz
[  307.100686][ T5830] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  307.311827][    T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  307.352994][ T5902] usb 5-1: 0:2 : does not exist
[  307.401815][ T5902] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  307.516775][ T5902] usb 5-1: USB disconnect, device number 8
[  307.829103][ T8753] syz.2.782 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  308.277998][   T25] usb 3-1: USB disconnect, device number 11
[  308.414123][    T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  308.423145][    T8] ath9k_htc: Failed to initialize the device
[  308.441145][ T7557] udevd[7557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.477023][   T25] usb 3-1: ath9k_htc: USB layer deinitialized
[  308.481690][   T29] audit: type=1804 audit(1734539963.063:78): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.787" name="/newroot/35/bus/file0" dev="overlay" ino=209 res=1 errno=0
[  308.806394][ T8787] input: syz0 as /devices/virtual/input/input12
[  310.014607][ T5902] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  310.284265][ T5902] usb 7-1: Using ep0 maxpacket: 8
[  310.371093][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.616763][ T5902] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=d3.dd
[  310.633992][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.665130][ T5902] usb 7-1: Product: syz
[  310.712464][ T5902] usb 7-1: Manufacturer: syz
[  310.731499][ T5902] usb 7-1: SerialNumber: syz
[  310.753032][ T5902] usb 7-1: config 0 descriptor??
[  310.771320][ T5902] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state.
[  310.812367][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  310.873644][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  310.925393][ T5902] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2)
[  310.956595][ T5902] usb 7-1: media controller created
[  311.115977][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  312.069895][ T5902] dvb-usb: bulk message failed: -22 (1/0)
[  312.279857][ T5902] DVB: Unable to find symbol mt352_attach()
[  312.288081][ T5902] dvb-usb: bulk message failed: -22 (5/0)
[  312.315836][ T5902] zl10353_read_register: readreg error (reg=127, ret==-121)
[  312.353356][ T5902] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2'
[  312.833928][ T5902] rc_core: IR keymap rc-dvico-mce not found
[  312.840124][ T5902] Registered IR keymap rc-empty
[  312.848147][ T5902] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  312.861450][ T5902] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input13
[  312.908747][ T5902] dvb-usb: schedule remote query interval to 100 msecs.
[  312.916735][ T5902] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected.
[  313.459380][    T8] dvb-usb: bulk message failed: -22 (1/0)
[  313.543994][ T5902] usb 7-1: USB disconnect, device number 4
[  313.871854][ T5902] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected.
[  315.350867][   T29] audit: type=1326 audit(1734539969.933:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.4.806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e38585d29 code=0x0
[  317.683010][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  317.689536][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  325.100798][ T8952] bridge0: port 1(gretap0) entered blocking state
[  325.142437][ T8952] bridge0: port 1(gretap0) entered disabled state
[  325.185623][ T8952] gretap0: entered allmulticast mode
[  325.244227][ T8952] gretap0: entered promiscuous mode
[  325.332398][ T8954] gretap0: left allmulticast mode
[  325.371683][ T8954] gretap0: left promiscuous mode
[  325.414267][ T8954] bridge0: port 1(gretap0) entered disabled state
[  325.774099][ T5835] Bluetooth: hci5: command 0x1003 tx timeout
[  325.780918][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  326.124097][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  326.316180][ T5902] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  326.403966][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  326.467222][ T5902] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  326.514399][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.601833][ T5902] usb 5-1: config 0 descriptor??
[  326.629296][ T5902] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  328.866560][ T5902] usb 5-1: USB disconnect, device number 9
[  332.165104][   T29] audit: type=1400 audit(1734539986.713:80): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=9022 comm="syz.6.843" opid=9022 ocomm="syz.6.843"
[  332.522958][ T9037] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32)
[  333.356695][ T9040] netlink: 'syz.4.847': attribute type 11 has an invalid length.
[  333.794505][ T9045] netlink: 666 bytes leftover after parsing attributes in process `syz.2.848'.
[  335.517496][ T9056] gfs2: not a GFS2 filesystem
[  335.585345][ T9058] can0: slcan on pts0.
[  335.874213][ T7106] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  336.375671][ T9059] can0 (unregistered): slcan off pts0.
[  336.496623][ T7106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  336.521159][ T7106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.531393][ T7106] usb 1-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00
[  336.593459][ T7106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.671251][ T7106] usb 1-1: config 0 descriptor??
[  338.305575][ T7106] hid-generic 0003:22ED:1010.0002: unknown main item tag 0x0
[  338.468451][ T7106] hid-generic 0003:22ED:1010.0002: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.0-1/input0
[  338.692217][    T8] usb 1-1: USB disconnect, device number 7
[  339.833374][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.603252][ T9131] Process accounting resumed
[  340.629128][   T29] audit: type=1804 audit(1734539995.213:81): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.871" name="/newroot/53/bus/bus" dev="overlay" ino=312 res=1 errno=0
[  341.174310][    T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  341.344219][    T8] usb 7-1: Using ep0 maxpacket: 32
[  341.359572][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.402773][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.471355][    T8] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  341.496643][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.557184][    T8] usb 7-1: config 0 descriptor??
[  341.875398][ T9166] netlink: 'syz.3.883': attribute type 4 has an invalid length.
[  342.535460][    T8] usbhid 7-1:0.0: can't add hid device: -71
[  342.601920][    T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  342.915870][    T8] usb 7-1: USB disconnect, device number 5
[  346.556836][ T9208] xt_l2tp: missing protocol rule (udp|l2tpip)
[  347.894417][ T9220] IPv4: Oversized IP packet from 172.20.20.10
[  347.903044][    C1] IPv4: Oversized IP packet from 172.20.20.10
[  350.666280][ T9249] Bluetooth: MGMT ver 1.23
[  352.272910][ T9269] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  352.415827][ T9273] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  354.808229][ T9290] ipvlan2: entered promiscuous mode
[  354.814116][ T9290] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  354.821733][ T9290] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  355.894329][ T5835] Bluetooth: hci4: command 0x0406 tx timeout
[  355.969912][ T9295] kvm: pic: non byte read
[  361.224324][ T9358] loop7: detected capacity change from 0 to 16384
[  362.824440][ T9358] loop7: detected capacity change from 16384 to 16383
[  362.919997][ T9361] blk_print_req_error: 113 callbacks suppressed
[  362.920013][ T9361] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  362.943886][ T9361] buffer_io_error: 105 callbacks suppressed
[  362.943912][ T9361] Buffer I/O error on dev loop7, logical block 0, async page read
[  363.028734][ T9372] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  363.059003][ T9372] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  363.109727][ T9372] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  363.116686][ T9356] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0
[  363.129807][ T9372] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  363.142087][ T9356] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  363.189692][ T9356] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  363.206964][ T9356] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  363.220450][ T9356] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  363.242184][ T9356] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  363.253749][ T9356] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  363.269436][ T9356] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  363.282668][ T9356] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  363.304545][ T9356] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  363.322611][ T9372] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  363.350940][ T9372] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  365.054005][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[  365.138114][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  366.205566][ T5826] Bluetooth: hci4: command 0x0406 tx timeout
[  367.218846][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  367.225214][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  368.073102][ T9414] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  368.272080][ T5835] Bluetooth: hci4: command 0x0406 tx timeout
[  368.335419][ T7381] Bluetooth: hci5: Frame reassembly failed (-84)
[  370.094150][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  371.424163][ T9443] netlink: 47 bytes leftover after parsing attributes in process `syz.6.964'.
[  371.474551][ T9441] overlayfs: statfs failed on './file0'
[  374.783548][ T9470] netlink: 1788 bytes leftover after parsing attributes in process `syz.6.970'.
[  376.284092][ T9480] wg1: entered promiscuous mode
[  377.763439][ T9485] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  377.800244][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c2d
[  378.987857][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.994582][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  382.248102][ T5826] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  382.259717][ T5826] Bluetooth: hci3: Injecting HCI hardware error event
[  382.270327][ T5820] Bluetooth: hci3: hardware error 0x00
[  382.476059][ T9538] syz.2.994: attempt to access beyond end of device
[  382.476059][ T9538] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0
[  382.489540][ T9538] EXT4-fs (nbd2): unable to read superblock
[  382.572323][ T9539] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  384.800619][ T5820] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  386.528282][ T9576] syz.3.1005: attempt to access beyond end of device
[  386.528282][ T9576] nbd3: rw=4096, sector=0, nr_sectors = 2 limit=0
[  386.543562][ T9576] XFS (nbd3): SB validate failed with error -5.
[  386.594562][   T10] block nbd3: Attempted send on invalid socket
[  386.603302][   T10] I/O error, dev nbd3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0
[  387.177061][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'.
[  387.329071][ T9590] kvm: faulting far call emulation tainted memory
[  388.102938][ T9601] fuse: Bad value for 'fd'
[  391.068160][ T9639] rdma_op ffff88805deb79f0 conn xmit_rdma 0000000000000000
[  391.971951][ T9644] kvm: user requested TSC rate below hardware speed
[  396.992842][ T9690] netlink: 'syz.2.1035': attribute type 10 has an invalid length.
[  397.004685][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.012056][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.306129][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.315466][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.323053][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.330317][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.747959][ T9690] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  398.194299][ T9702] IPVS: length: 198 != 24
[  405.438634][ T9756] syz.2.1052 (9756): /proc/9756/oom_adj is deprecated, please use /proc/9756/oom_score_adj instead.
[  406.834133][ T9770] bridge0: entered allmulticast mode
[  406.993033][ T9770] bridge0: entered promiscuous mode
[  407.674824][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  407.973949][ T5872] usb 1-1: Using ep0 maxpacket: 16
[  408.002757][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  408.018281][ T5872] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40
[  408.029476][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.154286][ T5872] usb 1-1: Product: syz
[  408.176071][ T5872] usb 1-1: Manufacturer: syz
[  408.197084][ T5872] usb 1-1: SerialNumber: syz
[  409.124052][ T5872] usb 1-1: can't set config #1, error -71
[  409.165487][ T5872] usb 1-1: USB disconnect, device number 8
[  410.229220][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'.
[  410.399932][ T9808] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  411.186171][ T9812] tipc: New replicast peer: 255.255.255.255
[  411.193018][ T9812] tipc: Enabled bearer <udp:syz2>, priority 10
[  411.624195][ T9827] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1072'.
[  411.923937][ T5872] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  412.084040][ T5872] usb 7-1: Using ep0 maxpacket: 16
[  412.122834][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.141986][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.160954][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  412.187359][ T5872] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  412.197319][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.216293][ T5872] usb 7-1: config 0 descriptor??
[  413.193554][ T5872] hid (null): invalid report_size 1675959386
[  413.203155][ T5872] shield 0003:0955:7214.0003: invalid report_size 1675959386
[  413.210743][ T5872] shield 0003:0955:7214.0003: item 0 4 1 7 parsing failed
[  413.218577][ T5872] shield 0003:0955:7214.0003: Parse failed
[  413.224609][ T5872] shield 0003:0955:7214.0003: probe with driver shield failed with error -22
[  413.464326][ T5830] usb 7-1: USB disconnect, device number 6
[  415.262875][ T9866] trusted_key: syz.6.1082 sent an empty control message without MSG_MORE.
[  416.427722][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1085'.
[  416.928228][ T9888] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  424.724674][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'.
[  424.727664][   T12] Bluetooth: Error in BCSP hdr checksum
[  424.984276][ T1314] Bluetooth: Error in BCSP hdr checksum
[  425.245312][   T12] Bluetooth: Error in BCSP hdr checksum
[  425.506602][   T45] Bluetooth: Error in BCSP hdr checksum
[  426.435767][   T12] Bluetooth: Error in BCSP hdr checksum
[  426.514476][ T9983] Bluetooth: hci5: command 0x1003 tx timeout
[  426.521135][ T5826] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[  426.532694][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  426.641138][   T29] audit: type=1800 audit(1734540081.163:82): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1123" name="bus" dev="overlay" ino=1266 res=0 errno=0
[  426.684936][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  426.688653][   T29] audit: type=1326 audit(1734540081.273:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.718338][   T29] audit: type=1326 audit(1734540081.273:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.739895][   T29] audit: type=1326 audit(1734540081.273:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.748181][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  426.771780][   T29] audit: type=1326 audit(1734540081.353:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.794175][   T29] audit: type=1326 audit(1734540081.353:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.816256][   T29] audit: type=1326 audit(1734540081.383:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.838332][   T29] audit: type=1326 audit(1734540081.383:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.860719][   T29] audit: type=1326 audit(1734540081.383:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.899746][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  426.900580][   T29] audit: type=1326 audit(1734540081.473:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.6.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1ed2785d29 code=0x7ffc0000
[  426.932689][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  426.992005][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  426.999995][ T5820] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  427.047663][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  427.288067][T10000] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14
[  428.086974][ T9991] chnl_net:caif_netlink_parms(): no params data found
[  429.107337][T10016] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  429.189881][ T9961] Bluetooth: hci2: command tx timeout
[  429.816884][T10025] xt_bpf: check failed: parse error
[  431.538727][ T9961] Bluetooth: hci2: command tx timeout
[  431.740134][ T9991] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.748138][ T9991] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.756645][ T9991] bridge_slave_0: entered allmulticast mode
[  431.764487][ T9991] bridge_slave_0: entered promiscuous mode
[  431.774460][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.782879][ T9991] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.837013][ T9991] bridge_slave_1: entered allmulticast mode
[  431.852503][ T9991] bridge_slave_1: entered promiscuous mode
[  432.218308][T10035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.244350][ T7106] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  432.257107][ T9991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.279015][ T7106] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  432.348703][T10036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.367702][ T9991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.377144][ T5971] wlan1: authenticated
[  432.417051][ T7220] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  432.482554][T10035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.492814][ T7220] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  432.554992][ T7220] wlan1: associated
[  432.626841][ T9991] team0: Port device team_slave_0 added
[  432.661813][ T9991] team0: Port device team_slave_1 added
[  432.723995][    T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  432.810650][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.842284][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.869343][ T9991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.882770][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.892068][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.932576][ T9991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.943620][    T8] usb 5-1: device descriptor read/all, error -71
[  433.311211][ T9991] hsr_slave_0: entered promiscuous mode
[  433.363939][ T9991] hsr_slave_1: entered promiscuous mode
[  433.492867][ T9991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  433.505997][ T9991] Cannot create hsr debugfs directory
[  433.649067][ T5820] Bluetooth: hci2: command tx timeout
[  434.653459][T10055] kvm: pic: non byte write
[  434.693928][ T5872] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  434.854915][ T5872] usb 3-1: Using ep0 maxpacket: 8
[  434.861757][ T5872] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  434.872476][ T5872] usb 3-1: config 2 has no interface number 0
[  434.879051][ T5872] usb 3-1: config 2 interface 31 has no altsetting 0
[  434.893197][ T5872] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  434.903630][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.925790][ T5872] usb 3-1: Product: syz
[  435.140486][ T5872] usb 3-1: Manufacturer: syz
[  435.146624][ T5872] usb 3-1: SerialNumber: syz
[  435.224477][ T9991] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  435.925414][ T9991] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  435.932958][ T5820] Bluetooth: hci2: command tx timeout
[  436.133204][ T9991] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  436.511261][ T9991] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  436.805109][ T9991] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.611584][ T9991] 8021q: adding VLAN 0 to HW filter on device team0
[  438.698716][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.706010][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.715216][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.722359][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.865099][ T5872] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22
[  439.887053][ T5872] usb 3-1: USB disconnect, device number 12
[  441.101786][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  441.111052][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  441.127820][ T9991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.953869][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  441.953892][   T29] audit: type=1326 audit(1734540096.533:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.2.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65fe785d29 code=0x0
[  443.146902][T10134] kvm: pic: non byte read
[  443.151493][T10134] kvm: pic: non byte write
[  443.350191][ T9991] veth0_vlan: entered promiscuous mode
[  443.372246][ T9991] veth1_vlan: entered promiscuous mode
[  443.703920][T10138] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  443.749919][ T9991] veth0_macvtap: entered promiscuous mode
[  444.084148][ T9991] veth1_macvtap: entered promiscuous mode
[  445.561241][ T5820] Bluetooth: hci4: command 0x0406 tx timeout
[  445.770723][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  445.782282][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.796735][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  445.829695][   T29] audit: type=1800 audit(1734540100.263:115): pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1165" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  445.862895][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.899149][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.934867][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.216284][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.243043][ T9991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  447.604125][ T9991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  447.726057][ T9991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.824649][ T9991] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.891241][ T9991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.951543][ T9991] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.007394][ T9991] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.155504][ T9961] Bluetooth: hci5: sending frame failed (-49)
[  448.164182][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  448.373842][ T5872] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  448.628797][ T5872] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  449.132811][ T5872] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  449.143922][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  449.153721][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.490365][T10196] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  449.526839][ T5872] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  449.554685][ T7381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.562586][ T7381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.668482][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.701231][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.916717][ T5830] usb 1-1: USB disconnect, device number 9
[  450.064947][ T7106] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  450.266088][ T7106] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  450.286075][ T7106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.296359][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  450.546796][ T7106] usb 3-1: config 0 descriptor??
[  450.578610][ T7106] cp210x 3-1:0.0: cp210x converter detected
[  452.353885][ T7106] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -32
[  452.421177][ T7106] cp210x 3-1:0.0: GPIO initialisation failed: -32
[  452.477324][ T7106] usb 3-1: cp210x converter now attached to ttyUSB0
[  452.565125][ T7106] usb 3-1: USB disconnect, device number 13
[  452.596522][ T7106] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  452.612872][ T7106] cp210x 3-1:0.0: device disconnected
[  457.104260][T10315] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  457.134561][T10315] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  457.175213][T10315] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  457.236394][T10316] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  457.286190][T10315] block nbd0: shutting down sockets
[  459.222741][   T29] audit: type=1326 audit(1734540113.803:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fe785d29 code=0x7ffc0000
[  459.249788][   T29] audit: type=1326 audit(1734540113.803:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65fe785d29 code=0x7ffc0000
[  459.275194][   T29] audit: type=1326 audit(1734540113.833:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65fe784690 code=0x7ffc0000
[  459.344469][   T29] audit: type=1326 audit(1734540113.833:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fe78592b code=0x7ffc0000
[  459.489056][   T29] audit: type=1326 audit(1734540113.833:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fe78592b code=0x7ffc0000
[  459.511007][    T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  459.594814][   T29] audit: type=1326 audit(1734540113.833:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fe78592b code=0x7ffc0000
[  459.663294][   T29] audit: type=1326 audit(1734540113.833:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fe78592b code=0x7ffc0000
[  459.702065][   T29] audit: type=1326 audit(1734540113.953:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fe78592b code=0x7ffc0000
[  459.724553][    T8] usb 3-1: Using ep0 maxpacket: 8
[  459.731442][   T29] audit: type=1326 audit(1734540114.023:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fe78592b code=0x7ffc0000
[  459.754921][    T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  459.781641][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  459.804510][   T29] audit: type=1326 audit(1734540114.133:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65fe78592b code=0x7ffc0000
[  460.080838][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  460.091608][    T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  460.104841][    T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  460.114013][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.069417][    T8] usb 3-1: GET_CAPABILITIES returned 0
[  461.075118][    T8] usbtmc 3-1:16.0: can't read capabilities
[  461.177273][T10349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1203'.
[  461.233132][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  461.248340][   T25] usb 3-1: USB disconnect, device number 14
[  461.744010][    T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  461.964128][    T8] usb 1-1: Using ep0 maxpacket: 16
[  462.154490][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.223335][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.263818][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  462.341898][    T8] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  462.392776][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.432678][    T8] usb 1-1: config 0 descriptor??
[  463.641412][    T8] hid (null): invalid report_size 1675959386
[  463.650537][    T8] shield 0003:0955:7214.0004: invalid report_size 1675959386
[  463.660972][    T8] shield 0003:0955:7214.0004: item 0 4 1 7 parsing failed
[  463.670175][    T8] shield 0003:0955:7214.0004: Parse failed
[  463.676499][    T8] shield 0003:0955:7214.0004: probe with driver shield failed with error -22
[  463.769809][ T7180] usb 1-1: USB disconnect, device number 10
[  463.935346][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'.
[  463.973789][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'.
[  464.020288][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.033712][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'.
[  464.718768][T10373] bond0: (slave bond_slave_0): Releasing backup interface
[  466.219568][T10392] xt_TPROXY: Can be used only with -p tcp or -p udp
[  466.614283][ T7106] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  466.820931][T10416] overlayfs: missing 'lowerdir'
[  466.829402][ T7106] usb 7-1: config 0 has an invalid interface number: 156 but max is 1
[  466.874040][ T7106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.918756][ T7106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  467.024298][ T7106] usb 7-1: config 0 has no interface number 0
[  467.031968][ T7106] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  467.140930][ T7106] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  467.296773][ T7106] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  467.446329][ T7106] usb 7-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  467.631337][ T7106] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  467.641070][ T7106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.651950][ T7106] usb 7-1: config 0 descriptor??
[  467.661030][ T7106] gspca_main: spca561-2.14.0 probing abcd:cdee
[  468.660316][ T7106] spca561 7-1:0.156: probe with driver spca561 failed with error -22
[  468.672114][ T7106] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  468.695464][ T7106] usb 7-1: MIDIStreaming interface descriptor not found
[  468.867729][ T7106] usb 7-1: USB disconnect, device number 7
[  469.766160][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  469.946829][T10454] input: syz0 as /devices/virtual/input/input15
[  471.159482][T10432] ��������: renamed from lo (while UP)
[  471.436466][T10485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1237'.
[  473.753073][T10487] syz.6.1238 (10487): drop_caches: 2
[  475.118339][T10524] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1247'.
[  475.180676][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1247'.
[  475.215020][T10524] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1247'.
[  475.224595][T10524] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1247'.
[  475.662602][T10540] kvm: pic: single mode not supported
[  475.662634][T10540] kvm: pic: level sensitive irq not supported
[  476.064358][T10557] xt_socket: unknown flags 0x58
[  481.400752][T10612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  481.444284][   T29] kauditd_printk_skb: 35 callbacks suppressed
[  481.444305][   T29] audit: type=1800 audit(1734540136.033:161): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1273" name="file0" dev="overlay" ino=34276 res=0 errno=0
[  483.336803][T10619] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1275'.
[  483.553896][ T5830] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  484.359882][ T5830] usb 1-1: Using ep0 maxpacket: 8
[  484.396036][ T5830] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  484.429163][ T5830] usb 1-1: config 0 has no interface number 1
[  484.472334][ T5830] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  484.493376][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.544922][ T5830] usb 1-1: config 0 descriptor??
[  484.833331][T10653] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  485.717152][ T5830] qcserial 1-1:0.2: Qualcomm USB modem converter detected
[  486.843879][ T5830] usb 1-1: USB disconnect, device number 11
[  486.850573][ T5830] qcserial 1-1:0.2: device disconnected
[  488.955106][T10681] openvswitch: netlink: Tunnel attr 228 out of range max 16
[  490.984265][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'.
[  492.824723][T10703] 
[  492.827140][T10703] ======================================================
[  492.834187][T10703] WARNING: possible circular locking dependency detected
[  492.841313][T10703] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted
[  492.848512][T10703] ------------------------------------------------------
[  492.855536][T10703] syz.2.1298/10703 is trying to acquire lock:
[  492.861604][T10703] ffff888143bdd790 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x9d/0x400
[  492.870512][T10703] 
[  492.870512][T10703] but task is already holding lock:
[  492.877988][T10703] ffff888143b9e278 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  492.888556][T10703] 
[  492.888556][T10703] which lock already depends on the new lock.
[  492.888556][T10703] 
[  492.898973][T10703] 
[  492.898973][T10703] the existing dependency chain (in reverse order) is:
[  492.908003][T10703] 
[  492.908003][T10703] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  492.916635][T10703]        lock_acquire+0x1ed/0x550
[  492.921675][T10703]        blk_mq_submit_bio+0x1536/0x2390
[  492.927343][T10703]        __submit_bio+0x2c6/0x560
[  492.932382][T10703]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  492.938544][T10703]        block_read_full_folio+0x9b3/0xae0
[  492.944359][T10703]        filemap_read_folio+0x148/0x3b0
[  492.949914][T10703]        filemap_get_pages+0x18ca/0x2080
[  492.955562][T10703]        filemap_read+0x452/0xf50
[  492.960623][T10703]        blkdev_read_iter+0x2d8/0x430
[  492.966008][T10703]        vfs_read+0x991/0xb70
[  492.970695][T10703]        ksys_read+0x18f/0x2b0
[  492.975473][T10703]        do_syscall_64+0xf3/0x230
[  492.980520][T10703]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.986950][T10703] 
[  492.986950][T10703] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  492.995497][T10703]        lock_acquire+0x1ed/0x550
[  493.000536][T10703]        down_read+0xb1/0xa40
[  493.005308][T10703]        page_cache_ra_unbounded+0x142/0x720
[  493.011307][T10703]        filemap_fault+0x818/0x1490
[  493.016517][T10703]        __do_fault+0x135/0x390
[  493.021404][T10703]        handle_pte_fault+0x39eb/0x5ed0
[  493.026966][T10703]        handle_mm_fault+0x1053/0x1ad0
[  493.032441][T10703]        exc_page_fault+0x2b9/0x8b0
[  493.037658][T10703]        asm_exc_page_fault+0x26/0x30
[  493.043072][T10703]        rep_movs_alternative+0x4a/0x70
[  493.048632][T10703]        _copy_from_iter+0x268/0x1c20
[  493.054076][T10703]        sk_msg_memcopy_from_iter+0x2ee/0x5f0
[  493.060175][T10703]        tcp_bpf_sendmsg+0x678/0x1be0
[  493.065585][T10703]        __sock_sendmsg+0xef/0x270
[  493.070720][T10703]        ____sys_sendmsg+0x52a/0x7e0
[  493.076016][T10703]        __sys_sendmsg+0x269/0x350
[  493.081228][T10703]        do_syscall_64+0xf3/0x230
[  493.086263][T10703]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.092692][T10703] 
[  493.092692][T10703] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  493.100434][T10703]        lock_acquire+0x1ed/0x550
[  493.105471][T10703]        lock_sock_nested+0x48/0x100
[  493.110771][T10703]        inet_shutdown+0x6d/0x390
[  493.115804][T10703]        nbd_mark_nsock_dead+0x2e3/0x560
[  493.121454][T10703]        recv_work+0x225a/0x25c0
[  493.126419][T10703]        process_scheduled_works+0xa66/0x1840
[  493.132510][T10703]        worker_thread+0x870/0xd30
[  493.137635][T10703]        kthread+0x2f0/0x390
[  493.142251][T10703]        ret_from_fork+0x4b/0x80
[  493.147200][T10703]        ret_from_fork_asm+0x1a/0x30
[  493.152514][T10703] 
[  493.152514][T10703] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  493.160185][T10703]        lock_acquire+0x1ed/0x550
[  493.165225][T10703]        __mutex_lock+0x1ac/0xee0
[  493.170268][T10703]        nbd_queue_rq+0x29c/0x2ef0
[  493.175391][T10703]        blk_mq_dispatch_rq_list+0xad3/0x19d0
[  493.181479][T10703]        __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  493.188347][T10703]        blk_mq_sched_dispatch_requests+0xd6/0x190
[  493.194863][T10703]        blk_mq_run_hw_queue+0x354/0x500
[  493.200520][T10703]        blk_mq_flush_plug_list+0x118e/0x1870
[  493.206616][T10703]        __blk_flush_plug+0x420/0x500
[  493.212001][T10703]        __submit_bio+0x46a/0x560
[  493.217034][T10703]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  493.223205][T10703]        block_read_full_folio+0x9b3/0xae0
[  493.229033][T10703]        filemap_read_folio+0x148/0x3b0
[  493.234594][T10703]        do_read_cache_folio+0x373/0x5b0
[  493.240244][T10703]        read_part_sector+0xb3/0x260
[  493.246155][T10703]        adfspart_check_ICS+0xd9/0x9a0
[  493.251636][T10703]        bdev_disk_changed+0x72c/0x13f0
[  493.257198][T10703]        blkdev_get_whole+0x2d2/0x450
[  493.262587][T10703]        bdev_open+0x2d4/0xc50
[  493.267361][T10703]        blkdev_open+0x389/0x4f0
[  493.272329][T10703]        do_dentry_open+0xbe1/0x1b70
[  493.277646][T10703]        vfs_open+0x3e/0x330
[  493.282242][T10703]        path_openat+0x2c84/0x3590
[  493.287380][T10703]        do_filp_open+0x27f/0x4e0
[  493.292416][T10703]        do_sys_openat2+0x13e/0x1d0
[  493.297710][T10703]        __x64_sys_openat+0x247/0x2a0
[  493.303093][T10703]        do_syscall_64+0xf3/0x230
[  493.308137][T10703]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.314591][T10703] 
[  493.314591][T10703] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  493.322019][T10703]        lock_acquire+0x1ed/0x550
[  493.327077][T10703]        __mutex_lock+0x1ac/0xee0
[  493.332129][T10703]        nbd_queue_rq+0xfe/0x2ef0
[  493.337181][T10703]        blk_mq_dispatch_rq_list+0xad3/0x19d0
[  493.343263][T10703]        __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  493.350124][T10703]        blk_mq_sched_dispatch_requests+0xd6/0x190
[  493.356640][T10703]        blk_mq_run_hw_queue+0x354/0x500
[  493.362297][T10703]        blk_mq_flush_plug_list+0x118e/0x1870
[  493.368371][T10703]        __blk_flush_plug+0x420/0x500
[  493.373751][T10703]        __submit_bio+0x46a/0x560
[  493.378791][T10703]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  493.384954][T10703]        block_read_full_folio+0x9b3/0xae0
[  493.390770][T10703]        filemap_read_folio+0x148/0x3b0
[  493.396332][T10703]        do_read_cache_folio+0x373/0x5b0
[  493.401979][T10703]        read_part_sector+0xb3/0x260
[  493.407282][T10703]        adfspart_check_ICS+0xd9/0x9a0
[  493.412753][T10703]        bdev_disk_changed+0x72c/0x13f0
[  493.418337][T10703]        blkdev_get_whole+0x2d2/0x450
[  493.423753][T10703]        bdev_open+0x2d4/0xc50
[  493.428526][T10703]        blkdev_open+0x389/0x4f0
[  493.433474][T10703]        do_dentry_open+0xbe1/0x1b70
[  493.438819][T10703]        vfs_open+0x3e/0x330
[  493.443414][T10703]        path_openat+0x2c84/0x3590
[  493.448561][T10703]        do_filp_open+0x27f/0x4e0
[  493.453607][T10703]        do_sys_openat2+0x13e/0x1d0
[  493.458817][T10703]        __x64_sys_openat+0x247/0x2a0
[  493.464213][T10703]        do_syscall_64+0xf3/0x230
[  493.469267][T10703]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.475719][T10703] 
[  493.475719][T10703] -> #0 (set->srcu){.+.+}-{0:0}:
[  493.482862][T10703]        validate_chain+0x18ef/0x5920
[  493.488343][T10703]        __lock_acquire+0x1397/0x2100
[  493.493813][T10703]        lock_sync+0x18b/0x310
[  493.498586][T10703]        __synchronize_srcu+0xb1/0x400
[  493.504058][T10703]        elevator_disable+0x8c/0x3f0
[  493.509351][T10703]        blk_mq_update_nr_hw_queues+0x683/0x1b20
[  493.515690][T10703]        nbd_start_device+0x16c/0xaa0
[  493.521086][T10703]        nbd_ioctl+0x5dc/0xf40
[  493.525863][T10703]        blkdev_ioctl+0x57d/0x6a0
[  493.530897][T10703]        __se_sys_ioctl+0xf5/0x170
[  493.536027][T10703]        do_syscall_64+0xf3/0x230
[  493.541072][T10703]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.547504][T10703] 
[  493.547504][T10703] other info that might help us debug this:
[  493.547504][T10703] 
[  493.557823][T10703] Chain exists of:
[  493.557823][T10703]   set->srcu --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51
[  493.557823][T10703] 
[  493.572204][T10703]  Possible unsafe locking scenario:
[  493.572204][T10703] 
[  493.579665][T10703]        CPU0                    CPU1
[  493.585057][T10703]        ----                    ----
[  493.590424][T10703]   lock(&q->q_usage_counter(io)#51);
[  493.595825][T10703]                                lock(mapping.invalidate_lock#2);
[  493.603649][T10703]                                lock(&q->q_usage_counter(io)#51);
[  493.611645][T10703]   sync(set->srcu);
[  493.615550][T10703] 
[  493.615550][T10703]  *** DEADLOCK ***
[  493.615550][T10703] 
[  493.623705][T10703] 6 locks held by syz.2.1298/10703:
[  493.628908][T10703]  #0: ffff888025812198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40
[  493.638263][T10703]  #1: ffff8880258120d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1b20
[  493.649266][T10703]  #2: ffff888143b9e838 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x2c1/0x1b20
[  493.660260][T10703]  #3: ffff888143b9e7a8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x2cf/0x1b20
[  493.670902][T10703]  #4: ffff888143b9e278 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  493.681657][T10703]  #5: ffff888143b9e2b0 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  493.692767][T10703] 
[  493.692767][T10703] stack backtrace:
[  493.698678][T10703] CPU: 1 UID: 0 PID: 10703 Comm: syz.2.1298 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0
[  493.709448][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  493.719682][T10703] Call Trace:
[  493.722968][T10703]  <TASK>
[  493.725909][T10703]  dump_stack_lvl+0x241/0x360
[  493.730609][T10703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  493.735827][T10703]  ? __pfx__printk+0x10/0x10
[  493.740472][T10703]  print_circular_bug+0x13a/0x1b0
[  493.745512][T10703]  check_noncircular+0x36a/0x4a0
[  493.750463][T10703]  ? __pfx_check_noncircular+0x10/0x10
[  493.755947][T10703]  validate_chain+0x18ef/0x5920
[  493.760831][T10703]  ? __pfx_validate_chain+0x10/0x10
[  493.766047][T10703]  ? 0xffffffffa0001fa8
[  493.770223][T10703]  ? 0xffffffffa0001fa8
[  493.774392][T10703]  ? mark_lock+0x9a/0x360
[  493.778739][T10703]  __lock_acquire+0x1397/0x2100
[  493.783607][T10703]  lock_sync+0x18b/0x310
[  493.787950][T10703]  ? __synchronize_srcu+0x9d/0x400
[  493.793077][T10703]  ? __synchronize_srcu+0x9d/0x400
[  493.798204][T10703]  ? __pfx_lock_sync+0x10/0x10
[  493.802985][T10703]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  493.808982][T10703]  __synchronize_srcu+0xb1/0x400
[  493.813936][T10703]  ? __pfx___synchronize_srcu+0x10/0x10
[  493.819502][T10703]  ? read_tsc+0x9/0x20
[  493.823673][T10703]  ? ktime_get_mono_fast_ns+0x303/0x320
[  493.829244][T10703]  ? synchronize_srcu+0x2a7/0x2d0
[  493.834280][T10703]  elevator_disable+0x8c/0x3f0
[  493.839089][T10703]  blk_mq_update_nr_hw_queues+0x683/0x1b20
[  493.844956][T10703]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  493.851220][T10703]  ? rcu_is_watching+0x15/0xb0
[  493.856008][T10703]  ? trace_contention_end+0x3c/0x120
[  493.861309][T10703]  ? __mutex_lock+0x37f/0xee0
[  493.866003][T10703]  ? tomoyo_path_number_perm+0x679/0x860
[  493.871649][T10703]  ? blkdev_common_ioctl+0xfb2/0x2460
[  493.877065][T10703]  ? __lock_acquire+0x1397/0x2100
[  493.882194][T10703]  ? nbd_ioctl+0x13c/0xf40
[  493.886629][T10703]  ? __pfx___mutex_lock+0x10/0x10
[  493.891786][T10703]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  493.897775][T10703]  nbd_start_device+0x16c/0xaa0
[  493.902646][T10703]  nbd_ioctl+0x5dc/0xf40
[  493.906942][T10703]  ? __pfx_nbd_ioctl+0x10/0x10
[  493.911720][T10703]  ? __asan_memset+0x23/0x50
[  493.916320][T10703]  ? smack_file_ioctl+0x29e/0x3a0
[  493.921348][T10703]  ? __pfx_smack_file_ioctl+0x10/0x10
[  493.926730][T10703]  ? file_to_blk_mode+0xcc/0x140
[  493.931770][T10703]  ? __pfx_nbd_ioctl+0x10/0x10
[  493.936556][T10703]  blkdev_ioctl+0x57d/0x6a0
[  493.941074][T10703]  ? __pfx_blkdev_ioctl+0x10/0x10
[  493.946124][T10703]  ? __pfx_blkdev_ioctl+0x10/0x10
[  493.951186][T10703]  __se_sys_ioctl+0xf5/0x170
[  493.955969][T10703]  do_syscall_64+0xf3/0x230
[  493.960510][T10703]  ? clear_bhb_loop+0x35/0x90
[  493.965205][T10703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.971135][T10703] RIP: 0033:0x7f65fe785d29
[  493.975675][T10703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.995300][T10703] RSP: 002b:00007f65ff4db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  494.003730][T10703] RAX: ffffffffffffffda RBX: 00007f65fe975fa0 RCX: 00007f65fe785d29
[  494.011718][T10703] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  494.019699][T10703] RBP: 00007f65fe801a20 R08: 0000000000000000 R09: 0000000000000000
[  494.028027][T10703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  494.036008][T10703] R13: 0000000000000000 R14: 00007f65fe975fa0 R15: 00007fff6582ab18
[  494.044002][T10703]  </TASK>
[  494.411627][T10710] block nbd2: shutting down sockets
[  501.856049][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.862399][ T1294] ieee802154 phy1 wpan1: encryption failed: -22