last executing test programs:

6m23.999927104s ago: executing program 2 (id=23):
io_uring_setup(0x137, &(0x7f0000000280)={0x0, 0xec28, 0x200, 0x2, 0xf4})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)={[{@stats}, {@stats}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x2, 0x11, 0xb, '\x00', 0xe5d})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m22.981318337s ago: executing program 2 (id=28):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0})
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x200000100000011, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

6m22.209912973s ago: executing program 32 (id=35):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m21.878899247s ago: executing program 2 (id=40):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r6, 0x4, r0}, 0x10)

6m21.420151257s ago: executing program 2 (id=43):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)
mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id'])
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m21.017050109s ago: executing program 2 (id=44):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x478, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x2, 0x2, 0x9, {0x3, 0x0, 0x5, 0x3, 0x8, 0xfffffc4e}, {0x2, 0x2, 0x6, 0x1, 0x0, 0x6}, 0x0, 0x795d, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffffd, 0x0, 0x1, 0x8, 0x7, 0x1, 0x7fff, 0x7, 0x20, 0xffffffff, 0x0, 0x5, 0x4, 0x7ff, 0x1, 0x8, 0x5, 0x2, 0x7, 0x4, 0x1ba, 0x1ff, 0xb, 0x8, 0x2800000, 0xfffffff7, 0x8, 0x11a8, 0x3, 0x9, 0x5, 0x5, 0x2, 0xffffffff, 0x6, 0x0, 0x7fffffff, 0x5, 0xf0f9, 0x7, 0x2b6, 0x7, 0x0, 0xfffffffc, 0xffff, 0x5, 0xfffffff8, 0xffff, 0x8, 0xffffffff, 0x1, 0xa, 0x300, 0x6, 0x8, 0x3, 0x6, 0x1, 0x9, 0x8, 0x8, 0x6, 0x5, 0x4, 0x7, 0x59b, 0x80000001, 0x6, 0x845, 0xff, 0x9, 0x91b7, 0x9917, 0x5, 0x8, 0x956, 0xc, 0x77c, 0x4, 0x3, 0x0, 0x640, 0x7, 0x3d621128, 0x0, 0x7, 0x8a, 0xc2e, 0x8, 0x6, 0xfdd, 0x2, 0x4, 0x2, 0xe, 0x4, 0x7, 0x0, 0x1, 0xc00, 0x8db, 0xc4ee, 0xf, 0x3, 0x4000000, 0x7000, 0xf21, 0x401, 0x8, 0x57, 0x2, 0x0, 0x6, 0x1, 0x3, 0x10001, 0x6, 0xbc4, 0x1, 0x1, 0xe2, 0x80, 0x9, 0xa6, 0x85f, 0x1, 0x8, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x1, 0x7, 0x9, 0x1, 0x4, 0xa, 0x9, 0x5, 0x2, 0x61, 0x1, 0x200, 0x5cb8, 0x4, 0x7, 0x1, 0x1, 0x9, 0x5, 0x75, 0x400, 0x9, 0x1, 0x4, 0xdd7f, 0x8430, 0x1, 0x9, 0xb, 0x7, 0x4, 0x2, 0xb7cf, 0x5, 0x770f480, 0x8001, 0x0, 0xfffffbff, 0x7, 0xffff0000, 0x8, 0xffffffe0, 0x8, 0x67f, 0xffffff80, 0x2, 0x2, 0x69d774c3, 0x1, 0x515, 0x6, 0x2, 0x9, 0x2, 0x80000001, 0xd, 0x2, 0xd, 0x9, 0xcb, 0x8, 0x5, 0x1, 0x0, 0xfffffffb, 0x6, 0x80, 0x3ed, 0x40000, 0x0, 0x9, 0x7, 0x0, 0x8, 0xff, 0xffffff3b, 0x9, 0x5, 0x1, 0xd, 0xffffffff, 0x401, 0x774, 0x0, 0x5, 0x6, 0x1, 0x694, 0x91d, 0x3, 0x1, 0x1, 0xb, 0xd, 0x6, 0x1, 0x4e, 0xffff0000, 0x4, 0x4, 0x400, 0x1ad9, 0xbe, 0x6efe6ee8, 0x400, 0x7ff, 0xd, 0x1ff, 0x80, 0x0, 0x9, 0x8, 0x7f, 0x5, 0x70dd, 0xd1, 0x1ff, 0x5, 0x3, 0x9, 0x2, 0x0, 0x3]}]}]}}]}, 0x478}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c00000000000500060000000000140019"], 0x270}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004"], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

6m18.019482927s ago: executing program 2 (id=59):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)

6m17.492354409s ago: executing program 33 (id=59):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)

6m15.661589469s ago: executing program 4 (id=68):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0xfffffffffffffcb6)
clock_getres(0xfffffffffffffff1, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x2, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000006c0ad4e0cc477198fe1fa9ae2a35772cb608201db3ca6afdd0eb05ab", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_io_uring_setup(0x3476, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f0000000740))
syz_io_uring_setup(0x1082, &(0x7f00000003c0)={0x0, 0xec46, 0x0, 0x3, 0x13d}, &(0x7f00000004c0), &(0x7f0000000380))
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000001000)=ANY=[@ANYBLOB="180300000000000000000000000000001c110000ff277cc5dda28ca7bd283cfd40b95e47f2823733cca7b2897f7b5669b3fffebe2896f20651fbbabe999397926a11aae873b565384e665d8ce1fe59e1aab06207cedb9dd75d03b2562f303199bed1d4cea3d365909368b0332a9dd38e13d1acfee22ee421611cf3cdecf0a0e015661998d4a796ae2c627d5085d1dcf430080ed5dda607c2cd70c6c42c13a917871eae153f3171029e7bfe2d2ea0e63e611d024dbaabbaf1a0274f6c337dae61422752f7ac0afad108e0fc956f7804c843aa9793f2e3af6907a7c6e379499a2005b8cc86c3c03cbe2199", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)

6m15.430267359s ago: executing program 4 (id=70):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)

6m15.260362507s ago: executing program 4 (id=71):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x88}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m14.912707495s ago: executing program 4 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f000000ac40)={0x2020}, 0x2020)

6m14.2130571s ago: executing program 4 (id=76):
syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xa2a1}, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket(0x22, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x145c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

6m13.334156714s ago: executing program 4 (id=81):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x490, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0)

6m12.837904984s ago: executing program 34 (id=81):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x490, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0)

5m12.033432475s ago: executing program 7 (id=319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m10.280980269s ago: executing program 7 (id=322):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)
open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file1\x00', 0x60280, 0x100)
close(r0)

5m9.265833477s ago: executing program 7 (id=327):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0xffe0, 0xf}, {0x4, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c8d5)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000240)={0xffffffff, 0x3, 0x2b, 0x1, 0x8, 0xffffd5c7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="440f20c0350500b800440f22c0c4438dceb56fe057000005056044240000000080ee80ee2402dc190000c744240600000000cc0f011c2424420f38f0e748b87a57bc6a591409330f23d00f21a5f8f8300000040f23f8c33e673e0f01fbfb695895298f6870cedd746544db00b9800000c00f3235008000000f30", 0x7a}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, '\x00', 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

5m7.85979438s ago: executing program 7 (id=330):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5m7.64975949s ago: executing program 7 (id=332):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x719ec197, 0x0, r1, 0x814c, '\x00', 0x0, r1, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)

5m7.031247716s ago: executing program 7 (id=335):
pipe2$watch_queue(0x0, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffff5a, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x9)

5m5.708768884s ago: executing program 35 (id=335):
pipe2$watch_queue(0x0, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffff5a, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x9)

4m56.471203908s ago: executing program 0 (id=386):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408e4}, 0x80)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
write$binfmt_misc(r3, &(0x7f0000000300), 0x4)

4m55.975465598s ago: executing program 0 (id=388):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m55.261756436s ago: executing program 0 (id=391):
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYBLOB="305119cbba3f138f3d499e4a3c94524662cd280ab8ebb3d25bd4"], 0xb0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d61783d301e3030303030307030303030303030303031303030302c73544002001471722f69931021808c48c7546174733d676c6f341acddb091751c7733d676c"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x7c7, 0xb, 0x3, 0xa5, 0x30e, 0x7, 0x1}, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x1, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m53.916090383s ago: executing program 0 (id=396):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
socket(0x2a, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0)

4m52.38869523s ago: executing program 0 (id=402):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r2}, './file0\x00'})

4m51.391250282s ago: executing program 0 (id=404):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000540)=0x1)

4m36.281332619s ago: executing program 36 (id=404):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000540)=0x1)

2m2.228746898s ago: executing program 5 (id=1030):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f000000a440)={0x0, 0x0, &(0x7f000000a400)={&(0x7f0000009d40)=@deltclass={0x434, 0x29, 0x0, 0x0, 0x0, {}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404}]}}]}, 0x434}}, 0x0)
recvmmsg(r1, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000080)=""/44, 0x2c}], 0x2}}], 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200ffff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m1.095222251s ago: executing program 5 (id=1031):
open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}})
truncate(&(0x7f0000000080)='./file0\x00', 0x101000)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)

2m0.361740802s ago: executing program 5 (id=1035):
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x8004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)

1m59.208519736s ago: executing program 5 (id=1039):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M'])
chdir(&(0x7f0000000140)='./file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)

1m58.261906759s ago: executing program 5 (id=1043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008000000060000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000001000000000"], 0x48)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x658, 0x0, 0x208, 0xffffffff, 0x0, 0x328, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xf, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @gre_key=0x3, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x4000}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0xffff], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], 0x0, [{}, {}, {0xa}]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8)

1m57.815559908s ago: executing program 5 (id=1048):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0xfffffd0c)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x400000, 0x0)

1m57.642530771s ago: executing program 37 (id=1048):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0xfffffd0c)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x400000, 0x0)

12.649391827s ago: executing program 8 (id=1389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x4000, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x1c, r2, 0x1, 0xa0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0xd8, 0x3, 0x3, 0x1a0b, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100)

11.279249023s ago: executing program 9 (id=1396):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q\x00\x00\x00'], 0x0)

11.018393356s ago: executing program 8 (id=1398):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.62674324s ago: executing program 1 (id=1400):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x5)
r2 = syz_io_uring_setup(0x3430, &(0x7f0000000100)={0x0, 0x4291, 0x10100, 0x0, 0x4002014d}, &(0x7f0000001240)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0xfffffffc, 0x0, 0x12, "0047ba7d82000020000000000000f7ffffff00"})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = syz_open_pts(r1, 0x0)
r7 = dup3(r6, r1, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000))

10.439540149s ago: executing program 1 (id=1401):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5460, 0x2d311110000633fd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x240040d0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000580))
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)

9.430663496s ago: executing program 1 (id=1404):
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_io_uring_setup(0x2293, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x1})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

9.159568163s ago: executing program 9 (id=1405):
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
poll(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220)

8.880029891s ago: executing program 1 (id=1407):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x9)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

8.181201219s ago: executing program 9 (id=1408):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000240)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f9c97003d0f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000001580)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000"], 0x190)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x2})

8.091592199s ago: executing program 3 (id=1409):
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

7.748856251s ago: executing program 6 (id=1410):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x1018d41, 0x0)

6.770372278s ago: executing program 6 (id=1411):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r4, &(0x7f0000000040)=""/148, 0xffffff96)

6.740302316s ago: executing program 3 (id=1412):
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x80002, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = semget$private(0x0, 0x4000000009, 0x0)
semop(r1, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x44689c, &(0x7f0000000300)=ANY=[])
syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x2a840)

6.695469579s ago: executing program 9 (id=1413):
r0 = socket(0x23, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
listen(r0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000840)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000080}], 0x1, 0x400c040)

6.127497364s ago: executing program 8 (id=1414):
creat(&(0x7f0000000240)='./file0\x00', 0x148)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)
utime(&(0x7f0000003000)='./file0\x00', 0x0)

4.476750263s ago: executing program 6 (id=1415):
socket$isdn_base(0x22, 0x3, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

4.475985276s ago: executing program 1 (id=1416):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x60800, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0x66e}], 0x1, 0x2, 0x0)
r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0)
read$watch_queue(r3, &(0x7f0000000740)=""/251, 0xfb)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x11)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xffffffffffffffff)

4.475285038s ago: executing program 3 (id=1417):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff4ba61f2be82db1af0000000000", 0x18)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0)

3.516806952s ago: executing program 3 (id=1418):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
write$cgroup_int(r0, &(0x7f0000000340)=0x4, 0x12)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00'}, 0x18)

3.279502616s ago: executing program 9 (id=1419):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0))
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0xfffffffd)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0)

3.245478035s ago: executing program 1 (id=1420):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x400002, 0x55)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

3.180760999s ago: executing program 6 (id=1421):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0xc00, &(0x7f0000000140)='grpquota')

1.900638486s ago: executing program 3 (id=1422):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x8, 0x4, 0x288d, 0x7fffffffffffffff, 0x8, 0x9, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.898602053s ago: executing program 8 (id=1423):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x55, 0x0, 0x400000, 0x200b, 0x0, @void, @value}, 0x28)
mmap(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0xf, 0x810, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
bind$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r1, &(0x7f0000000280)="4103092ccffb140001020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a8", 0x3d, 0x800, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x80}]}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0)
mq_getsetattr(r3, 0x0, &(0x7f00000001c0))

1.779329244s ago: executing program 6 (id=1424):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
inotify_init1(0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)

1.306737666s ago: executing program 8 (id=1425):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x14, 0x38, 0x1, 0x4, [{@rand_addr=0x64010102, 0xf}, {@loopback, 0x4}]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
write(0xffffffffffffffff, &(0x7f0000000000)="240000001e00ff3bd90ea6000008000f00160400"/30, 0x1e)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

860.254942ms ago: executing program 3 (id=1426):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x6, "cc17fc47a9ae"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="20160b0000"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(0xfffffffffffffffe, 0x3, 0x101000)
syz_usb_disconnect(0xffffffffffffffff)

614.366273ms ago: executing program 9 (id=1427):
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00a3bcfd45cf0c2e728dc36f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

126.408566ms ago: executing program 8 (id=1428):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
fcntl$setstatus(r0, 0x4, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)

0s ago: executing program 6 (id=1429):
unshare(0x400)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x423f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

fc0000
[  148.464385][    T8] usb 6-1: Using ep0 maxpacket: 8
[  148.479794][   T29] audit: type=1326 audit(1734762390.294:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz.6.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  148.479935][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  148.530083][   T29] audit: type=1326 audit(1734762390.294:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz.6.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  148.564617][    T8] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  148.574242][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.612462][   T29] audit: type=1326 audit(1734762390.294:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz.6.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  148.617805][    T8] usb 6-1: config 0 descriptor??
[  148.662596][   T29] audit: type=1326 audit(1734762390.304:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz.6.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  148.686184][   T29] audit: type=1326 audit(1734762390.304:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz.6.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  148.910641][    T8] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  148.984283][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'.
[  149.046267][ T1160] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.274038][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'.
[  149.283367][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'.
[  149.971897][ T7455] team1: Mode "" not found
[  150.184303][ T5907] usb 6-1: USB disconnect, device number 4
[  150.459395][ T1160] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.476447][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.486107][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.506396][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.533367][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.546748][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.554107][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.224390][ T1160] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.413660][ T1160] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.660633][ T1160] bridge_slave_1: left allmulticast mode
[  151.672440][ T1160] bridge_slave_1: left promiscuous mode
[  151.680983][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.741845][ T1160] bridge_slave_0: left allmulticast mode
[  151.748195][ T1160] bridge_slave_0: left promiscuous mode
[  151.754181][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.870068][ T7496] netlink: 'syz.6.348': attribute type 10 has an invalid length.
[  151.930293][ T7508] netlink: 'syz.6.348': attribute type 10 has an invalid length.
[  152.291823][ T7521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.355'.
[  152.305248][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.355'.
[  152.522329][ T1205] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  152.612629][   T54] Bluetooth: hci2: command tx timeout
[  152.672979][ T1205] usb 2-1: Using ep0 maxpacket: 16
[  152.691355][ T1205] usb 2-1: config 0 interface 0 has no altsetting 0
[  152.698577][ T1205] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  152.725663][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.776564][ T1205] usb 2-1: config 0 descriptor??
[  152.850831][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.874531][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.897561][ T1160] bond0 (unregistering): Released all slaves
[  152.925000][ T7468] chnl_net:caif_netlink_parms(): no params data found
[  152.947780][ T7496] team0: Port device netdevsim0 added
[  152.986707][ T7508] team0: Port device netdevsim0 removed
[  153.000332][ T7508] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  153.230946][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.242520][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.250330][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.259064][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.267318][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.275121][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.282659][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.290219][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x2
[  153.297778][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.305490][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.322311][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.333354][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.351487][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.359432][ T1205] steelseries 0003:1038:1410.0001: unknown main item tag 0x0
[  153.375808][ T1205] steelseries 0003:1038:1410.0001: unexpected long global item
[  153.394399][ T1205] steelseries 0003:1038:1410.0001: parse failed
[  153.400794][ T1205] steelseries 0003:1038:1410.0001: probe with driver steelseries failed with error -22
[  153.451319][ T1205] usb 2-1: USB disconnect, device number 7
[  153.564358][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.586577][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.603261][ T7468] bridge_slave_0: entered allmulticast mode
[  153.620573][ T7468] bridge_slave_0: entered promiscuous mode
[  153.716933][ T1160] hsr_slave_0: left promiscuous mode
[  153.737164][ T1160] hsr_slave_1: left promiscuous mode
[  153.749421][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.769106][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.794454][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.812834][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.872014][ T1160] veth1_macvtap: left promiscuous mode
[  153.888911][ T1160] veth0_macvtap: left promiscuous mode
[  153.916465][ T1160] veth1_vlan: left promiscuous mode
[  153.925400][ T1160] veth0_vlan: left promiscuous mode
[  154.644923][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  154.714650][   T54] Bluetooth: hci2: command tx timeout
[  154.848843][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  154.887475][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  154.914952][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[  154.936893][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[  154.959371][ T5907] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  154.969390][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.977758][ T5907] usb 1-1: Product: syz
[  154.982062][ T5907] usb 1-1: Manufacturer: syz
[  154.986839][ T5907] usb 1-1: SerialNumber: syz
[  155.002986][ T5907] usb 1-1: config 0 descriptor??
[  155.019604][ T7578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  155.073794][ T1160] team0 (unregistering): Port device team_slave_1 removed
[  155.118710][ T1160] team0 (unregistering): Port device team_slave_0 removed
[  155.745054][   T51] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  155.912814][   T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.932514][   T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.942499][   T51] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  155.951671][   T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.974861][   T51] usb 6-1: config 0 descriptor??
[  156.435939][ T7594] netlink: 'syz.5.369': attribute type 1 has an invalid length.
[  156.594281][   T51] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  156.601610][   T51] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  156.653959][   T51] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0
[  156.701963][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.722629][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.729899][ T7468] bridge_slave_1: entered allmulticast mode
[  156.772448][   T54] Bluetooth: hci2: command tx timeout
[  156.786344][ T7468] bridge_slave_1: entered promiscuous mode
[  156.936456][ T7594] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.041906][ T7608] 8021q: adding VLAN 0 to HW filter on device batadv1
[  157.051524][ T7608] bond1: (slave batadv1): making interface the new active one
[  157.081598][ T7608] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  157.114711][   T51] usb 6-1: USB disconnect, device number 5
[  157.258735][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.319225][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.475295][ T7468] team0: Port device team_slave_0 added
[  157.488215][ T7468] team0: Port device team_slave_1 added
[  157.655477][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.688935][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.738802][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.816001][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.840900][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.874540][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  157.887585][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.925320][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'.
[  158.063930][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  158.072601][ T7641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.378'.
[  158.083972][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  158.095568][ T5826] Bluetooth: hci0: hardware error 0x00
[  158.829442][   T54] block nbd0: Receive control failed (result -107)
[  158.857207][ T7468] hsr_slave_0: entered promiscuous mode
[  158.872754][   T54] Bluetooth: hci2: command tx timeout
[  158.981000][ T7468] hsr_slave_1: entered promiscuous mode
[  160.269309][ T7681] netlink: 'syz.1.387': attribute type 4 has an invalid length.
[  160.311810][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  160.422397][ T7681] netlink: 'syz.1.387': attribute type 4 has an invalid length.
[  160.520798][ T7688] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  160.569098][ T7468] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  160.621594][ T7468] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  160.649734][ T7468] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  160.670741][ T7468] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  161.136406][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.426348][ T7707] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.911686][ T7707] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.060472][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  162.060539][   T29] audit: type=1800 audit(1734762404.124:49): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.395" name="bus" dev="overlay" ino=565 res=0 errno=0
[  162.099977][ T7726] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.225807][ T7707] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.293588][ T7468] 8021q: adding VLAN 0 to HW filter on device team0
[  162.320977][ T7726] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.504006][ T7707] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.548083][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.555309][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.605362][ T7726] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.714713][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.721896][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.760801][ T7726] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.871795][ T7707] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.966218][ T7707] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.011326][ T7707] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.071637][ T7707] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.149480][ T7726] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.216737][ T7726] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.291895][ T7726] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.420300][ T7726] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.470613][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.501597][ T7777] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  166.581332][   T29] audit: type=1326 audit(1734762408.644:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  166.617796][ T7468] veth0_vlan: entered promiscuous mode
[  166.654903][ T7796] fuse: Unknown parameter '0x0000000000000004'
[  166.693609][ T7468] veth1_vlan: entered promiscuous mode
[  166.713350][   T29] audit: type=1326 audit(1734762408.694:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  166.891741][ T7468] veth0_macvtap: entered promiscuous mode
[  166.912278][   T29] audit: type=1326 audit(1734762408.694:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  166.985647][ T7468] veth1_macvtap: entered promiscuous mode
[  167.019616][   T29] audit: type=1326 audit(1734762408.694:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.044361][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.069729][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.109757][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.132916][   T29] audit: type=1326 audit(1734762408.704:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.158208][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.168777][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.180411][   T29] audit: type=1326 audit(1734762408.704:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.202898][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.229485][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.237295][   T29] audit: type=1326 audit(1734762408.704:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.264012][   T29] audit: type=1326 audit(1734762408.704:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.287798][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.299603][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.310205][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.321784][   T29] audit: type=1326 audit(1734762408.704:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.344177][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.370422][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.382997][   T29] audit: type=1326 audit(1734762408.704:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.390762][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.442884][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.458399][   T29] audit: type=1326 audit(1734762408.704:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.493688][ T7468] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.531308][ T7468] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.532267][   T29] audit: type=1326 audit(1734762408.714:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.569150][ T7468] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.606627][ T7468] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.671751][   T29] audit: type=1326 audit(1734762408.714:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  167.792324][   T29] audit: type=1326 audit(1734762408.724:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f9fb7cce7 code=0x7ffc0000
[  167.931116][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.980966][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.074298][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.094302][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.108981][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.420'.
[  171.122818][ T7860] unsupported nlmsg_type 40
[  171.572543][ T5857] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  171.752399][ T5857] usb 6-1: Using ep0 maxpacket: 8
[  171.835126][ T5857] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  171.853956][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.862008][ T5857] usb 6-1: Product: syz
[  171.868514][ T7884] netlink: 'syz.6.427': attribute type 3 has an invalid length.
[  171.896310][ T7884] netlink: 'syz.6.427': attribute type 3 has an invalid length.
[  171.909444][ T5857] usb 6-1: Manufacturer: syz
[  171.911495][ T7884] bridge_slave_0: left allmulticast mode
[  171.930491][ T5857] usb 6-1: SerialNumber: syz
[  171.931570][ T7884] bridge_slave_0: left promiscuous mode
[  171.942270][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.962826][ T5857] usb 6-1: config 0 descriptor??
[  172.006076][ T7884] bridge_slave_1: left allmulticast mode
[  172.020651][ T7884] bridge_slave_1: left promiscuous mode
[  172.052899][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.087695][ T7884] bond0: (slave bond_slave_0): Releasing backup interface
[  172.143042][ T7884] bond0: (slave bond_slave_1): Releasing backup interface
[  172.188536][ T5857] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  172.198166][ T7884] team0: Port device team_slave_0 removed
[  172.222401][ T7884] team0: Port device team_slave_1 removed
[  172.242755][ T7884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.283441][ T7884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.320871][ T7884] bond0: (slave netdevsim0): Releasing backup interface
[  173.024786][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  173.024805][   T29] audit: type=1800 audit(1734762415.094:83): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.429" name="/" dev="fuse" ino=0 res=0 errno=0
[  173.649707][ T5857] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  173.913139][ T5857] usb 6-1: USB disconnect, device number 6
[  174.434209][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.6.436'.
[  175.688942][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.439'.
[  175.713895][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.439'.
[  175.805391][ T5907] iguanair 1-1:0.0: failed to get version
[  175.822409][ T5907] iguanair 1-1:0.0: probe with driver iguanair failed with error -110
[  175.841264][ T5907] usb 1-1: USB disconnect, device number 3
[  176.228138][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.8.442'.
[  176.393129][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.8.444'.
[  176.402342][ T7975] bridge_slave_1: left allmulticast mode
[  176.422306][ T7975] bridge_slave_1: left promiscuous mode
[  176.439178][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.489203][ T7975] bridge_slave_0: left allmulticast mode
[  176.503031][ T7975] bridge_slave_0: left promiscuous mode
[  176.528242][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.145527][ T7999] binder: 7998:7999 ioctl c0306201 20000680 returned -14
[  177.172300][   T94] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  177.510591][   T94] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.679278][   T94] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  177.873110][   T94] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.929520][   T94] usb 2-1: config 0 descriptor??
[  178.728700][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.157766][   T94] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  179.176093][   T94] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input9
[  179.192661][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.411269][   T94] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  179.516810][ T5857] usb 2-1: USB disconnect, device number 8
[  180.154055][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  180.159811][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.461'.
[  180.191603][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  180.240509][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  180.331113][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  180.339196][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  180.346748][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  180.804297][ T8074] binder: BINDER_SET_CONTEXT_MGR already set
[  180.810706][ T8074] binder: 8072:8074 ioctl 4018620d 200001c0 returned -16
[  180.868857][ T8043] chnl_net:caif_netlink_parms(): no params data found
[  180.904481][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  180.952506][    T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  180.989750][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.998332][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.007149][ T8043] bridge_slave_0: entered allmulticast mode
[  181.016023][ T8043] bridge_slave_0: entered promiscuous mode
[  181.024947][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.032376][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  181.072367][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.079764][ T8043] bridge_slave_1: entered allmulticast mode
[  181.139441][ T8043] bridge_slave_1: entered promiscuous mode
[  181.158372][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.169869][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.205451][ T5867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.215764][ T5867] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.225162][    T8] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  181.244240][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.254536][ T5867] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  181.272241][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  181.283979][    T8] usb 7-1: config 0 descriptor??
[  181.309274][ T5867] usb 6-1: SerialNumber: syz
[  181.399843][ T8043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.542085][ T1098] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.811625][ T5867] usb 6-1: 0:2 : does not exist
[  181.916829][ T8043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.151200][    T8] usb 7-1: string descriptor 0 read error: -71
[  182.217153][ T1098] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.290239][    T8] usb 7-1: Max retries (5) exceeded reading string descriptor 200
[  182.319211][ T5867] usb 6-1: USB disconnect, device number 7
[  182.325217][    T8] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32
[  182.408432][    T8] usb 7-1: USB disconnect, device number 2
[  182.473676][   T54] Bluetooth: hci5: command tx timeout
[  182.667208][ T1098] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.750134][ T8043] team0: Port device team_slave_0 added
[  182.776648][ T8068] udevd[8068]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.796360][ T8043] team0: Port device team_slave_1 added
[  182.863503][ T1098] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.962321][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  182.981840][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.991384][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.027654][ T8043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.076467][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.088914][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.130463][ T8043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.142379][    T8] usb 9-1: Using ep0 maxpacket: 8
[  183.215834][    T8] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  183.226247][    T8] usb 9-1: config 1 has no interface number 1
[  183.232543][    T8] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  183.245429][    T8] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.338043][    T8] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.357493][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.388986][ T8043] hsr_slave_0: entered promiscuous mode
[  183.427314][ T1205] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  183.475699][    T8] usb 9-1: Product: syz
[  183.482412][    T8] usb 9-1: Manufacturer: syz
[  183.487064][    T8] usb 9-1: SerialNumber: syz
[  183.919363][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.930707][ T1205] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  183.940461][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.426636][ T1205] usb 6-1: config 0 descriptor??
[  184.449291][ T8043] hsr_slave_1: entered promiscuous mode
[  184.472687][ T8043] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.501192][ T8043] Cannot create hsr debugfs directory
[  184.538552][ T5826] Bluetooth: hci5: command tx timeout
[  184.576610][ T1098] bridge_slave_1: left allmulticast mode
[  184.582718][ T1098] bridge_slave_1: left promiscuous mode
[  184.591119][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.050233][ T1205] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  185.111565][ T1098] bridge_slave_0: left allmulticast mode
[  185.174797][ T1098] bridge_slave_0: left promiscuous mode
[  185.181757][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.189663][ T1205] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0005/input/input10
[  185.195877][    T8] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  185.213262][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.222883][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.276930][    T8] usb 9-1: USB disconnect, device number 2
[  185.402498][ T1205] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  185.494428][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  185.513675][ T5907] usb 6-1: USB disconnect, device number 8
[  185.733428][ T1098] bond1: left allmulticast mode
[  185.748641][ T1098] bridge1: left allmulticast mode
[  185.768618][ T1098] bond1: left promiscuous mode
[  185.776592][ T1098] bridge1: left promiscuous mode
[  186.223765][ T1098] bond1 (unregistering): (slave bridge1): Releasing active interface
[  186.514992][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.529166][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.538172][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[  186.560764][ T1098] bond0 (unregistering): Released all slaves
[  186.618984][   T54] Bluetooth: hci5: command tx timeout
[  186.735408][ T1098] bond1 (unregistering): Released all slaves
[  187.111743][ T8173] warning: `syz.6.486' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  188.144865][ T1098] hsr_slave_0: left promiscuous mode
[  188.303139][ T1098] hsr_slave_1: left promiscuous mode
[  188.319222][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.372298][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.419178][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.427240][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.452547][ T1098] veth1_macvtap: left promiscuous mode
[  188.458125][ T1098] veth0_macvtap: left promiscuous mode
[  188.463865][ T1098] veth1_vlan: left promiscuous mode
[  188.469206][ T1098] veth0_vlan: left promiscuous mode
[  188.662329][ T1205] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  188.693148][   T54] Bluetooth: hci5: command tx timeout
[  188.865898][ T1205] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.878016][ T1205] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  188.904365][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.941055][ T1205] usb 9-1: config 0 descriptor??
[  189.342381][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  189.392030][ T1205] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  189.410901][ T1205] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0006/input/input11
[  189.512641][ T5868] usb 6-1: Using ep0 maxpacket: 16
[  189.524629][ T5868] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.568166][ T5868] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.588071][ T1205] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0
[  189.612875][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.631470][ T5868] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  189.660364][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.672228][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0
[  189.678959][ T5868] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  189.732423][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.760457][ T5868] usb 6-1: config 0 descriptor??
[  189.814451][ T1098] team0 (unregistering): Port device team_slave_1 removed
[  189.958708][ T1205] usb 9-1: USB disconnect, device number 3
[  190.021774][ T1098] team0 (unregistering): Port device team_slave_0 removed
[  190.306075][ T5868] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5010.0007/input/input12
[  190.492160][ T5868] kye 0003:0458:5010.0007: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0
[  190.522688][ T5868] usb 6-1: USB disconnect, device number 9
[  191.162348][ T5868] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  191.364572][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.375822][ T5868] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.412050][ T5868] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.443274][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.452106][ T5868] usb 7-1: Product: syz
[  191.456858][ T5868] usb 7-1: Manufacturer: syz
[  191.462145][ T5868] usb 7-1: SerialNumber: syz
[  191.680930][ T5868] usb 7-1: 0:2 : does not exist
[  191.700230][ T8043] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  191.844538][ T5868] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  191.866504][ T8043] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  191.896053][ T5868] usb 7-1: USB disconnect, device number 3
[  191.909633][ T8043] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  192.002579][ T8043] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  192.204207][ T8270] udevd[8270]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.286883][ T8043] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.303847][ T8043] 8021q: adding VLAN 0 to HW filter on device team0
[  192.333688][ T8043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.344412][ T8043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.372106][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.379294][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.389357][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.396526][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.794090][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  193.770553][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.907621][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.920119][ T5868] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  194.016008][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.171421][ T5868] usb 7-1: config 0 descriptor??
[  194.617356][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.623925][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.823792][ T5868] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  194.889065][ T5868] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0008/input/input13
[  194.910101][ T8043] veth0_vlan: entered promiscuous mode
[  194.969019][ T8043] veth1_vlan: entered promiscuous mode
[  195.020170][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.070322][ T5868] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  195.085368][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.115639][ T8043] veth0_macvtap: entered promiscuous mode
[  195.166651][ T8043] veth1_macvtap: entered promiscuous mode
[  195.234696][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.275050][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.311308][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.336914][    T8] usb 7-1: USB disconnect, device number 4
[  195.340014][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.388933][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.417601][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.445885][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.489414][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.530735][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.553567][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.582495][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.602264][ T8043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.622563][ T8043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.642401][   T94] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  195.643485][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.697752][ T8043] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.722255][ T8043] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.732851][ T8043] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.742466][ T8043] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.834707][   T94] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.854682][   T94] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.854785][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.872907][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.912027][   T94] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.945812][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.950309][   T94] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.991131][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.998618][   T94] usb 9-1: Product: syz
[  195.998704][   T94] usb 9-1: Manufacturer: syz
[  195.998721][   T94] usb 9-1: SerialNumber: syz
[  196.279543][   T94] usb 9-1: 0:2 : does not exist
[  196.310277][   T94] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  196.426957][   T94] usb 9-1: USB disconnect, device number 4
[  197.067264][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.110169][ T8366] netlink: 92 bytes leftover after parsing attributes in process `syz.5.527'.
[  197.343638][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'.
[  197.402845][ T8373] bridge0: port 1(bridge_slave_1) entered blocking state
[  197.442149][ T8373] bridge0: port 1(bridge_slave_1) entered disabled state
[  197.940806][ T8373] bridge_slave_1: entered allmulticast mode
[  197.969425][ T8373] bridge_slave_1: entered promiscuous mode
[  198.147023][ T5907] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  198.878301][ T5907] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.960119][ T5907] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  198.992388][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.153341][ T5907] usb 9-1: config 0 descriptor??
[  199.306640][ T5907] pwc: Askey VC010 type 2 USB webcam detected.
[  199.922307][ T8421] binder: BINDER_SET_CONTEXT_MGR already set
[  199.928497][ T8421] binder: 8420:8421 ioctl 4018620d 200002c0 returned -16
[  200.602437][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00
[  200.770237][ T5907] pwc: recv_control_msg error -32 req 02 val 2700
[  200.982126][ T8432] sit1: entered promiscuous mode
[  201.009832][ T8432] sit1: entered allmulticast mode
[  201.086656][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00
[  201.230695][ T5907] pwc: recv_control_msg error -32 req 04 val 1000
[  201.288715][ T5907] pwc: recv_control_msg error -32 req 04 val 1300
[  201.546364][ T5907] pwc: recv_control_msg error -32 req 04 val 1400
[  201.654269][ T5907] pwc: recv_control_msg error -32 req 02 val 2000
[  202.020221][ T5907] pwc: recv_control_msg error -32 req 02 val 2100
[  202.254292][ T5907] pwc: recv_control_msg error -71 req 02 val 2500
[  202.274234][ T5907] pwc: recv_control_msg error -71 req 02 val 2400
[  202.309076][ T5907] pwc: recv_control_msg error -71 req 02 val 2600
[  202.320872][ T5907] pwc: recv_control_msg error -71 req 02 val 2900
[  202.338785][ T5907] pwc: recv_control_msg error -71 req 02 val 2800
[  202.351997][ T5907] pwc: recv_control_msg error -71 req 04 val 1100
[  202.368464][ T5907] pwc: recv_control_msg error -71 req 04 val 1200
[  202.503713][ T5907] pwc: Registered as video103.
[  202.509960][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input14
[  203.422598][ T5907] usb 9-1: USB disconnect, device number 5
[  203.474260][ T8463] netlink: 36 bytes leftover after parsing attributes in process `syz.5.548'.
[  203.515141][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.548'.
[  203.538307][ T8463] netlink: 36 bytes leftover after parsing attributes in process `syz.5.548'.
[  203.582847][ T8463] netlink: 36 bytes leftover after parsing attributes in process `syz.5.548'.
[  206.762495][ T5900] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  207.484273][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.494595][ T5900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  207.740453][ T5900] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  207.762493][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.770502][ T5900] usb 7-1: Product: syz
[  207.786818][ T5900] usb 7-1: Manufacturer: syz
[  207.791439][ T5900] usb 7-1: SerialNumber: syz
[  208.374967][ T5900] usb 7-1: 0:2 : does not exist
[  208.387122][ T5900] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  208.436058][ T5900] usb 7-1: USB disconnect, device number 5
[  208.673751][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.319019][ T8552] netlink: 4093 bytes leftover after parsing attributes in process `syz.8.574'.
[  211.075345][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'.
[  211.088834][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'.
[  211.188286][ T8574] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  211.198274][ T8574] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  211.389426][ T8582] binder: transaction release 81 bad handle 1, ret = -22
[  212.405147][ T8595] usb usb4: usbfs: process 8595 (syz.5.585) did not claim interface 0 before use
[  212.488325][   T29] audit: type=1326 audit(1734762454.554:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  212.526577][   T29] audit: type=1326 audit(1734762454.554:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  212.576867][   T29] audit: type=1326 audit(1734762454.554:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  212.605473][    T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  212.642353][   T29] audit: type=1326 audit(1734762454.554:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  212.692438][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'.
[  212.696781][   T29] audit: type=1326 audit(1734762454.554:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  212.773301][   T29] audit: type=1326 audit(1734762454.554:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  212.812375][    T8] usb 7-1: Using ep0 maxpacket: 8
[  212.831107][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  212.837793][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  212.844337][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  212.849921][    T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  212.850761][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  212.866936][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  212.874852][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  212.882808][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  212.890336][    T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  212.890628][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  212.908349][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  212.916261][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  212.921151][   T29] audit: type=1326 audit(1734762454.574:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  212.924186][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  212.924207][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  212.924259][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  212.960342][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  212.961231][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  212.986864][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  212.994770][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.002742][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.008504][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  213.010596][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.010685][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.036357][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.044336][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.046383][   T29] audit: type=1326 audit(1734762454.574:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  213.052164][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.052306][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.052324][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.052371][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.052385][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.052431][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.079174][    T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.081495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.081581][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.136191][    T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  213.141520][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.141632][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.174241][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.182223][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.190071][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.198047][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.200157][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.205988][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.206074][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.206092][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.206145][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.206161][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.206211][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.206225][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.206283][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.228347][   T29] audit: type=1326 audit(1734762454.574:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  213.229911][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.255849][   T29] audit: type=1326 audit(1734762454.584:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.5.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f6f9fb85d29 code=0x7ffc0000
[  213.261369][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.335738][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.343705][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.351565][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.359523][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.367398][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.375334][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.383224][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.391145][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.399051][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.406994][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.414892][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.422950][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.430787][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  213.438757][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  213.446654][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  214.065116][    T8] usb 7-1: usb_control_msg returned -32
[  214.070775][    T8] usbtmc 7-1:16.0: can't read capabilities
[  216.196761][ T8637] binder_alloc: 8635: pid 8635 spamming oneway? 1 buffers allocated for a total size of 4096
[  216.296158][ T5907] usb 7-1: USB disconnect, device number 6
[  217.496634][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.9.598'.
[  217.682136][    T8] IPVS: starting estimator thread 0...
[  217.773120][ T8670] IPVS: using max 20 ests per chain, 48000 per kthread
[  219.202055][ T8684] serio: Serial port pts0
[  219.552596][ T5907] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  220.473927][ T5907] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  220.485762][ T5907] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  220.498244][ T5907] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[  220.529157][ T5907] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[  220.552001][ T5907] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  220.593136][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.601290][ T5907] usb 10-1: Product: syz
[  220.612281][ T5907] usb 10-1: Manufacturer: syz
[  220.617015][ T5907] usb 10-1: SerialNumber: syz
[  220.678903][ T8722] netlink: 'syz.1.612': attribute type 4 has an invalid length.
[  220.683507][ T5907] usb 10-1: config 0 descriptor??
[  220.703781][ T8688] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  223.242949][ T8761] team0: Mode changed to "loadbalance"
[  223.617306][ T8767] tipc: Started in network mode
[  223.652557][ T8767] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  223.694828][ T8767] tipc: Enabled bearer <eth:team0>, priority 0
[  223.725194][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.622'.
[  224.816178][ T1205] tipc: Node number set to 11578026
[  227.439970][ T8833] Device name cannot be null; rc = [-22]
[  228.530915][ T8844] netlink: 'syz.9.635': attribute type 12 has an invalid length.
[  228.937923][ T8853] vivid-003: disconnect
[  228.948118][ T8845] vivid-003: reconnect
[  229.456088][ T8862] netlink: 'syz.9.642': attribute type 21 has an invalid length.
[  229.560929][ T8862] netlink: 'syz.9.642': attribute type 1 has an invalid length.
[  229.803371][ T8862] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.642'.
[  229.893398][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[  231.550077][ T8923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'.
[  231.572369][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'.
[  231.592329][ T8923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'.
[  231.622455][ T8923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'.
[  232.154441][ T8933] Cannot find del_set index 3 as target
[  232.970076][ T8949] Driver unsupported XDP return value 0 on prog  (id 149) dev N/A, expect packet loss!
[  241.425686][ T5907] iguanair 10-1:0.0: failed to get version
[  241.433260][ T5907] iguanair 10-1:0.0: probe with driver iguanair failed with error -110
[  241.444973][ T5907] usb 10-1: USB disconnect, device number 2
[  243.235759][ T9086] loop7: detected capacity change from 0 to 16384
[  243.305591][ T9089] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.316266][ T9086] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.362555][ T9086] Buffer I/O error on dev loop7, logical block 0, async page read
[  243.394444][ T9086] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  243.432258][ T9086] Buffer I/O error on dev loop7, logical block 0, async page read
[  243.458102][ T9093] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0
[  243.470564][ T9086]  loop7: unable to read partition table
[  243.480593][ T9086] loop_reread_partitions: partition scan of loop7 (K�>�i)��/480���#�	�$q�Z����I�����[�u�@3b������j!5MM�]
z) failed (rc=-5)
[  243.494926][ T9093] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  243.534703][ T9093] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  243.548738][ T9093] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  243.559015][ T9093] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  243.568758][ T9093] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  243.577654][ T9093] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  243.587703][ T9093] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  243.596489][ T9093] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  244.341961][ T9107] netlink: 'syz.6.692': attribute type 1 has an invalid length.
[  244.609772][ T9114] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  244.980637][ T9114] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  248.324492][ T9174] : entered promiscuous mode
[  249.733778][ T9182] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  253.452345][ T5869] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  253.616104][ T5869] usb 6-1: config index 0 descriptor too short (expected 63186, got 210)
[  253.630553][ T5869] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[  253.656231][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.703121][ T5869] usb 6-1: config 0 has no interface number 0
[  253.727748][ T5869] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  253.759883][ T5869] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 208, setting to 64
[  253.788926][ T5869] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  253.805090][ T9237] netfs: Couldn't get user pages (rc=-14)
[  253.822061][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  253.822080][   T29] audit: type=1326 audit(1734762751.883:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.9.720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe430985d29 code=0x0
[  253.852403][ T5869] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  253.872813][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.895569][ T5869] usb 6-1: config 0 descriptor??
[  253.901971][ T9218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  253.989821][ T5869] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  254.161696][   T11] usb 6-1: Failed to submit usb control message: -71
[  254.162014][ T5867] usb 6-1: USB disconnect, device number 10
[  254.168878][   T11] usb 6-1: unable to send the bmi data to the device: -71
[  254.168922][   T11] usb 6-1: unable to get target info from device
[  254.189896][   T11] usb 6-1: could not get target info (-71)
[  254.196975][   T11] usb 6-1: could not probe fw (-71)
[  254.439762][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.8.724'.
[  256.069386][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  256.077730][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  258.252844][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.278347][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.363087][ T9310] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.373138][ T9310] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.382045][ T9310] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.392246][ T9310] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.220684][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.241621][ T9372] syz.1.742 uses obsolete (PF_INET,SOCK_PACKET)
[  259.252667][   T29] audit: type=1800 audit(1734762757.293:102): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.744" name="file1" dev="overlay" ino=12 res=0 errno=0
[  259.406944][ T9372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.742'.
[  259.486563][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.587990][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.826951][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.852901][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.865583][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.876044][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.896303][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.917612][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.948788][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  259.971846][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.122941][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.572522][ T5871] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  260.776750][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.784922][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.792736][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.797626][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.800144][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.818518][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.830457][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.848524][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.882518][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.909069][ T5871] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  260.919522][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.931187][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.944163][ T5871] usb 6-1: config 0 descriptor??
[  260.969850][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  260.999961][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.027976][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.050608][   T54] Bluetooth: hci5: link tx timeout
[  261.057233][   T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.057812][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.072977][ T5826] Bluetooth: hci5: link tx timeout
[  261.078125][ T5826] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.099028][ T5826] Bluetooth: hci5: link tx timeout
[  261.104446][ T5826] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.117658][ T5826] Bluetooth: hci5: link tx timeout
[  261.125674][ T5826] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.152570][ T5826] Bluetooth: hci5: link tx timeout
[  261.157738][ T5826] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.165528][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.173251][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.180673][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.188166][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.195918][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.203649][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.211162][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.218674][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.226351][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.233823][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.241242][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.248759][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.256409][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.263925][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.272016][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.279651][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.287608][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.295136][   T94] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  261.344619][   T94] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  261.804957][ T5871] usbhid 6-1:0.0: can't add hid device: -71
[  261.811545][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  262.002386][ T5871] usb 6-1: USB disconnect, device number 11
[  263.422479][ T5826] Bluetooth: hci5: command 0x0406 tx timeout
[  267.662687][   T94] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  267.827262][   T94] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.848908][   T94] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  267.869317][   T94] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.941436][   T94] usb 10-1: config 0 descriptor??
[  268.384871][   T94] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  268.398091][   T94] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.000A/input/input16
[  268.624180][   T94] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0
[  268.662691][ T9505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.712951][ T9505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.763332][ T9552] netlink: 'syz.5.778': attribute type 4 has an invalid length.
[  269.111613][   T94] usb 10-1: USB disconnect, device number 3
[  272.176728][   T29] audit: type=1804 audit(1734762770.233:103): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.788" name="/newroot/56/bus/file0" dev="overlay" ino=319 res=1 errno=0
[  273.746650][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  274.000301][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.796'.
[  274.040731][ T9646] netlink: 'syz.6.795': attribute type 4 has an invalid length.
[  274.711464][ T9657] VFS: could not find a valid V7 on nullb0.
[  275.714111][ T9670] dns_resolver: Unsupported server list version (0)
[  276.214503][ T9689] uprobe: syz.1.806:9689 failed to unregister, leaking uprobe
[  278.482959][ T9755] dummy0: entered promiscuous mode
[  278.497973][ T9755] macvlan2: entered allmulticast mode
[  278.535749][ T9755] dummy0: entered allmulticast mode
[  278.563751][ T9755] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  278.587771][ T9758] macsec1: entered allmulticast mode
[  278.627557][ T9758] veth0_to_team: entered allmulticast mode
[  278.704376][ T9758] veth0_to_team: left allmulticast mode
[  279.430547][ T9793] netlink: 'syz.6.828': attribute type 10 has an invalid length.
[  279.444540][ T9793] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  279.454141][ T9793] team0: Failed to send options change via netlink (err -105)
[  279.461646][ T9793] team0: Port device netdevsim0 added
[  280.251478][ T9809] binder: 9808:9809 ioctl c0306201 0 returned -14
[  280.259637][ T9809] binder: 9808:9809 ioctl c0306201 0 returned -14
[  283.682313][ T9869] syz.8.844: attempt to access beyond end of device
[  283.682313][ T9869] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0
[  283.719390][ T9869] syz.8.844: attempt to access beyond end of device
[  283.719390][ T9869] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0
[  283.755479][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  283.772679][ T9874] nbd8: detected capacity change from 0 to 20
[  283.793313][ T9869] block nbd8: Send control failed (result -89)
[  283.800182][ T9869] block nbd8: Request send failed, requeueing
[  283.870677][ T5826] block nbd8: Receive control failed (result -32)
[  283.887071][   T10] block nbd8: Dead connection, failed to find a fallback
[  283.897462][ T9884] capability: warning: `syz.6.847' uses 32-bit capabilities (legacy support in use)
[  283.907079][   T10] block nbd8: shutting down sockets
[  283.912960][   T10] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  283.925063][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=0, location=0
[  283.940572][ T5829] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.000200][ T5829] buffer_io_error: 8 callbacks suppressed
[  284.000220][ T5829] Buffer I/O error on dev nbd8, logical block 0, async page read
[  284.054116][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  284.063405][ T5829] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.093416][ T5829] Buffer I/O error on dev nbd8, logical block 1, async page read
[  284.111175][ T9869] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.111884][ T5829] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.132150][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=1, location=1
[  284.138938][ T5829] Buffer I/O error on dev nbd8, logical block 2, async page read
[  284.159749][ T5829] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.199152][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  284.202268][ T5829] Buffer I/O error on dev nbd8, logical block 3, async page read
[  284.238122][ T5829] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.253287][ T5829] Buffer I/O error on dev nbd8, logical block 0, async page read
[  284.261550][ T5829] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.271035][ T5829] Buffer I/O error on dev nbd8, logical block 1, async page read
[  284.279333][ T5829] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.288672][ T5829] Buffer I/O error on dev nbd8, logical block 2, async page read
[  284.297154][ T5829] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.306513][ T5829] Buffer I/O error on dev nbd8, logical block 3, async page read
[  284.317085][ T5829] Buffer I/O error on dev nbd8, logical block 0, async page read
[  284.325365][ T5829] Buffer I/O error on dev nbd8, logical block 1, async page read
[  284.335437][ T5829] ldm_validate_partition_table(): Disk read failed.
[  284.343751][ T5829] Dev nbd8: unable to read RDB block 0
[  284.349823][ T5829]  nbd8: unable to read partition table
[  284.355909][ T5829] nbd8: partition table beyond EOD, truncated
[  284.368975][ T5829] ldm_validate_partition_table(): Disk read failed.
[  284.377230][ T5829] Dev nbd8: unable to read RDB block 0
[  284.383687][ T5829]  nbd8: unable to read partition table
[  284.389431][ T5829] nbd8: partition table beyond EOD, truncated
[  284.417095][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  284.447866][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=4, location=4
[  284.508904][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=3, location=3
[  284.567389][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=2, location=2
[  284.582296][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  284.593148][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  284.613041][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=1, location=1
[  284.622569][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=0, location=0
[  284.631815][ T9869] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  284.645796][ T9869] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[  286.773164][ T9954] syzkaller1: entered promiscuous mode
[  286.778705][ T9954] syzkaller1: entered allmulticast mode
[  287.129688][ T9937] syz.1.860 (9937): drop_caches: 2
[  287.422902][ T5900] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  287.761517][ T9975] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  287.769177][ T9975] UDF-fs: Scanning with blocksize 512 failed
[  287.777284][ T9975] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  287.784938][ T9975] UDF-fs: Scanning with blocksize 1024 failed
[  287.792715][ T9975] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  287.800252][ T9975] UDF-fs: Scanning with blocksize 2048 failed
[  287.807977][ T9975] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  287.816174][ T9975] UDF-fs: Scanning with blocksize 4096 failed
[  288.388136][ T5900] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  288.397539][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.425114][ T5900] usb 9-1: Product: syz
[  288.435936][ T5900] usb 9-1: Manufacturer: syz
[  288.450902][ T5900] usb 9-1: SerialNumber: syz
[  288.477178][ T5900] usb 9-1: config 0 descriptor??
[  288.707439][ T5900] hso 9-1:0.0: Failed to find BULK IN ep
[  288.729277][ T5900] usb-storage 9-1:0.0: USB Mass Storage device detected
[  288.752026][ T9998] bridge_slave_0: left allmulticast mode
[  288.778534][ T9998] bridge_slave_0: left promiscuous mode
[  288.784925][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.882577][ T9998] bridge_slave_1: left allmulticast mode
[  288.900751][ T9998] bridge_slave_1: left promiscuous mode
[  288.925084][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.948698][ T5900] usb 9-1: USB disconnect, device number 6
[  288.976570][ T9998] bond0: (slave bond_slave_0): Releasing backup interface
[  289.016570][ T9998] bond0: (slave bond_slave_1): Releasing backup interface
[  289.088323][ T9998] team0: Port device team_slave_0 removed
[  289.131264][ T9998] team0: Port device team_slave_1 removed
[  289.144045][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.151977][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.172120][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.183983][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.649025][T10031] team0: Port device netdevsim0 removed
[  290.694640][T10031] bond1: (slave veth3): Releasing backup interface
[  290.701306][T10031] bond1: (slave veth3): the permanent HWaddr of slave - 16:42:3a:bb:7b:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  291.070053][T10031] bond1: (slave veth5): Releasing backup interface
[  292.701908][T10055] dvmrp0: entered allmulticast mode
[  292.806233][T10055] pimreg: entered allmulticast mode
[  292.921817][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.030533][T10074] netlink: 48 bytes leftover after parsing attributes in process `syz.9.883'.
[  293.053313][T10055] batadv_slave_1: entered promiscuous mode
[  296.249227][T10113] netlink: 64 bytes leftover after parsing attributes in process `syz.6.900'.
[  298.212730][ T5824] block nbd5: Receive control failed (result -32)
[  298.212859][ T5826] block nbd5: Receive control failed (result -32)
[  298.266842][T10128] block nbd5: shutting down sockets
[  300.378271][   T51] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  300.548329][T10185] netlink: 140 bytes leftover after parsing attributes in process `syz.1.913'.
[  300.605243][   T51] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  300.641960][   T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.798305][   T51] usb 7-1: config 0 descriptor??
[  300.974184][   T51] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  301.385035][T10197] netlink: 48 bytes leftover after parsing attributes in process `syz.5.914'.
[  301.947290][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.124041][   T51] usb 7-1: USB disconnect, device number 7
[  304.234842][T10250] [U] 
[  304.250033][T10250] [U] 
[  304.257776][T10250] [U] �B�-LRJ[��Ć��ќ6�}�%�4̾	��H����@K��-�Y�LE��U�������@��F���%PEZE,���9F��*�
[  304.270352][T10250] [U] CW����* �9J�Q�#E��SW���C��V�1����!�	��GP�X
[  304.280029][T10250] [U] N%�9���C�_��Nʅ�BC��$���4�(���
[  304.299362][T10250] [U] H� Q�؛T��O�R�I#ı�TNBS_RЬ���ƫ�
:�؀�ɦT�ȯ��0�������ÏWڙ_[HN%
[  304.311838][T10250] [U] Ϡ����4�RЛ���<)�6JG؃��K�^�R\
[  304.319196][T10250] [U] 7�R:�J37�
[  304.337058][T10250] [U] Y�P�<��ԅ�U��
H�3ư-�̤��\PQBX�!Q6���SO'}��[���P5O�>�D��֎Y�J>|H0=�ԷT�X��Z�Y֦ʢ
Ě4��IǢ�5AZ��~ZA�~�K�^�TG�S�J�I:�����OD!M2K�W��R>ƈΗKC?X�8��H��*�@QEۻ�U	��.J9�ȓ~�{��`���'R)�-�Ǭ��=5��֝JLY �C�B��;+LP��,F�N����Y�%�3�P���&�)��][�ȋ4�L�ö��!�J�>	��
[  304.367476][T10250] [U] �.”C�֯��EJ�J
�@�K�J�605RXU�TT�O�&�X�O��֕�\��&�����N
%Y����17�6`��I�W
[  304.389797][T10250] [U] ���M<@N��KJ(��6)�)�V��LR�
[  304.402270][T10250] [U] >YG��Z�?��`�O�M�X؍Ӈ�"������9+��DE���{�Ō$~B�YD�UME�!X�ݛA��AU�}J��£2N%MB�Q���
[  304.444710][T10250] [U] �WV���W�@HZ�=�(��E��J�~�OS@��B�H�:"����!�JI��UJ=��)ΎU��	G����Ԗ=Y=�K�AD��
R�����:=�S����AX���X
[  304.513243][T10250] [U] BIޙE��}�ET�@�3�(� ����V����{�κ��~�UK+�{3T��$ƻ.�N[8S�ʇ��""�ʔ̺�]R�G�5
[  304.525325][T10250] [U] V�{ը�VNB>DM��T���Q�T�
����
[  304.550402][T10250] [U] G�*|�9ٺ�ņ�
[  304.558557][T10250] [U] G��MIU�E!��T
ό*ߐ�8A7I5�-|��6LK
[  304.578918][T10250] [U] Nū�D���	��S}R��B��Y�W<����C�����H�\�F��D.�����F�PK�ϋ,���C�ڜ.�;
��EY��K��]Z>��I����OQ&
O������,P��]�,7͛��U���I���
[  304.606518][T10250] [U] ��	$�L�U2��F_3�+|NW�µZ�EǗ�P1W~���N�(�O͝��8�D�	�S��CDʮF�65�Z�G�R�ް�{���T���K�"@�����:�5}G�B��DѸ��\K�
[  304.628933][T10250] [U] ����Y��ҟ8�4�4N<;
[  304.646760][T10250] [U] ���U�I�7X#E�4VML��ȋ���G͔�A��)-���(�N̗N����L#�)׌SU��6�
[  304.661837][T10250] [U] )�<��E?�A��Uܤ�9��%]��DCC�E+L<'T��1Kȅ��3��.ɻ����WS������ZY�ϼ9I>����
]�Ȝ}{�
/`�ܿ5'�E�	41�TNAX߿ʯ�ϭQ��ëI T�%�G�7L~�B�S
[  304.678336][T10250] [U] �͢���
[  304.697650][T10250] [U] Z��U�Ī�4��&˙�E~�8E�σ1��L{ȨGV�Y$PN�O4M���*F�`��A��T��M0?*I�#;�Ѥ+4V
���GA
�ݬ�%H��[�A�YX)LG]F ��H�|�ZV�E�/�ϧ1�7Ǭ�-ǽ��H�O+��^�)8�&E�@A8G˅�-�WR��S��-V�-ұ�O>�ŝQ���#9�UA�H�)F������SA֙�I�N��Z@�C���>K�L�VD^1�)�M$/��Є78..��Q���A�|��Ȧ)�9�">D>E��#I��`\�|{�U�FH.. �EM�W}]5��-,ŢRK}�F��Q���C�O*�P������N�F��
[  304.732161][T10250] [U] ����
[  304.741508][T10250] [U] T�0ԝ�*�հ�
�XA����ɣ�A4W�K����C]X����]�L���=�
[  304.751773][T10250] [U] �$C
UGS�EԲ6���������T�τPP˒Z3T2ȍ���9W-��֑̙�AR���ݻNB�ڎ�
��:^X��ϧ��B�����̲~�{J��
[  304.776743][T10250] [U] ��T̷E��' 2���L*�A��-�;P;BT��.�N�`��_Ӯ�;��*�U;��5C#R/��Q�K�*M���S�A����#)A�B��>�Yؐ�O\;^��'��O�5_�Y�H����L
�CE��&A�`;œ�ԸЕ�S��S��Ƈ{�H�� �TM�0����BI^L��>���8�٢VV8<��-�{$>�D	���ý]�W����U���0?K�˼ڹ�[UIRB_IL�/ES��I*�W�S�*�ZS���͎ђ��
[  304.802658][T10250] [U] 
[  304.880527][T10247] [U] 
[  305.322304][    T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  305.475336][    T8] usb 9-1: Using ep0 maxpacket: 32
[  305.491996][    T8] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  305.523833][    T8] usb 9-1: config 0 has no interface number 0
[  305.555741][    T8] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  305.565360][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.577488][    T8] usb 9-1: Product: syz
[  305.584702][    T8] usb 9-1: Manufacturer: syz
[  305.589620][    T8] usb 9-1: SerialNumber: syz
[  305.612394][    T8] usb 9-1: config 0 descriptor??
[  305.622156][    T8] smsc95xx v2.0.0
[  306.626592][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  306.637455][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  308.299125][T10322] netlink: 'syz.5.940': attribute type 10 has an invalid length.
[  308.860032][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[  308.871435][    T8] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[  308.887499][    T8] usb 9-1: USB disconnect, device number 7
[  309.050292][T10334] overlayfs: missing 'lowerdir'
[  309.312378][   T51] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  309.482296][   T51] usb 10-1: Using ep0 maxpacket: 8
[  309.500629][   T51] usb 10-1: config 0 has an invalid interface number: 128 but max is 0
[  309.661227][   T51] usb 10-1: config 0 has no interface number 0
[  310.043536][   T51] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  310.525520][   T51] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.534262][   T51] usb 10-1: Product: syz
[  310.538745][   T51] usb 10-1: Manufacturer: syz
[  310.552269][   T51] usb 10-1: SerialNumber: syz
[  310.576451][   T51] usb 10-1: config 0 descriptor??
[  310.584786][   T51] radio-usb-si4713 10-1:0.128: Si4713 development board discovered: (10C4:8244)
[  310.985440][T10373] ALSA: mixer_oss: invalid OSS volume 'u'
[  311.657586][   T51] radio-usb-si4713 10-1:0.128: probe with driver radio-usb-si4713 failed with error -71
[  311.667725][   T51] usbhid 10-1:0.128: couldn't find an input interrupt endpoint
[  311.679045][   T51] usb 10-1: USB disconnect, device number 4
[  314.358533][T10428] syz.9.970: attempt to access beyond end of device
[  314.358533][T10428] nbd9: rw=0, sector=64, nr_sectors = 1 limit=0
[  314.512699][T10428] syz.9.970: attempt to access beyond end of device
[  314.512699][T10428] nbd9: rw=0, sector=256, nr_sectors = 1 limit=0
[  314.825689][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256
[  314.835504][T10428] syz.9.970: attempt to access beyond end of device
[  314.835504][T10428] nbd9: rw=0, sector=512, nr_sectors = 1 limit=0
[  314.873861][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512
[  314.959968][T10428] syz.9.970: attempt to access beyond end of device
[  314.959968][T10428] nbd9: rw=0, sector=64, nr_sectors = 2 limit=0
[  314.984418][T10428] syz.9.970: attempt to access beyond end of device
[  314.984418][T10428] nbd9: rw=0, sector=512, nr_sectors = 2 limit=0
[  315.013067][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256
[  315.368846][T10428] syz.9.970: attempt to access beyond end of device
[  315.368846][T10428] nbd9: rw=0, sector=1024, nr_sectors = 2 limit=0
[  315.463754][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512
[  315.495193][T10428] syz.9.970: attempt to access beyond end of device
[  315.495193][T10428] nbd9: rw=0, sector=64, nr_sectors = 4 limit=0
[  315.542656][T10428] syz.9.970: attempt to access beyond end of device
[  315.542656][T10428] nbd9: rw=0, sector=1024, nr_sectors = 4 limit=0
[  315.582374][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256
[  315.612740][T10428] syz.9.970: attempt to access beyond end of device
[  315.612740][T10428] nbd9: rw=0, sector=2048, nr_sectors = 4 limit=0
[  315.638634][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512
[  315.649259][T10428] syz.9.970: attempt to access beyond end of device
[  315.649259][T10428] nbd9: rw=0, sector=64, nr_sectors = 8 limit=0
[  315.700784][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256
[  315.719963][T10428] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512
[  315.730639][T10428] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1)
[  315.993182][T10421] nbd9: detected capacity change from 0 to 20
[  316.007012][T10421] block nbd9: shutting down sockets
[  316.013472][ T5829] blk_print_req_error: 137 callbacks suppressed
[  316.013490][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.066836][ T5829] buffer_io_error: 130 callbacks suppressed
[  316.066855][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.215290][   T26] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.225865][   T26] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.236132][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.269295][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.314781][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.356307][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.409470][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.420937][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.436282][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.447782][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.477773][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.508658][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.509759][   T51] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  316.519043][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.593904][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.601797][ T5829] ldm_validate_partition_table(): Disk read failed.
[  316.618439][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.627910][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.636074][ T5829] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  316.645574][ T5829] Buffer I/O error on dev nbd9, logical block 0, async page read
[  316.654059][ T5829] Dev nbd9: unable to read RDB block 0
[  316.659860][ T5829]  nbd9: unable to read partition table
[  316.665792][ T5829] nbd9: partition table beyond EOD, truncated
[  316.675109][ T5829] ldm_validate_partition_table(): Disk read failed.
[  316.684716][ T5829] Dev nbd9: unable to read RDB block 0
[  316.690507][ T5829]  nbd9: unable to read partition table
[  316.696835][ T5829] nbd9: partition table beyond EOD, truncated
[  317.041248][   T29] audit: type=1804 audit(1734762815.103:104): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.969" name="/newroot/87/file1" dev="fuse" ino=1 res=1 errno=0
[  317.061371][   T51] usb 6-1: Using ep0 maxpacket: 8
[  317.079259][   T51] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  317.104963][   T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.120653][   T29] audit: type=1800 audit(1734762815.183:105): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.969" name="/" dev="fuse" ino=1 res=0 errno=0
[  317.124300][   T51] usb 6-1: config 0 descriptor??
[  317.157842][   T29] audit: type=1804 audit(1734762815.183:106): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.969" name="/newroot/87/file1" dev="fuse" ino=1 res=1 errno=0
[  317.200244][   T29] audit: type=1804 audit(1734762815.183:107): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.969" name="/newroot/87/file1" dev="fuse" ino=1 res=1 errno=0
[  317.259762][   T29] audit: type=1800 audit(1734762815.183:108): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.969" name="/" dev="fuse" ino=1 res=0 errno=0
[  317.498229][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  317.516636][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  318.213422][T10498] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  318.239937][T10498] CIFS mount error: No usable UNC path provided in device string!
[  318.239937][T10498] 
[  318.250330][T10498] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  319.091352][T10500] tty tty38: ldisc open failed (-12), clearing slot 37
[  319.724719][T10510] syzkaller0: entered promiscuous mode
[  319.730354][T10510] syzkaller0: entered allmulticast mode
[  320.556046][T10516] uprobe: syz.8.981:10516 failed to unregister, leaking uprobe
[  320.760531][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888012b07c00: rx timeout, send abort
[  320.772383][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888012b07c00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session.
[  320.956910][   T51] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  320.991383][   T51] asix 6-1:0.0: probe with driver asix failed with error -71
[  321.009774][   T51] usb 6-1: USB disconnect, device number 12
[  321.289920][T10533] kvm: pic: non byte write
[  321.314864][T10533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (245259927488 ns) > initial count (134218304 ns). Using initial count to start timer.
[  323.252655][    T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  323.420225][T10557] xt_CT: You must specify a L4 protocol and not use inversions on it
[  323.429401][    T8] usb 6-1: Using ep0 maxpacket: 8
[  323.466837][    T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  323.482619][    T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  323.517062][    T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  323.529052][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.538737][    T8] usb 6-1: Product: я
[  323.552743][    T8] usb 6-1: Manufacturer: 翼老㠣魑鴦
[  325.321057][    T8] cdc_ncm 6-1:1.0: bind() failure
[  325.386276][    T8] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  325.401886][    T8] cdc_ncm 6-1:1.1: bind() failure
[  325.436374][    T8] usb 6-1: USB disconnect, device number 13
[  325.985662][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1004'.
[  326.015797][T10595] macvtap1: entered promiscuous mode
[  326.021174][T10595] syz_tun: entered promiscuous mode
[  326.031302][T10595] macvtap1: entered allmulticast mode
[  326.038469][T10595] syz_tun: entered allmulticast mode
[  326.124109][T10596] syz_tun: left allmulticast mode
[  326.130635][T10596] syz_tun: left promiscuous mode
[  327.019032][T10601] =======================================================
[  327.019032][T10601] WARNING: The mand mount option has been deprecated and
[  327.019032][T10601]          and is ignored by this kernel. Remove the mand
[  327.019032][T10601]          option from the mount to silence this warning.
[  327.019032][T10601] =======================================================
[  327.053995][    C0] vkms_vblank_simulate: vblank timer overrun
[  327.230344][T10612] 9pnet: p9_errstr2errno: server reported unknown error �@�΂�(����QhI�%
[  327.230344][T10612] 
[  327.567498][T10624] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  332.646559][T10666] random: crng reseeded on system resumption
[  335.622614][   T29] audit: type=1326 audit(1734762833.683:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439585d29 code=0x7ffc0000
[  335.674617][   T29] audit: type=1326 audit(1734762833.723:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439585d29 code=0x7ffc0000
[  335.850667][   T29] audit: type=1326 audit(1734762833.783:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc439585d29 code=0x7ffc0000
[  336.291684][   T29] audit: type=1326 audit(1734762833.783:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439585d29 code=0x7ffc0000
[  336.322588][   T29] audit: type=1326 audit(1734762833.783:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc439584690 code=0x7ffc0000
[  336.421526][   T29] audit: type=1326 audit(1734762833.783:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc439584690 code=0x7ffc0000
[  336.665458][   T29] audit: type=1326 audit(1734762833.783:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439585d29 code=0x7ffc0000
[  337.072885][   T29] audit: type=1326 audit(1734762833.793:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439585d29 code=0x7ffc0000
[  337.271374][   T29] audit: type=1326 audit(1734762833.813:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc439584690 code=0x7ffc0000
[  337.460624][   T29] audit: type=1326 audit(1734762833.863:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10699 comm="syz.8.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc439585d29 code=0x7ffc0000
[  337.546391][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1041'.
[  337.578316][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1042'.
[  338.287057][T10744] bridge0: port 1(gretap0) entered blocking state
[  338.304386][T10744] bridge0: port 1(gretap0) entered disabled state
[  338.312024][T10744] gretap0: entered allmulticast mode
[  338.340555][T10744] gretap0: entered promiscuous mode
[  338.486501][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  338.497304][T10747] gretap0: left allmulticast mode
[  338.497400][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  338.512132][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  338.522039][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  338.528513][T10747] gretap0: left promiscuous mode
[  338.533479][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  338.541558][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.571288][T10747] bridge0: port 1(gretap0) entered disabled state
[  338.922344][    T8] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  339.019250][T10749] chnl_net:caif_netlink_parms(): no params data found
[  339.072655][    T8] usb 10-1: Using ep0 maxpacket: 8
[  339.090329][    T8] usb 10-1: config index 0 descriptor too short (expected 75, got 45)
[  339.115933][    T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  339.164340][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  339.189853][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  339.210518][    T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  339.229919][    T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  339.231113][T10749] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.247280][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.286485][T10749] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.310245][T10749] bridge_slave_0: entered allmulticast mode
[  339.350106][T10749] bridge_slave_0: entered promiscuous mode
[  339.382995][T10749] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.405210][T10749] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.417851][T10749] bridge_slave_1: entered allmulticast mode
[  339.451066][T10749] bridge_slave_1: entered promiscuous mode
[  339.482707][    T8] usb 10-1: GET_CAPABILITIES returned 0
[  339.492331][    T8] usbtmc 10-1:16.0: can't read capabilities
[  340.078802][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.145537][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.331862][T10749] team0: Port device team_slave_0 added
[  340.367975][T10749] team0: Port device team_slave_1 added
[  340.371125][T10781] xt_hashlimit: max too large, truncated to 1048576
[  340.475735][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.507813][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.615777][ T5824] Bluetooth: hci0: command tx timeout
[  340.631570][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.736064][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.778253][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.918759][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.139666][T10749] hsr_slave_0: entered promiscuous mode
[  341.158436][T10749] hsr_slave_1: entered promiscuous mode
[  341.181745][T10749] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  341.199593][T10749] Cannot create hsr debugfs directory
[  342.634575][   T51] usb 10-1: USB disconnect, device number 5
[  342.727799][ T5824] Bluetooth: hci0: command tx timeout
[  344.796281][ T5824] Bluetooth: hci0: command tx timeout
[  345.041096][T10749] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  345.127743][T10749] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  345.753156][T10749] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  345.806181][T10749] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  346.102529][T10879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1081'.
[  346.139473][T10749] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.215767][T10749] 8021q: adding VLAN 0 to HW filter on device team0
[  346.233991][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.234126][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.244647][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.244719][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.768678][T10749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.852780][ T5824] Bluetooth: hci0: command tx timeout
[  346.866637][T10749] veth0_vlan: entered promiscuous mode
[  346.900464][T10749] veth1_vlan: entered promiscuous mode
[  346.964215][T10749] veth0_macvtap: entered promiscuous mode
[  346.967402][T10749] veth1_macvtap: entered promiscuous mode
[  346.987352][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.987379][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.987405][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.987420][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.988408][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.990738][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.990759][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.991591][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.994133][T10749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.994214][T10749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.994243][T10749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.994269][T10749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.523708][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.549719][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.835710][ T6123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.302262][ T6123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.814269][ T5824] Bluetooth: hci5: unexpected Set CIG Parameters response data
[  351.824557][ T5824] Bluetooth: hci5: unexpected event for opcode 0x2062
[  356.006534][ T5824] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  356.017786][ T5824] Bluetooth: hci5: Injecting HCI hardware error event
[  356.028027][ T5824] Bluetooth: hci5: hardware error 0x00
[  359.892963][ T5824] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  360.371530][T11128] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  360.417859][T11128] kvm: pic: non byte read
[  360.442730][T11128] kvm: pic: non byte read
[  360.447716][T11128] kvm: pic: level sensitive irq not supported
[  360.447859][T11128] kvm: pic: non byte read
[  360.450701][T11133] binder_alloc: 11132: pid 11132 spamming oneway? 1 buffers allocated for a total size of 4096
[  360.492665][T11128] kvm: pic: non byte read
[  360.523015][T11128] kvm: pic: non byte read
[  360.538790][T11128] kvm: pic: non byte read
[  361.446115][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  361.446138][   T29] audit: type=1804 audit(1734762859.493:143): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1141" name="/newroot/11/bus/file1" dev="overlay" ino=82 res=1 errno=0
[  363.331518][   T12] Bluetooth: hci3: Frame reassembly failed (-84)
[  364.610993][T11228] batadv_slave_0: entered promiscuous mode
[  366.002410][ T5826] Bluetooth: hci3: command 0x1003 tx timeout
[  366.042700][ T5824] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  366.542514][ T5868] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  366.713964][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.730046][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  366.763508][ T5868] usb 7-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00
[  366.810139][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.858673][ T5868] usb 7-1: config 0 descriptor??
[  366.872075][ T5868] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  367.564782][   T94] usb 7-1: USB disconnect, device number 8
[  367.689687][T11304] ptrace attach of "./syz-executor exec"[7468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  368.537854][T11308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.727911][ T5868] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  368.753894][ T5868] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  369.016062][T11308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.581912][   T11] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  371.362419][   T12] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  372.159611][   T12] wlan1: authentication with 08:02:11:00:00:00 timed out
[  373.123556][T11366] openvswitch: netlink: Tunnel attr 228 out of range max 16
[  374.013367][ T5868] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  374.193267][ T5868] usb 7-1: Using ep0 maxpacket: 8
[  374.202375][ T5868] usb 7-1: unable to get BOS descriptor or descriptor too short
[  374.221675][ T5868] usb 7-1: config 4 has an invalid interface number: 147 but max is 0
[  374.254354][ T5868] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  374.400787][ T5868] usb 7-1: config 4 has no interface number 0
[  374.490777][ T5868] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  374.608784][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.794998][ T5868] usb 7-1: Product: syz
[  374.799236][ T5868] usb 7-1: Manufacturer: syz
[  374.831406][ T5868] usb 7-1: SerialNumber: syz
[  375.718270][ T5868] usb 7-1: Found UVC 0.02 device syz (04f2:b746)
[  375.757029][ T5868] uvcvideo 7-1:4.147: Entity type for entity Output 1 was not initialized!
[  375.806585][ T5868] usb 7-1: Failed to create links for entity 1
[  375.830128][ T5868] usb 7-1: Failed to register entities (-22).
[  375.935000][ T5868] usb 7-1: USB disconnect, device number 9
[  376.050677][   T94] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  376.265194][   T94] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  376.417264][   T94] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.641066][   T94] usb 10-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00
[  376.692505][   T94] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.743906][   T94] usb 10-1: config 0 descriptor??
[  376.994338][T11434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1196'.
[  377.843003][ T5824] Bluetooth: hci0: command tx timeout
[  378.116304][   T94] hid-generic 0003:22ED:1010.000B: unknown main item tag 0x0
[  378.455946][   T94] hid-generic 0003:22ED:1010.000B: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.9-1/input0
[  378.818930][   T94] usb 10-1: USB disconnect, device number 6
[  378.964032][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.970385][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  380.327059][T11475] kvm: faulting far call emulation tainted memory
[  383.266053][T11525] batman_adv: batadv0: Adding interface: ip6gretap1
[  383.365934][T11525] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.391623][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.428418][T11525] batman_adv: batadv0: Interface activated: ip6gretap1
[  384.467485][T11555] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  387.247409][T11603] CUSE: unknown device info ""
[  387.254110][T11603] CUSE: zero length info key specified
[  389.896905][T11624] Invalid ELF header magic: != ELF
[  392.256044][T11648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  392.989763][T11652] syz.3.1242 (11652): drop_caches: 1
[  393.252294][ T5868] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  394.482316][ T5868] usb 9-1: Using ep0 maxpacket: 16
[  394.542375][ T5868] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  394.824896][ T5868] usb 9-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40
[  394.834519][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.843189][ T5868] usb 9-1: Product: syz
[  394.847406][ T5868] usb 9-1: Manufacturer: syz
[  394.852033][ T5868] usb 9-1: SerialNumber: syz
[  394.905023][ T5868] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input18
[  395.036787][   T35] Bluetooth: Error in BCSP hdr checksum
[  395.299383][   T35] Bluetooth: Error in BCSP hdr checksum
[  395.554428][   T35] Bluetooth: Error in BCSP hdr checksum
[  395.818547][   T80] Bluetooth: Error in BCSP hdr checksum
[  396.076214][   T52] Bluetooth: Error in BCSP hdr checksum
[  396.173357][ T5177] bcm5974 9-1:1.0: could not read from device
[  396.206328][ T5177] bcm5974 9-1:1.0: could not read from device
[  396.209495][ T5868] usb 9-1: USB disconnect, device number 8
[  396.334272][ T6190] Bluetooth: Error in BCSP hdr checksum
[  397.225721][T11686] Bluetooth: hci3: command 0x1003 tx timeout
[  397.233242][T11686] Bluetooth: hci6: command 0xfc11 tx timeout
[  397.239694][ T5826] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[  397.259601][ T5824] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  397.569748][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.670349][T11661] syz.1.1244 (11661): drop_caches: 1
[  400.012347][   T94] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  400.199166][   T94] usb 7-1: config index 0 descriptor too short (expected 106, got 36)
[  400.286873][   T94] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.558178][   T94] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.684104][   T94] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  400.713945][T11765] syz.9.1265 (11765): /proc/11765/oom_adj is deprecated, please use /proc/11765/oom_score_adj instead.
[  400.732330][   T94] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.808704][   T94] usb 7-1: config 0 descriptor??
[  400.978542][T11776] xt_bpf: check failed: parse error
[  401.294963][   T94] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  401.325853][   T94] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  401.359515][   T94] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  401.402438][   T94] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  401.471730][   T94] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0
[  401.494430][   T94] corsair 0003:1B1C:1B3E.000C: failed to start in urb: -90
[  401.568088][T11794] rdma_op ffff88805a9ab1f0 conn xmit_rdma 0000000000000000
[  401.596754][   T94] corsair 0003:1B1C:1B3E.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.6-1/input0
[  402.219690][   T94] usb 7-1: USB disconnect, device number 10
[  402.308179][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079e8c000: rx timeout, send abort
[  402.322347][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079e8c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  403.622518][T11815] trusted_key: syz.6.1274 sent an empty control message without MSG_MORE.
[  404.723797][T11835] netlink: 'syz.6.1276': attribute type 10 has an invalid length.
[  404.731674][T11835] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1276'.
[  404.928981][T11847] netlink: 'syz.6.1276': attribute type 2 has an invalid length.
[  408.702278][ T5868] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  409.027364][ T5868] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  409.043249][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.051422][ T5868] usb 7-1: Product: syz
[  409.250625][ T5868] usb 7-1: Manufacturer: syz
[  409.340121][ T5868] usb 7-1: SerialNumber: syz
[  409.729815][ T5868] usb 7-1: config 0 descriptor??
[  410.175750][ T5868] usb 7-1: Firmware version (0.0) predates our first public release.
[  410.222331][ T5868] usb 7-1: Please update to version 0.2 or newer
[  410.423339][ T5868] usb 7-1: USB disconnect, device number 11
[  413.843518][T11968] devtmpfs: Cannot enable quota on remount
[  413.931464][T11967] veth0_to_team: entered promiscuous mode
[  413.995390][T11967] veth0_to_team: entered allmulticast mode
[  415.181811][T11987] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf
[  415.191538][T11987] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  415.516668][T11998] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  416.061523][T11988] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.152956][T11988] 8021q: adding VLAN 0 to HW filter on device team0
[  416.834340][T12006] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  417.386345][T11988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.564216][T11990] tap0: tun_chr_ioctl cmd 1074025677
[  417.570190][T11990] tap0: linktype set to 0
[  419.234506][T12026] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1324'.
[  419.858203][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7d6400: rx timeout, send abort
[  419.986900][T12040] netlink: 'syz.1.1328': attribute type 10 has an invalid length.
[  420.366512][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7d6400: abort rx timeout. Force session deactivation
[  420.887904][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7d7c00: rx timeout, send abort
[  420.978757][T12055] input: syz0 as /devices/virtual/input/input19
[  421.396196][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7d7c00: abort rx timeout. Force session deactivation
[  421.742382][ T5900] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  422.095292][ T5900] usb 10-1: config 0 interface 0 has no altsetting 0
[  422.102057][ T5900] usb 10-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a
[  422.352472][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.506990][ T5900] usb 10-1: config 0 descriptor??
[  422.566845][T12062] XFS (nullb0): Invalid superblock magic number
[  422.609303][ T5900] ti_usb_3410_5052 10-1:0.0: required endpoints missing
[  422.632372][   T29] audit: type=1326 audit(1734762920.643:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12074 comm="syz.6.1337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x0
[  423.324955][ T5900] usb 10-1: USB disconnect, device number 7
[  423.505330][   T54] Bluetooth: hci0: Unknown advertising packet type: 0x16
[  423.505411][   T54] Bluetooth: hci0: Unknown advertising packet type: 0x1c
[  423.514709][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[  424.100001][T12104] wg1: entered promiscuous mode
[  425.250721][   T54] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  430.192501][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  430.201360][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  430.221648][   T54] Bluetooth: hci1: hardware error 0x00
[  430.621092][T12154] syzkaller0: entered promiscuous mode
[  430.636112][T12154] syzkaller0: entered allmulticast mode
[  432.482570][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  434.816266][T12181] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1368'.
[  437.366465][T12166] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1364'.
[  437.387632][T12171] ipvlan2: entered promiscuous mode
[  437.399993][T12171] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  437.413626][T12171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  438.585164][T12204] xt_l2tp: invalid flags combination: 0
[  440.391650][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.399775][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  441.155534][T12233] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  441.163328][T12233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.277770][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1389'.
[  443.312410][T12250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.026071][T12250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.048035][T12256] binder: 12254:12256 ioctl 4018620d 0 returned -22
[  444.097849][T12250] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  444.148404][T12250] batman_adv: batadv0: Removing interface: ip6gretap1
[  444.396396][T12255] tipc: Started in network mode
[  444.401336][T12255] tipc: Node identity ac14140f, cluster identity 4711
[  444.464368][T12255] tipc: New replicast peer: 255.255.255.255
[  444.550145][T12255] tipc: Enabled bearer <udp:syz2>, priority 10
[  444.597135][T12266] 8021q: VLANs not supported on ipvlan0
[  444.632709][T12268] kvm: user requested TSC rate below hardware speed
[  445.125779][T12277] netlink: 341 bytes leftover after parsing attributes in process `syz.1.1397'.
[  445.562450][ T5907] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  445.753812][ T5907] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  445.858474][ T5907] usb 9-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00
[  446.128857][ T5900] tipc: Node number set to 2886997007
[  446.282248][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.582313][   T29] audit: type=1326 audit(1734762944.563:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  446.731070][   T29] audit: type=1326 audit(1734762944.563:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  446.773340][ T5907] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22
[  446.803447][   T29] audit: type=1326 audit(1734762944.593:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  446.840992][   T29] audit: type=1326 audit(1734762944.593:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  446.863808][   T29] audit: type=1326 audit(1734762944.593:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  446.891669][   T29] audit: type=1326 audit(1734762944.593:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  446.994136][   T29] audit: type=1326 audit(1734762944.603:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  447.519342][T12182] udevd[12182]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  447.529185][   T29] audit: type=1326 audit(1734762944.603:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  447.562755][T12300] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  447.582900][T12300] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  447.609352][   T29] audit: type=1326 audit(1734762944.603:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  447.718919][   T29] audit: type=1326 audit(1734762944.603:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.6.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e64185d29 code=0x7ffc0000
[  447.756461][T12300] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  447.799706][T12300] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  447.828723][T12300] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  448.082471][    T8] usb 9-1: USB disconnect, device number 9
[  449.572715][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  449.843814][   T54] Bluetooth: hci0: command 0x0405 tx timeout
[  451.808919][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  452.239916][   T54] Bluetooth: hci0: command 0x0405 tx timeout
[  453.277565][T12364] bio_check_eod: 2 callbacks suppressed
[  453.277610][T12364] syz.6.1421: attempt to access beyond end of device
[  453.277610][T12364] nbd6: rw=4096, sector=2, nr_sectors = 2 limit=0
[  453.297016][T12364] EXT4-fs (nbd6): unable to read superblock
[  454.256184][T12367] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  454.291770][   T11] Bluetooth: hci3: Frame reassembly failed (-84)
[  454.372626][ T5824] Bluetooth: hci0: command 0x0405 tx timeout
[  455.877008][T12386] 
[  455.879388][T12386] ======================================================
[  455.886419][T12386] WARNING: possible circular locking dependency detected
[  455.893453][T12386] 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted
[  455.900573][T12386] ------------------------------------------------------
[  455.907604][T12386] syz.8.1428/12386 is trying to acquire lock:
[  455.913679][T12386] ffff888143bec088 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  455.923901][T12386] 
[  455.923901][T12386] but task is already holding lock:
[  455.931261][T12386] ffff888143bebb58 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  455.941546][T12386] 
[  455.941546][T12386] which lock already depends on the new lock.
[  455.941546][T12386] 
[  455.951946][T12386] 
[  455.951946][T12386] the existing dependency chain (in reverse order) is:
[  455.960951][T12386] 
[  455.960951][T12386] -> #6 (&q->q_usage_counter(io)#57){++++}-{0:0}:
[  455.969560][T12386]        lock_acquire+0x1ed/0x550
[  455.974580][T12386]        blk_mq_submit_bio+0x1536/0x2390
[  455.980204][T12386]        __submit_bio+0x2c6/0x560
[  455.985401][T12386]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  455.991546][T12386]        block_read_full_folio+0x9b3/0xae0
[  455.997353][T12386]        filemap_read_folio+0x148/0x3b0
[  456.002891][T12386]        filemap_get_pages+0x18ca/0x2080
[  456.008523][T12386]        filemap_read+0x452/0xf50
[  456.013541][T12386]        blkdev_read_iter+0x2d8/0x430
[  456.018907][T12386]        vfs_read+0x991/0xb70
[  456.023581][T12386]        ksys_read+0x18f/0x2b0
[  456.028353][T12386]        do_syscall_64+0xf3/0x230
[  456.033393][T12386]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.039817][T12386] 
[  456.039817][T12386] -> #5 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  456.048344][T12386]        lock_acquire+0x1ed/0x550
[  456.053367][T12386]        down_read+0xb1/0xa40
[  456.058033][T12386]        page_cache_ra_unbounded+0x142/0x720
[  456.064023][T12386]        filemap_fault+0x818/0x1490
[  456.069212][T12386]        __do_fault+0x135/0x390
[  456.074121][T12386]        handle_pte_fault+0x39eb/0x5ed0
[  456.079682][T12386]        handle_mm_fault+0x1053/0x1ad0
[  456.085143][T12386]        exc_page_fault+0x2b9/0x8b0
[  456.090351][T12386]        asm_exc_page_fault+0x26/0x30
[  456.095722][T12386]        rep_movs_alternative+0x4a/0x70
[  456.101266][T12386]        _copy_from_iter+0x268/0x1c20
[  456.106641][T12386]        sk_msg_memcopy_from_iter+0x2ee/0x5f0
[  456.112705][T12386]        tcp_bpf_sendmsg+0x678/0x1be0
[  456.118068][T12386]        __sock_sendmsg+0xef/0x270
[  456.123175][T12386]        ____sys_sendmsg+0x52a/0x7e0
[  456.128452][T12386]        __sys_sendmsg+0x269/0x350
[  456.133570][T12386]        do_syscall_64+0xf3/0x230
[  456.138604][T12386]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.145021][T12386] 
[  456.145021][T12386] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  456.152761][T12386]        lock_acquire+0x1ed/0x550
[  456.157786][T12386]        lock_sock_nested+0x48/0x100
[  456.163064][T12386]        inet_shutdown+0x6d/0x390
[  456.168081][T12386]        nbd_mark_nsock_dead+0x2e3/0x560
[  456.173722][T12386]        recv_work+0x225a/0x25c0
[  456.178658][T12386]        process_scheduled_works+0xa66/0x1840
[  456.184726][T12386]        worker_thread+0x870/0xd30
[  456.189834][T12386]        kthread+0x2f0/0x390
[  456.194418][T12386]        ret_from_fork+0x4b/0x80
[  456.199349][T12386]        ret_from_fork_asm+0x1a/0x30
[  456.204636][T12386] 
[  456.204636][T12386] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  456.212279][T12386]        lock_acquire+0x1ed/0x550
[  456.217294][T12386]        __mutex_lock+0x1ac/0xee0
[  456.222316][T12386]        nbd_queue_rq+0x29c/0x2ef0
[  456.227421][T12386]        blk_mq_dispatch_rq_list+0xad3/0x19d0
[  456.233499][T12386]        __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  456.240345][T12386]        blk_mq_sched_dispatch_requests+0xd6/0x190
[  456.246849][T12386]        blk_mq_run_hw_queue+0x354/0x500
[  456.252477][T12386]        blk_mq_flush_plug_list+0x118e/0x1870
[  456.258534][T12386]        __blk_flush_plug+0x420/0x500
[  456.263897][T12386]        __submit_bio+0x46a/0x560
[  456.268913][T12386]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  456.275084][T12386]        __bread_gfp+0x23c/0x400
[  456.280018][T12386]        udf_read_tagged+0xa6/0xe00
[  456.285388][T12386]        udf_check_anchor_block+0xba/0x550
[  456.291191][T12386]        udf_load_vrs+0xb16/0x1130
[  456.296298][T12386]        udf_fill_super+0x5eb/0x1ed0
[  456.301585][T12386]        get_tree_bdev_flags+0x48c/0x5c0
[  456.307213][T12386]        vfs_get_tree+0x90/0x2b0
[  456.312148][T12386]        do_new_mount+0x2be/0xb40
[  456.317194][T12386]        __se_sys_mount+0x2d6/0x3c0
[  456.322383][T12386]        do_syscall_64+0xf3/0x230
[  456.327403][T12386]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.333812][T12386] 
[  456.333812][T12386] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  456.341017][T12386]        lock_acquire+0x1ed/0x550
[  456.346036][T12386]        __mutex_lock+0x1ac/0xee0
[  456.351057][T12386]        nbd_queue_rq+0xfe/0x2ef0
[  456.356077][T12386]        blk_mq_dispatch_rq_list+0xad3/0x19d0
[  456.362141][T12386]        __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  456.368987][T12386]        blk_mq_sched_dispatch_requests+0xd6/0x190
[  456.375482][T12386]        blk_mq_run_hw_queue+0x354/0x500
[  456.381113][T12386]        blk_mq_flush_plug_list+0x118e/0x1870
[  456.387172][T12386]        __blk_flush_plug+0x420/0x500
[  456.392540][T12386]        __submit_bio+0x46a/0x560
[  456.397561][T12386]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  456.403709][T12386]        __bread_gfp+0x23c/0x400
[  456.408644][T12386]        udf_read_tagged+0xa6/0xe00
[  456.413834][T12386]        udf_check_anchor_block+0xba/0x550
[  456.419648][T12386]        udf_load_vrs+0xb16/0x1130
[  456.424753][T12386]        udf_fill_super+0x5eb/0x1ed0
[  456.430030][T12386]        get_tree_bdev_flags+0x48c/0x5c0
[  456.435658][T12386]        vfs_get_tree+0x90/0x2b0
[  456.440588][T12386]        do_new_mount+0x2be/0xb40
[  456.445628][T12386]        __se_sys_mount+0x2d6/0x3c0
[  456.450816][T12386]        do_syscall_64+0xf3/0x230
[  456.455836][T12386]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.462248][T12386] 
[  456.462248][T12386] -> #1 (set->srcu){.+.+}-{0:0}:
[  456.469366][T12386]        lock_sync+0x18b/0x310
[  456.474124][T12386]        __synchronize_srcu+0xb1/0x400
[  456.479576][T12386]        elevator_disable+0x8c/0x3f0
[  456.484855][T12386]        blk_mq_update_nr_hw_queues+0x646/0x1ae0
[  456.491175][T12386]        nbd_start_device+0x16c/0xaa0
[  456.496538][T12386]        nbd_ioctl+0x5dc/0xf40
[  456.501293][T12386]        blkdev_ioctl+0x57d/0x6a0
[  456.506306][T12386]        __se_sys_ioctl+0xf5/0x170
[  456.511409][T12386]        do_syscall_64+0xf3/0x230
[  456.516432][T12386]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.522848][T12386] 
[  456.522848][T12386] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[  456.530402][T12386]        validate_chain+0x18ef/0x5920
[  456.535772][T12386]        __lock_acquire+0x1397/0x2100
[  456.541136][T12386]        lock_acquire+0x1ed/0x550
[  456.546153][T12386]        __mutex_lock+0x1ac/0xee0
[  456.551181][T12386]        blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  456.557515][T12386]        nbd_start_device+0x16c/0xaa0
[  456.562881][T12386]        nbd_ioctl+0x5dc/0xf40
[  456.567640][T12386]        blkdev_ioctl+0x57d/0x6a0
[  456.572654][T12386]        __se_sys_ioctl+0xf5/0x170
[  456.577760][T12386]        do_syscall_64+0xf3/0x230
[  456.582784][T12386]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.589193][T12386] 
[  456.589193][T12386] other info that might help us debug this:
[  456.589193][T12386] 
[  456.599433][T12386] Chain exists of:
[  456.599433][T12386]   &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#57
[  456.599433][T12386] 
[  456.614218][T12386]  Possible unsafe locking scenario:
[  456.614218][T12386] 
[  456.621652][T12386]        CPU0                    CPU1
[  456.627001][T12386]        ----                    ----
[  456.632361][T12386]   lock(&q->q_usage_counter(io)#57);
[  456.637740][T12386]                                lock(mapping.invalidate_lock#2);
[  456.645545][T12386]                                lock(&q->q_usage_counter(io)#57);
[  456.653444][T12386]   lock(&q->sysfs_lock);
[  456.657774][T12386] 
[  456.657774][T12386]  *** DEADLOCK ***
[  456.657774][T12386] 
[  456.665927][T12386] 4 locks held by syz.8.1428/12386:
[  456.671130][T12386]  #0: ffff8880255fc198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40
[  456.680459][T12386]  #1: ffff8880255fc0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0
[  456.691446][T12386]  #2: ffff888143bebb58 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  456.702160][T12386]  #3: ffff888143bebb90 (&q->q_usage_counter(queue)#41){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  456.713133][T12386] 
[  456.713133][T12386] stack backtrace:
[  456.719024][T12386] CPU: 1 UID: 0 PID: 12386 Comm: syz.8.1428 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0
[  456.729772][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  456.739817][T12386] Call Trace:
[  456.743098][T12386]  <TASK>
[  456.746023][T12386]  dump_stack_lvl+0x241/0x360
[  456.750720][T12386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  456.755941][T12386]  ? __pfx__printk+0x10/0x10
[  456.760540][T12386]  print_circular_bug+0x13a/0x1b0
[  456.765658][T12386]  check_noncircular+0x36a/0x4a0
[  456.770615][T12386]  ? __pfx_check_noncircular+0x10/0x10
[  456.776104][T12386]  validate_chain+0x18ef/0x5920
[  456.780968][T12386]  ? __pfx_validate_chain+0x10/0x10
[  456.786167][T12386]  ? is_bpf_text_address+0x26/0x2a0
[  456.791359][T12386]  ? __pfx_lock_release+0x10/0x10
[  456.796390][T12386]  ? unwind_next_frame+0x18e6/0x22d0
[  456.801683][T12386]  ? 0xffffffffa0000950
[  456.805842][T12386]  ? kernel_text_address+0xa7/0xe0
[  456.810947][T12386]  ? __kernel_text_address+0xd/0x40
[  456.816147][T12386]  ? mark_lock+0x9a/0x360
[  456.820497][T12386]  __lock_acquire+0x1397/0x2100
[  456.825346][T12386]  lock_acquire+0x1ed/0x550
[  456.829842][T12386]  ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  456.835818][T12386]  ? __pfx_lock_acquire+0x10/0x10
[  456.840840][T12386]  ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0
[  456.846814][T12386]  ? nbd_start_device+0x16c/0xaa0
[  456.851832][T12386]  ? __pfx___might_resched+0x10/0x10
[  456.857131][T12386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.863222][T12386]  __mutex_lock+0x1ac/0xee0
[  456.867737][T12386]  ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  456.873742][T12386]  ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  456.880010][T12386]  ? __pfx___mutex_lock+0x10/0x10
[  456.885050][T12386]  ? __kasan_kmalloc+0x98/0xb0
[  456.889817][T12386]  ? __kmalloc_cache_noprof+0x243/0x390
[  456.895355][T12386]  ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0
[  456.901331][T12386]  blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  456.907133][T12386]  ? __pfx___might_resched+0x10/0x10
[  456.912425][T12386]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  456.918662][T12386]  ? rcu_is_watching+0x15/0xb0
[  456.923422][T12386]  ? trace_contention_end+0x3c/0x120
[  456.928701][T12386]  ? __mutex_lock+0x37f/0xee0
[  456.933374][T12386]  ? tomoyo_path_number_perm+0x679/0x860
[  456.939012][T12386]  ? blkdev_common_ioctl+0xfb2/0x2460
[  456.944375][T12386]  ? __lock_acquire+0x1397/0x2100
[  456.949406][T12386]  ? nbd_ioctl+0x13c/0xf40
[  456.953822][T12386]  ? __pfx___mutex_lock+0x10/0x10
[  456.958852][T12386]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  456.964856][T12386]  nbd_start_device+0x16c/0xaa0
[  456.969703][T12386]  nbd_ioctl+0x5dc/0xf40
[  456.973941][T12386]  ? __pfx_nbd_ioctl+0x10/0x10
[  456.978701][T12386]  ? __asan_memset+0x23/0x50
[  456.983285][T12386]  ? smack_file_ioctl+0x29e/0x3a0
[  456.988303][T12386]  ? __pfx_smack_file_ioctl+0x10/0x10
[  456.993671][T12386]  ? file_to_blk_mode+0xcc/0x140
[  456.998605][T12386]  ? __pfx_nbd_ioctl+0x10/0x10
[  457.003365][T12386]  blkdev_ioctl+0x57d/0x6a0
[  457.007869][T12386]  ? __pfx_blkdev_ioctl+0x10/0x10
[  457.012885][T12386]  ? __pfx_blkdev_ioctl+0x10/0x10
[  457.017899][T12386]  __se_sys_ioctl+0xf5/0x170
[  457.022483][T12386]  do_syscall_64+0xf3/0x230
[  457.026988][T12386]  ? clear_bhb_loop+0x35/0x90
[  457.031657][T12386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.037562][T12386] RIP: 0033:0x7fc439585d29
[  457.041973][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.061589][T12386] RSP: 002b:00007fc43a482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  457.070006][T12386] RAX: ffffffffffffffda RBX: 00007fc439775fa0 RCX: 00007fc439585d29
[  457.077970][T12386] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  457.085952][T12386] RBP: 00007fc439601aa8 R08: 0000000000000000 R09: 0000000000000000
[  457.093937][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.101920][T12386] R13: 0000000000000000 R14: 00007fc439775fa0 R15: 00007ffdc381c6d8
[  457.109897][T12386]  </TASK>
[  457.117406][ T5824] Bluetooth: hci3: command 0x1003 tx timeout
[  457.157754][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  457.242484][T12390] block nbd8: shutting down sockets