last executing test programs:

16m42.253153592s ago: executing program 3 (id=1497):
r0 = socket$kcm(0x2, 0x1, 0x84)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="1731", 0x2}], 0x1}, 0xc000)

16m42.183897211s ago: executing program 3 (id=1498):
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000)) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="c0", 0x1}], 0x1, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000eb4cb240460d1120eab30000000109021b00010000000009041c0301e023780009050203"], 0x0)

16m40.835605843s ago: executing program 3 (id=1505):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000140)=[<r2=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r2, 0x0, r2, 0x7756a5e1, 0x3, 0x0, 0x9, 0x6, 0x9, 0x0, 0x3, 0xfffffff5})
ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000100)={0x0, 0xfffffffc})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[<r3=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r2, r3, <r4=>r3, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=r4)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

16m40.71910746s ago: executing program 3 (id=1506):
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={<r0=>0x0, @in6={{0xa, 0x4e22, 0x364, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x3, 0x3, 0x9, 0x3, 0x98, 0x1, 0x3}, &(0x7f0000000100)=0x9c)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r2, @ANYBLOB="05"], 0x0)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x101000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r4 = socket(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r4, 0x0, 0x19, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="120100004858c5208039030057990102030109021b0001000010000904668201a64ac2000905020248020203006a1547c5dd16f9c916bd224d24d67cd551aeb2bd5eef043608e8d163972c4cca35a4f8b737529f4fb95e70b7efcea1f5bf083c1b0174a32ad50173ed3857f2418fa97c0987a1657bb258f14e412c75b368576cd8d6fd6f97dc53da02447a479eb6dee73806ee6a4f4cac9f8a112a5a2237ecb382235a364b794930ac526b85897e8683fe8699aa8f"], 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r0, 0x7, 0x5, "c6805e7824"}, 0xd)
r5 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004bc0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
recvmmsg(r1, &(0x7f0000004a40)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000001780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001800)=""/135, 0x87}, {&(0x7f00000018c0)=""/195, 0xc3}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/191, 0xbf}], 0x5, &(0x7f0000002b80)=""/150, 0x96}, 0xfbd}, {{&(0x7f0000002c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002cc0)=""/63, 0x3f}, {&(0x7f0000002d00)=""/209, 0xd1}], 0x2, &(0x7f0000002e40)=""/209, 0xd1}, 0xea6f}, {{&(0x7f0000002f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002fc0)=""/39, 0x27}, {&(0x7f0000003000)=""/242, 0xf2}, {&(0x7f0000003100)=""/64, 0x40}, {&(0x7f0000003140)=""/133, 0x85}], 0x4, &(0x7f0000003240)=""/153, 0x99}, 0x83}, {{&(0x7f0000003300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/150, 0x96}], 0x1, &(0x7f0000003480)=""/161, 0xa1}, 0x3}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/169, 0xa9}, {&(0x7f0000004600)=""/191, 0xbf}, {&(0x7f00000046c0)=""/17, 0x11}, {&(0x7f0000004700)=""/50, 0x32}, {&(0x7f0000004740)=""/172, 0xac}, {&(0x7f0000004800)=""/152, 0x98}], 0x7, &(0x7f0000004940)=""/254, 0xfe}}], 0x6, 0x40010000, 0x0)
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r0, 0x7, 0x7, 0x5}, 0x10)
set_mempolicy(0x4000, &(0x7f0000000000)=0x1ff, 0x7582)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

16m39.326154108s ago: executing program 3 (id=1518):
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5a, 0x800c0)
write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7})
getsockname$netlink(r0, &(0x7f0000000080), &(0x7f0000000140)=0xc)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "9611e6a852000085163200000000000000bac700000000000000010083df00"})
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xde9, 0x4)

16m38.250716924s ago: executing program 3 (id=1527):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff}) (rerun: 64)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000480)=0x300) (async, rerun: 32)
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r2=>0xee01]) (rerun: 32)
setfsgid(r2)
setfsgid(r2)

16m38.088742242s ago: executing program 32 (id=1527):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff}) (rerun: 64)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000480)=0x300) (async, rerun: 32)
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r2=>0xee01]) (rerun: 32)
setfsgid(r2)
setfsgid(r2)

14m11.992692284s ago: executing program 0 (id=2183):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xee01}}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x900, &(0x7f0000000100)={0x8, 0x80, 0x80000, {r1}}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040100000073797a3100000000080005400000000209ff8bedd6e59c00020073797a310000000008000a40fffffffc0800034000000004440000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000018000380100000800c00018006000100d1030000040000802c0000000e0a010200000000000000000a0000000900020053797a31000000000900010073797a3100000000140000001100010000000000000000000100000a"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private1, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0x8054)
r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x800, 0x8002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}})

14m11.907001779s ago: executing program 0 (id=2184):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000540)=ANY=[@ANYBLOB="6e725f626c6f636b733d472c00b5f5b0d72707c854e1ae5ed3e18e62c4a2d750a888c11b0194d21498ccfc8e33cf9f473009d980290965546ea804831807a82cca244001ba347d6c8137a85124e9c30fc6d0a14b2d4afddd99f6187c7965aee74808734a31494323f4036822100fd69bb8901a4a305a28a7f6954c"])
getpeername(r0, &(0x7f00000002c0)=@l2, &(0x7f00000001c0)=0x80)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0)
setuid(0xee00)
ioctl$TIOCCONS(r3, 0x541d)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r4, 0x5b14, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r5)
sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r6, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000000606010100000000000900020073797a320000000009000300736c8855b7797a30c91e5dae22e8a7fdab2968e38331e7ca1ac0c14a020da8390fd57d3cbeb45294e19c02a2b09deeb0b2b3c79491cab64f668650d47b4dd5c7df5d9ad513a3564896f3f2e556c67ec7b0668cff7c2f0e976c10c28b887093ecc5d60ea58de7ac3ddd7925410bee2062ea0f783c076549c56ba97d297c7c77ee14f645d249b799d123009167e3070e800a735f35f48e2f3364729f92d3dee5945d312b58127f79805a27987f7abb33b44cbd8ad4ae5f833718df2fd98369fd32"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r9=>0x0})
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', <r12=>0x0, 0x7800, 0x10, 0x80000000, 0x7ffffffd, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast1, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xa3, 0x0, 0x3, [0xcc]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r8, @ANYRESHEX=r2, @ANYRES32=r9, @ANYRES16=r1, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0c000180080003000300000078000180140002006d6163766c616e100000000000000000140002007465616d5f736c6176655f310000000014000215766cf1a030000000000000000000000014000200626f6e645f736c6176655f3100000000080003000200000008000100", @ANYRES32=r12, @ANYBLOB="1400020076657468315f746f5f626f6e640000001800018014000200776c616e3100"/44], 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x40000)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8002010}, 0xc, &(0x7f0000000800)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x710}}, 0x804)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="6854fc9df4cad6ade66af660fafe383ad2c69f32c5bc245d1bdd0554533310587ffeb3a77dc42d3d3f78265ba3725643cdc840a5dbf0f9c455495a1134c56ee707b36763bcbfdc0c6dcca8a88c9667c5ab158b107ec7e31ecb50dce5e64f2ef6bfd1ff14d7882f90bdd61ef07b68c0b51ccbc79a2780141065cb"], 0x0)
r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r13, 0x5101)

13m7.430269911s ago: executing program 0 (id=2197):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="528282b0119f6fdae127f54d91dd7e46f4696f03e610bd6e317afea1fb481e94a0738eab9c7b062b419e9585ae38a14e416c81f404d9", 0x36}]}, 0x2000c000)

13m7.430051081s ago: executing program 0 (id=2198):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0)
r2 = dup(r1)
write$nbd(r2, &(0x7f0000000240)=ANY=[], 0x10)
finit_module(r2, 0x0, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)

13m7.429595608s ago: executing program 0 (id=2200):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0xc800)

13m7.428313303s ago: executing program 0 (id=2201):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101301)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}]}})
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000000380)='s', 0xfffffffffffffe42, 0x10}) (async)
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000000380)='s', 0xfffffffffffffe42, 0x10})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="0034af616e2ae768435a57078427187118bc88b453b74ef9232e67dafb5dd493f701fe08d539e46b4fa9e300acce0aa69325"])
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x7) (async)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x7)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000115400)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000115600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0xfe, "930d0ba142b338"})
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x3, 0x0, [{0x0, 0x84, 0x0, 0x6, 0x4, 0x0, 0xb}, {0xa, 0x5, 0x0, 0x1000d, 0x2, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0xe, 0x1000}]})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000001100)=0xc) (async)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000001100)=0xc)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r12 = fsmount(r7, 0x0, 0x0)
r13 = openat$cgroup_procs(r12, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r13, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030001"], 0x0)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r14, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) (async)
ioctl$FS_IOC_RESVSP(r14, 0x40305828, &(0x7f0000000000)={0x0, 0x3})

12m51.943714259s ago: executing program 33 (id=2201):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101301)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}]}})
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000000380)='s', 0xfffffffffffffe42, 0x10}) (async)
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000000380)='s', 0xfffffffffffffe42, 0x10})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_team\x00'}, 0x18)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="0034af616e2ae768435a57078427187118bc88b453b74ef9232e67dafb5dd493f701fe08d539e46b4fa9e300acce0aa69325"])
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x7) (async)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x7)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000115400)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000115600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0xfe, "930d0ba142b338"})
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x3, 0x0, [{0x0, 0x84, 0x0, 0x6, 0x4, 0x0, 0xb}, {0xa, 0x5, 0x0, 0x1000d, 0x2, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0xe, 0x1000}]})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000001100)=0xc) (async)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000001100)=0xc)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r12 = fsmount(r7, 0x0, 0x0)
r13 = openat$cgroup_procs(r12, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r13, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030001"], 0x0)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r14, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) (async)
ioctl$FS_IOC_RESVSP(r14, 0x40305828, &(0x7f0000000000)={0x0, 0x3})

12m10.009749729s ago: executing program 2 (id=2494):
futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b})
setgroups(0x2, &(0x7f0000000040)=[0x0, 0x0])
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x8100)
move_pages(0x0, 0x43, 0x0, 0x0, 0x0, 0x6)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0xffffff80, 0x0, 0x7}})
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x7, 0x7fffffff, 0x2040000, 0x3, 0xfffffffd, 0x80000000}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000007c0)={<r2=>0x0, "5bb5d85ea96b18dfee2c44b34c54e607"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000002e00090025bd70000000000004000000320016"], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000017c0)={<r4=>0x0, 0xadf, 0x2})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x1f, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000003280)={0xe, 0x4, {0x3, @struct={0x9}, 0x0, 0x5, 0x6, 0xc023, 0x5, 0x1000, 0x0, @struct={0x2, 0x1}, 0xf4b, 0x1, [0x2, 0x1, 0x7, 0x8cb9, 0xffffffff, 0x10]}, {0xffffffffffffff80, @usage=0x1, r2, 0x6, 0x1, 0x172, 0x40, 0x8b8, 0x6f, @struct={0xff, 0x1}, 0x9, 0x3, [0x3, 0x4, 0x3, 0x6, 0x9]}, {0xfc, @usage=0x3ff, r4, 0xb5bf, 0x5427, 0x5, 0x9, 0x4, 0xa, @struct={0x1, 0x6}, 0x80000000, 0x7ff, [0x7, 0x9, 0x7, 0x6, 0x1]}, {0xfff8000000000000, 0x1142, 0x5}})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r8 = syz_usb_connect$hid(0x5, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "723000a0"}]}}, 0x0}, 0x0)
r9 = socket$kcm(0x29, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e)
getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r10, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x269}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001cc0)=""/55, 0x37}, {&(0x7f0000001d00)=""/25, 0x19}, {&(0x7f0000001d40)=""/254, 0xfe}, {&(0x7f0000001f40)=""/156, 0x9c}, {&(0x7f0000002000)=""/197, 0xc5}, {&(0x7f0000002100)=""/226, 0xe2}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x7}, 0x8}], 0x3, 0x122, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12m8.073691597s ago: executing program 2 (id=2506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x148}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x870bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x800, 0x58}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x0)

12m7.951236621s ago: executing program 2 (id=2507):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0683, 0x0)

12m7.949400871s ago: executing program 2 (id=2508):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x11)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x3, 0x0, 0x2, 0xea}, 0x7f, 0x6})
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x121900)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xa1, 0xef, 0x40, 0x5ac, 0x245, 0xa3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0x3, 0x4a, 0x2}}]}}]}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

12m6.670656117s ago: executing program 2 (id=2509):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340))
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1})
close(r1) (async)
close(r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) (async)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080))
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

12m6.510469431s ago: executing program 2 (id=2511):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000045000900000000000000000003e1ae90cc69e8d07ce2a33c649a9a53de9411a166266a249011000000"], 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000045000900000000000000000003e1ae90cc69e8d07ce2a33c649a9a53de9411a166266a249011000000"], 0x14}}, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001b00)={0x0, [{0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x2b, 0x0}, {0x2, 0x0, 0x44a, 0x0}, {0x2, 0x0, 0x6021d376, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xe872, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x616a, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x5, 0x0, 0x3d, 0x0}, {0x0, 0x0, 0xffffffff, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x3660, 0x0}, {0x1, 0x0, 0x5, 0x0}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x0, 0x0, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCEXCL(r5, 0x540c)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$video(&(0x7f0000000040), 0x7fffffffffe00003, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x2, <r8=>r5, 'id0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2, 0xa}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2, 0xa}}, 0x20)
ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000240)={0xe, 0xa, 0x3})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) (async)
ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{}, {}, {<r11=>0x0}]})
ioctl$DRM_IOCTL_GET_CTX(r8, 0xc0086423, &(0x7f00000002c0)={r11, 0x2}) (async)
ioctl$DRM_IOCTL_GET_CTX(r8, 0xc0086423, &(0x7f00000002c0)={r11, 0x2})
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x8, 0x1efc, 0x9, 0x10001, 0x4, "c1611279c45fc9be603c24c7a5eb005b4fe7cc", 0x8, 0xebb8})
ioctl$int_out(r6, 0x5460, &(0x7f0000000480))
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) (async)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7)
r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010002, 0x0, 0x7ff}]})
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x20, 0x19, 0x9e, 0x0})

11m51.08090983s ago: executing program 34 (id=2511):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000045000900000000000000000003e1ae90cc69e8d07ce2a33c649a9a53de9411a166266a249011000000"], 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000045000900000000000000000003e1ae90cc69e8d07ce2a33c649a9a53de9411a166266a249011000000"], 0x14}}, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001b00)={0x0, [{0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x2b, 0x0}, {0x2, 0x0, 0x44a, 0x0}, {0x2, 0x0, 0x6021d376, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xe872, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x616a, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x5, 0x0, 0x3d, 0x0}, {0x0, 0x0, 0xffffffff, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x3660, 0x0}, {0x1, 0x0, 0x5, 0x0}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x0, 0x0, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCEXCL(r5, 0x540c)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$video(&(0x7f0000000040), 0x7fffffffffe00003, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x2, <r8=>r5, 'id0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2, 0xa}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2, 0xa}}, 0x20)
ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000240)={0xe, 0xa, 0x3})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) (async)
ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{}, {}, {<r11=>0x0}]})
ioctl$DRM_IOCTL_GET_CTX(r8, 0xc0086423, &(0x7f00000002c0)={r11, 0x2}) (async)
ioctl$DRM_IOCTL_GET_CTX(r8, 0xc0086423, &(0x7f00000002c0)={r11, 0x2})
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x8, 0x1efc, 0x9, 0x10001, 0x4, "c1611279c45fc9be603c24c7a5eb005b4fe7cc", 0x8, 0xebb8})
ioctl$int_out(r6, 0x5460, &(0x7f0000000480))
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) (async)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7)
r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010002, 0x0, 0x7ff}]})
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x20, 0x19, 0x9e, 0x0})

4m59.976700947s ago: executing program 1 (id=4738):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0)
r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x180)
r3 = syz_open_dev$loop(&(0x7f0000001040), 0x5, 0x200)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x2)
r4 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="b9cb9d2134010f5e7a424c6bf28a2d1d6795a1e950e65f42215b2c66fbd97ab62cae8d81dce7373f85dcde17a64206de94cf1013eccce35a1f7e118f7cf6feb38032171b6fe474", 0x47, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r4}, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=[{0x13, '\x00', @buffer={"75b194f70c9c7c72dac2b196655d17d1d28b79007fea2c1fef645c95efc288e3", 0x20}, 0x401}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) (async)
add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) (async)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) (async)
syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x180) (async)
syz_open_dev$loop(&(0x7f0000001040), 0x5, 0x200) (async)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x2) (async)
add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="b9cb9d2134010f5e7a424c6bf28a2d1d6795a1e950e65f42215b2c66fbd97ab62cae8d81dce7373f85dcde17a64206de94cf1013eccce35a1f7e118f7cf6feb38032171b6fe474", 0x47, 0xfffffffffffffffd) (async)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r4}, 0x0, 0x0, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) (async)
ioctl$TCXONC(r0, 0x540a, 0x0) (async)
ioctl$TCXONC(r0, 0x540a, 0x1) (async)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) (async)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=[{0x13, '\x00', @buffer={"75b194f70c9c7c72dac2b196655d17d1d28b79007fea2c1fef645c95efc288e3", 0x20}, 0x401}]}) (async)

4m59.690671973s ago: executing program 1 (id=4739):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e22, @empty}})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)

4m59.690450173s ago: executing program 1 (id=4740):
syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200"})

4m59.636747518s ago: executing program 1 (id=4741):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x84054)

4m59.586467373s ago: executing program 1 (id=4742):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x8000000000000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "10"}, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000740)={0x60, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, &(0x7f0000000580)={0x14, &(0x7f0000000300)={0x40, 0xc, 0x86, {0x86, 0x2, "ea6e7934239c657909770d84cddfcc0d86949e877007032a9add2b712b2ec4ae29e3682c3e2f011b125e8a50f1396e55a5dccc395867f73d9f37a7e36b6d89bc00ed8dd38c8a846da9b0c2ab68a1c5d1e7c6601296fed38556e086a684a791cd2b466c2c41f257de74e28466c4beb9362dc4d801072887542d210c155347b1a505a64c22"}}, &(0x7f00000004c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "c2a4a8db68eb7af7cc0e7ba2dc67c84449fe7439e9840759148ef8b7cc243d2541b8b640c91fadb4d0d8fb454e1307ee8527107ef614cbdd6a99def91da987e36cc054e33b9a464ef43183cee7c4d39aef0d1c5e72f5c10fbe0a1cbfedab2244d56864c15089ee6ef67abdd8f625a1d0ea93cd36e8ed2e1d9d1e975bba034dab47f801c7e3b14f1d371d6279227ea287452cdda8124d"}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000640)={0x40, 0x17, 0xd3, "ad841d2a7b99390f06aabb50fd2882b92bdd2a5b55c97363a21f12f9bbc9cd8aef79e957b0151da6f4db21fc64c11df98e27a5f31a6c4630366a25e36b47c27d05ac0aaf6c2c9c247fbe2f324d05931658cb75ae5d2d4d841934052f838a89f65554cb94cb34dd625b35d6f72dfcd41d0a45c9285ced287c4c80e34c9bd43b413c96769bf18874c8ee79ff95bc1f6e786f443cf8a65664d40e4fe93366772bd7eb059aeab295651b0abdc3dd2df494df2cecf31be9a4227532082ff452fdce18182015a149229fa40b73e9a8d4b88681aca362"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000880)={0x20, 0x81, 0x3, "906519"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "52fd98"}, &(0x7f0000000900)={0x20, 0x83, 0x2, "76c5"}, &(0x7f0000000940)=ANY=[@ANYBLOB="2083e0038b2349"], &(0x7f0000000980)={0x20, 0x85, 0x3, "9d6f1f"}})

4m55.981917734s ago: executing program 1 (id=4755):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0xa9, 0x0}}], 0x2, 0x48094)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r3, 0x0, 0x0) (async)
write$cgroup_int(r3, 0x0, 0x0)
sendmsg$sock(r1, 0x0, 0x4008800) (async)
sendmsg$sock(r1, 0x0, 0x4008800)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r5, 0x4b72, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioprio_get$uid(0x3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
write$binfmt_aout(r4, 0x0, 0xff2e)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) (async)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15)
landlock_restrict_self(r6, 0xe) (async)
landlock_restrict_self(r6, 0xe)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}})
fcntl$setlease(r0, 0x400, 0x0)

4m40.160978946s ago: executing program 35 (id=4755):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0xa9, 0x0}}], 0x2, 0x48094)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r3, 0x0, 0x0) (async)
write$cgroup_int(r3, 0x0, 0x0)
sendmsg$sock(r1, 0x0, 0x4008800) (async)
sendmsg$sock(r1, 0x0, 0x4008800)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r5, 0x4b72, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioprio_get$uid(0x3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
write$binfmt_aout(r4, 0x0, 0xff2e)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) (async)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15)
landlock_restrict_self(r6, 0xe) (async)
landlock_restrict_self(r6, 0xe)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}})
fcntl$setlease(r0, 0x400, 0x0)

1.669293021s ago: executing program 5 (id=6637):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, 0x0, 0x24, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

1.637798021s ago: executing program 5 (id=6638):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)

1.315862673s ago: executing program 4 (id=6643):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56c", 0x2e}], 0x7, 0x4d9e, 0x8)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.206613977s ago: executing program 4 (id=6645):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
write$cgroup_int(r0, &(0x7f00000004c0)=0xffffffffffffff07, 0x12)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
pread64(r1, &(0x7f0000001100)=""/4080, 0xff0, 0x7f)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000040)=0xb74)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0xc4, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800002}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x3}}], {0x14, 0x10}}, 0x114}}, 0x0)

1.196408602s ago: executing program 4 (id=6648):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00', 0x9, 0xffff, 0x8, 0x400, 0x4dd1, 0x85000100})
getrandom(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x17, 0x1, 0xf8, 0xf, 0xe0, @multicast}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
open$dir(&(0x7f0000000040)='./bus\x00', 0x10000, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x10)
getrandom(&(0x7f0000000000)=""/52, 0x34, 0x2)

910.123085ms ago: executing program 6 (id=6653):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56c", 0x2e}], 0x7, 0x4d9e, 0x8)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

831.129684ms ago: executing program 6 (id=6654):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0x200) (async)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async, rerun: 32)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) (async, rerun: 32)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)

820.804255ms ago: executing program 6 (id=6655):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="91f680322baeeb0aada935ce8cb5dbf2e915aa2cf3f0fa0e7a1b257429ab44ff999d277e57a998e95d5ea594a2f6f8f5d6ac4acf180e61b71d4244acac10375e88e57cb0bfe42f876c9ccbe70872aadcc19116f4c1706d4726156964d7c5779b64270a9ffa3fca845f65f7e977f2b6f75ef4fb27cdc60ccae79411b0ddb6632ee5ce1b481cc0cf5f7188e4cac196e4895d801de537686957bb39eedc07358bdcfdfab45a180e3d4c35c1c5b4bdef3d293ab71807aa1cd1741385d731367eb913aaf99a9f74d8f6a25180182ed016d08979d2468e230e2329ebea15be733370e6", 0xe0}, {&(0x7f00000003c0)="2e9befe9851ff14bfd36aededa704a39e901a010c5a5cc798de98846bf4e2deb343e7663f8ad2ea6e927559972622349092edfd20c5a73df2fb9686c68d5c65bc2f0e6cf19366fa3c3bf1fa852af56e35e3af0e6759e34dd9ff5ae95a0e463cb", 0x60}, {&(0x7f0000000180)="782295f925022f", 0x7}, {&(0x7f0000000500)="a1f3a17b235a2ede7b8bad664fee00802b76aa2df6f605540ac2841ab0263979f760c50016008e588588aac5096cfa2fcd8225c8dd8fb800596bc49ab076c2a630df7561698134a61269c5b96d8119c4c011cf52ebf4d37b353692cbc729ea323f54e90a2bd975654a76fa286f8b92f1912e8b218c6d3198fcf7a09c69d05fee808156ebe29f0f3c4080f3cb6de6875d7f4209419533df07912fb9cf373dc5a225fffe42b2a0de99fa40c5cbc6c8857fc38c6f085e83bd600397b25201bf7ce130b9c850402c6f80c3408d51a53a4fd0ee5e2bf3c6b0e50092f225efbf7d8e35eca86855a2f7", 0xe6}, {&(0x7f0000000680)="7c6096ceaa91b384667762d0752e19f40d74826124bc849db7b778479a392cf61b84eff4e2e136dd2225cc2a0f64dc87b15a391c2be1ea96d6a29d1ef005806f2f36aec6f525d2171fde1caaafeaecb62a1d4cbb0262d1dc17523dd73e47d5429e1770abe7d44a8cad8f34459809a042dd51cd2b185edb56d70591c2583bf9909f9a69903fc44f5a49f3e44af65ed4ca4260711b2682f1e68d5558e79937192c0da87d52cdfe44bd9bca73acb1ff81c5244bb5625270e5de9d2840aafe8a9a407f0cc104c219c29cda591750f0ec135bbff583ba04f1c037db94192430f7d1e5dac8e9d0bad227dbcb583d2936cec101db6e5d6875c3c8a334ed4e02ead9d1eaa8b099233063283e4dd604458c7d2ac485799744ad8501fdbd4f7803e03bd4e56e9b5d0ba8e30bb288ecf6efab92e65b9c04ab458d544359272b53abfc1bbe5067e013a28894b6b1f1989384ed0a3bef13f3f6ce6e48d529fb7d190d9124882094c912fa51a24634a7a186445060dcce68a0477150ce763e2e28b38e7477842bf044a0bc2c988a510005fb88c8ad46bc14b94b90cab9bcaf20490ae5d84ee35d75076ade165550740b5532e89f999184f1a859f414742f2332fd33f4e05712ea8bddb9367c1730f6aeef14347e7ac0d0d34ad3eaeff5581686e585f1c555378a55e8640e4df683eec2fc218656c8f4c9867732b930a952a831b73bdd39730e42f4a7dc44efd2420bac768282e1f16a01a477e7d6e8d289273d8f89a42325776a8a51405fca2d488e6cc6aefcc1413e6b98c09c1d878a14c47ad92c225e2b5626e8eea9e6945e43a2851af20491fdadb076579f9030be805e1a473a8a8fc044b850a9c2a05f21cc3ba05d4d8f3caa199595172b36b7d63ffeec20e9217d7c57f75257952a5387ac9863fa52c2f351fe35862a60cb9d172f60f49e23ec8d491c76f3c37f41b59cd0db8e3df4b9cfc4050d7ac2c36c41e73168c6492d712f75dc2f9c615441c85f00dcb36743ccfd809af03b5809d195576d08fb3fb26c70780b5f6b3ddb12ae3e50a20a6a2f7c4f9a207aeac7048a913fdc10441be4babe6ff5017203c9ffb87466ee72a463ecdcba39338da9092eb4d4b1df33ed20810c7b32ea0d657baaf0ab6e638154df7991378036600d0c44518a64232286eadef492261934819156efae65df1db70263f0202d319446561fa95d01778fd41cdcdd62e855610f7ad0f359fdcd351e8cc707b985c932e8ed7025601e8a8a19612eca10908730f322d31ac288c8eae20f94b363d8f4fcfe9d237f96e0d3c4b7a64eddb1a266159acce96053c920f8872211f7c939306aea91ed898bc5cb58a84b85dd57e59ad78cbc150e881cd8094d8d7dd10c4345d0e4d3a5103f9e2e0466f6b84381ac8a34dc15366a20a96d0df7c87a1ab7342019b6cda5cb6aee71ec144f08cb33f7958155a61adfe1b3e766770384544ff4e6aacbf8de74e79899eba6994444eea5c41146e08545e5cb5fcf47229ffbcd4b0535e04f6aa049c2f5480745a5cec9c1d61fc41c593ad579271f430d40a7e85bac90663ac1ff4257979658943cd7ff6222d9708b46f1ec68aeed1156fece48638ccd49e663a27c803a5dbec2afec7e240f1b7247b89d6eee8a503815226f087c2847cd10aa5e2e8603a216046ebf098ac1e3a6e43281c23865edb6bc384c8a6218bdb52afda7e0b2e3673311b1d13b8189da2c8af00f56c66629a6378730f7ed7ab202c373eb4e8609f8f26e0bfa2904969d660e262cbcd801295628e90942b733b495a8b24d99809d0c31e455c4372e28e399f783429c457daee0cd1fccd041715744c1e80211497a3093e833f9307f9048fe0dc13d74c44c002e7396c5dfdee01d1b1876ddb3edc79f81b49317062db74211f3fea8f1ebcd5f7783953fef43ac9e234eae9817e5bd4304fdcbb09deacdb05966f2366630ca3bfa4571f61033f0cbe39f3f1ba3cc9b9b0e926379003270f249f3d70e11e0028f3c3754e66db5841d27b79942029110113b170ab59621b0a9d9240059c30da4bba47af58eec3b1e073ac58e8f833ac83a0a93999a34e0c42837851e56a4aee702f3fa196b5705b471c79db0502de151808ad40198c07e1e6dd5d6dd36741771ec0786226fd21e01953a898ebd0d8f9db9d0a5069baca8cdcd807f080517b979252e42dc1ffd6798127487810e08679e25fa66ab76b26b18fd1459d0701fe953c7be11ba403d7550741ca41d00dba3c8b3f7e6b718716913bd325182968621fbbf67fcce4a4c27466d10b6bf689762d7e1af804ec83785c401453e2e8f4cff4c344688511ba4839499a837dadaceff1b71d43e89609bd54436ac69e525e6029be3bdad8e30c506685142b39420d1062809d5e2061da843d5493980f26ebb2ab1541e7cbef21142b216e39a2442b15aa4fc4fe151f5f00e158f9380b77bf83127d9900962e2fdc1ae0d0e9b289bd6df0ba5c4a3e79890672027b97f3a1f3fb8318a96ad440a14e8c6eb7d7f340bbd77b988f175462bf99301a7796c0a50f6737d547508f191fec46583f87d26e9b8fa21ad37e01417a18641c59d6496d8d56f91445c8296a3642c1d1ac088451ff728e24535ca0be344d412b68343d0d9d9ddcd1fdce0f0f9cfa51ea965e49f1b17242d2da3bdc00578740ae06593f95bae1411b8afcf4d1e0aa8dd09c32d403fd9c630e01d7a81829a35cc93a669754f9e1b004ae46b04683f7cf2604f23469813ada11c9750c5945d7c487945405c850c9e66a08c6a22f56055e2f897e8190a54796db551ea2c5bdddff30b7dd6d08a737b969e41c1d76129e1daf82ed29c5a4794cc366cf38262156eb3f700e6aa397cd86e48dd198a544e158448de52c23cb050c96da1a063da2bc4929f0f7dd9f71961325e02e6043367189b3b6d08fc8e8abead88e70fa22672c2ec9d0817d4cb979ffc14a7504c6b1d55f809624eb5c3b926ef1b195e1b57218299f2f19ebfb9366815eacc5739de0245694d3f1100de6976979dc4e27c9ca29d729f286deab6d490495b6f7fdcbd6c11877e68e7a202c34c390b1e5b45ff8a22a6f163949e5f282c8deef1d7babff8eba9e837c36a51f367cef7319b8376d2533925b1d1b9ccb90e6c0919669b12bca4ea592f04a9f3e7e4801620da33597b25572737c5786509a0aeb43da305d0df72789c4358b09f8a8fec6addcb2172376d18876113f8835de2778ae4fa2348687dbff6aa94067b40a4e2432be4363298235ebec8d1c17e6661a4e7e96093741ddddb763a33c08a52bd5d823f53dcf5427ca72ebc2483f4bfb2983d9149f2a0e720cffb3831b3aaaaa345c1b78fe9dcd23e7cb2899c6df47cebb085c95d682f40e86d177225a97c31eff0065f1283337203ede3b94a62f751e6ca0da6b6737a6108206a1d4f56a2b1f53d813c83977d44aed624e3febf77715491968eb5fea92ba83d677aa8b395880b72c3b8fdbbff930ba12d2b089d442fc086aad82195531bf1fc9e0a51ecd0f1e63b10c6d96b1386c68550ec29605708f89c30e56df93d01582e1a547705512c3980cb2ebf25a005ab051f06b8a84ebb8adad1d6e13460ef2ace67aaa7ab0b31ffff0fdaa98f81c5b1f60436071a131aa6456eae4dda97887a1cf6a6e2db15f7d416f6d115bb705410e9594c0bbe3406e85c9f4416b505d61d75d601587fca888ce9043114ac070e9b17d0e2e36a2f8318ec23da42e437f157865b054cd91d45455851262d3793f4d2877d954c1dc2dd644df2ed6446eb4b0d3e5aebb6d8edb6ff6fb21c48dde53c4ea52981f11aee42ad0ae5d288efb5d23db8387298c2789d6170aaf4a90c202cc49b2e053962e9fe9df53f1bf2dcbd45fc58e13f2ce606bac65e4b8d54be37f08d90250cf507c0613b42ab90a297d8240e45ed378f2b23a44104bb8c2b6c8360a84991aef2d72e7eba2872a3e97e1e8baf943de3700a9bb589810b6d595706b4284f7f38647465199d08187575bb4b26b00a2609dffb01f89abc6649e2a655bcdfa153bb1e48e5b5a6885499d6e69be2ccad2cb1fdab48c3f3533a6a6689ec73eea5d7e9f9dbdcad0016cdfe545d1584cd91c265e85eaad4655c170711757d5a50154f2dc6ca407fe92c41b1b9a25471d049c2b155d66f803be78d46c9598868f33cfb7f6faa98a04e3d00fc0ee9c5050c49de5a359cc491876fc275bb65c1f34fef41d5df8d3e634ee63a075cd94c089adc0d54afb594d9efa355529f254ec032df122ba22438ed85d3040200ce1f3f10f8ad746298b9b69ebc7e2f2820db87fb3228ebf7079d7835d892708bd5982c9e0fc43a62885f39f17ee0705ee811292dddc04580b5395c3c345a2d02ac73f7b0c75ad12435654b55aecef2e1894211ab00f74f693603fa94cba2d44220a8adebfaf6cac170741e3671b613bf77ec47e8ecb3e5594c66d39dc4291b9ec679164155507f95040cdbac0ff1778dd622c67bd2c8ca7ffc795119d40b65e2a8fdf77646bb3109dbc21496e0fe576d2af6655b2995cd6f89dd58ddda2ba3fbcf2fa6ddc93d53fe3a332589536e15a916f7611ddc2bc1c5641fdd7eab4a0459f2571879aaf48daffdd284bc9f0d673ff0cd1f9017715a717293f827e291b9988a715cff8dcbc8048fda375c38f04ddfe60b6de5397a9e8e51da66c1848f071eddf2183f34a5c1ae6fa4fee8e0cc3b7dab015cc7cc14fe9d4b87fd2e3099d34c1b2d0e810e1cec2c877000ba88c1aeeb3a9d0188d5d34fd8e596a18d003f7189b9ae50569838867b8ddb45fe5057cd40c68050f77ca8e9a2efef2e46a8149f92de029cdb25cf24eff502f055a9318373a47aa166c18db4f3fa1eaae3c4856633d9fcd2d1a1dba7c580f4140e801ded0c3764dc99ca02da79ee90689cea79d53d080dc31387db9378b84dd0ac1744912de7431e4bb4b2372fdae7333b5751c372be9ac5f3e04114206f38853a95b25b79d74da72ec8d8ba58ef7cbcb0fd51c60994629e6852c9c630e1f2cfe0b4285b1321f36498fa0d3a739c3029755d34ff36a4eb17b7c494af3a53e362d683f94a6ce0d042088109854eedd3f3e522e82914c9b49b39d421c3b3312576a1848339f99adc60ed9439be106475f5d4bf8ac27d0a79aef9354936e8929c345d0c3067916440a9837f842f8e1905111d90c1e2a2d8f21f60bcb70a720228e1ac27197388a3072f799b6b50d929513e24afd6342fe79c2b69c092b2e959467459b2b666f075eaa7d3c8f145dec97b89dfb054600eb4e54fd69095c34bee0dc7d953fd394c294ff5afc66d34dfde8ceb95d533e358a6fe85739b34483c3cb693422dcedf9994841697bbaac0119ac1525a45fa950376cec4edeafae1951a03129caf54bef100fabdc7fe1f39500e3acfa90c58232a42c7d02dd64e0b74a6c1ba7ce372de162e0509f4e38659135a30610d2088533dc3f94aedfc0fb98221718f92f28a281ae2e844b3aa2e9335472a4c58323d1bc46af6dbeeb95c3d4eeb9cd22ec40c6aa888785fe774d4d888c3f95db8ed134e44847d7fdd2840329f3217eef1eacc3e8ea435b9eb74ba5556f9ff571246fb658eb5b2893d968897d849290cc6e65dc16ecde824013d106b977ffad4759823401f9ec641400c4f6dd2b90e79da367d94268f05ddcc7f7937b23a1d546feef390174fc52b1a7feb5c2ae1cee194c758a788d3486447014f27435ae79a58c89301b9966755b77362704106aecfd2773306cc6753688eefc474d02682a0fd168492c7fec30d45a29197f29edee6e6ee9d860b6e611385e0", 0x1000}, {&(0x7f0000001680)="5cdafd11cea6e49cb1f3f8e935f8a7c94ce06bf7c07b012a8a6a2713c5b767a8ffdd228de4b994bc7c8050967d705f7528160b01808d503db7ce8fd6fbf3d0da7f14112f63c4430e94a02f247c230f2b6b25cfe1b137802e14c68500e7ae8f1f7326fd10da13e10842406e8e0d386e877b6fa1db9580f4006b16a01d775499fc4d3ffdcb51a8dacce87be15a4b74f8fd33b458e1a5ffb4a55f474ac1c43bdd86d8cb2c0a9b19206d19ae6599848aeb39db1bca7b88617b331f7f3fc686cfc5867b20f3906afb888e24ffb125d9b3398189ce404c0f2e8477a33d3a1ea9b84139bc8f8d7f26d7", 0xe6}, {&(0x7f0000001780)="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", 0x1000}], 0x7, &(0x7f0000002780)=[{0xa0, 0x109, 0x5, "0dac328f220fee22a2388718f542ad0cb1e58f3d492b5410a841469891831a59d1dc993dc79e530bf11c349af7b1d0779855d7f28c0e4416e6f0e151546cce380f8a07e289972b8f7fcc6de54e26faa73d37e6451c992987ca470a045f3d365a933351bb5a01140c466b7db25eaf499788a1f0a761f349e52214da42e4ae55fc7b3bfb1989b738d3de12d7a4e4a8"}, {0x28, 0x109, 0xfffffff8, "0824780de90326348d54f512b9ed9f86a47f7eca72b8d1"}], 0xc8}}], 0x1, 0xc004)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x8, 0x30, {0x30, 0x30, "81fa444ddb270b1d87ff7a89b8231a45343f0116d3521a0034012ae751b7561c705d2c817d4eda405a7a1ee3f975"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2100012})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1d, 0x8, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffffff, r0, 0x0, 0x0, 0x0)

769.331012ms ago: executing program 5 (id=6656):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3400000000000000000200000700000007240d"], 0x38}}], 0x1, 0x46000)

695.473194ms ago: executing program 5 (id=6657):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3})

695.194825ms ago: executing program 5 (id=6658):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r2, r3, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0)
r5 = dup2(r4, r0)
pwrite64(r0, &(0x7f00000003c0)='@', 0x1, 0x100001)
write$dsp(r5, &(0x7f0000000200), 0x0)

674.194897ms ago: executing program 5 (id=6659):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3e, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x2, 0xffffffffc8110f4f, 0xd, 0xffff, 0x1ff, 0xffeffffa, 0x0, 0x0, 0x10, 0xffff}}, 0x50)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)

650.874536ms ago: executing program 7 (id=6660):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x2, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10)
socket(0x1, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

559.397406ms ago: executing program 4 (id=6661):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x8101, 0x0)
r5 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x3)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000009c0)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x864, 0x5e, 0x200000000000, 0x100000000000006})
ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000000)={r1, 0x4})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_print_times', 0x8000, 0x8)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x3})
syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')

419.598766ms ago: executing program 4 (id=6662):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

380.699662ms ago: executing program 7 (id=6663):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00')
preadv(r2, &(0x7f00000001c0), 0x0, 0x33, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000)
fadvise64(r0, 0x5, 0x7, 0x5)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r0, &(0x7f0000019880)=[{&(0x7f00000000c0)="fb1eaaaf9eacbfe5a3516e8acdd0d73e12f9d7e06d0f74ac10768668205a68d96e134a3fb78677305fe84198411f46c5fe7549593aac006c4975d06de3623b93c6dc31977e47b3ca2a72b6550a540634787c3a71239ab70df26d756c992ed15dbac4dae8cf72a483f71882d56e7cbdc2457ee38ff7b53403546dca0000000000000097d853a8c6977637fe6cfacd90a96676f0e605028466d2c9f0756c44eec4bb19ab1e208a3e53a986c89126bc601feb724c74c38ab6afe3132fa9926708513fba68a60d0d100200008c6f711fe99eb7e0ce0fa340aed17b40e8ce647934faa2e3dba875d97300"/253, 0xfd}], 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0x61ad0000)

355.372079ms ago: executing program 4 (id=6664):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)

250.799256ms ago: executing program 7 (id=6665):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x335, 0x0, 0x0, 0x81, 0x42}, 0x10)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd30, 0x25dfdbfd, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
listen(r0, 0x2)
accept4(r0, 0x0, 0x0, 0x80800)

226.746565ms ago: executing program 7 (id=6666):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)

168.74285ms ago: executing program 6 (id=6667):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r2, r3, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0)
r5 = dup2(r4, r0)
pwrite64(r0, &(0x7f00000003c0)='@', 0x1, 0x100001)
write$dsp(r5, &(0x7f0000000200), 0x0)

82.961488ms ago: executing program 7 (id=6668):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x10000, 0x10, 0x2, 0x7e70, 0x7ffffffffffffffb, 0x6, 0x95})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

82.712413ms ago: executing program 6 (id=6669):
mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000200)={[{@dyn}]})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001d0040000000", 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[])
mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000200)={[{@dyn}]}) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001d0040000000", 0x24) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) (async)

187.69µs ago: executing program 7 (id=6670):
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x40)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2)

0s ago: executing program 6 (id=6671):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080), 0x4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10)
socket(0x1, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

kernel console output (not intermixed with test programs):

hid-picolcd 0003:04D8:F002.0044: No report with id 0xf3 found
[ 1069.727396][   T24] hid-picolcd 0003:04D8:F002.0044: No report with id 0xf4 found
[ 1069.759429][ T6377] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1069.799760][T28051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.808844][T28051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.818448][ T5946] usb 6-1: USB disconnect, device number 27
[ 1069.909304][ T6377] usb 8-1: Using ep0 maxpacket: 8
[ 1069.916811][ T6377] usb 8-1: config 0 has an invalid interface number: 151 but max is 1
[ 1069.925277][ T6377] usb 8-1: config 0 has no interface number 1
[ 1069.931503][ T6377] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1069.942684][ T6377] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[ 1069.954582][ T6377] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[ 1069.966968][ T6377] usb 8-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1069.978228][ T6377] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1069.993378][ T6377] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1070.005139][ T6377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1070.017465][ T6377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1070.032637][ T6377] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[ 1070.041820][ T6377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.050079][ T6377] usb 8-1: Product: syz
[ 1070.054258][ T6377] usb 8-1: Manufacturer: syz
[ 1070.058861][ T6377] usb 8-1: SerialNumber: syz
[ 1070.065878][ T6377] usb 8-1: config 0 descriptor??
[ 1070.071988][T28087] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[ 1070.081995][ T6377] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1070.098184][ T6377] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1070.311113][T28087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1070.327190][T28087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1070.352858][T28087] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1070.372978][T25809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1070.388629][ T5946] usb 8-1: USB disconnect, device number 11
[ 1070.543233][T28099] program syz.5.4867 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1070.634903][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4868'.
[ 1071.530314][ T5946] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1071.670905][T26866] usb 8-1: new low-speed USB device number 12 using dummy_hcd
[ 1071.690252][ T5946] usb 6-1: Using ep0 maxpacket: 8
[ 1071.697405][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1071.706509][ T5946] usb 6-1: config 11 has an invalid interface number: 189 but max is 0
[ 1071.714835][ T5946] usb 6-1: config 11 has an invalid descriptor of length 63, skipping remainder of the config
[ 1071.725461][ T5946] usb 6-1: config 11 has no interface number 0
[ 1071.732319][ T5946] usb 6-1: config 11 interface 189 altsetting 120 has a duplicate endpoint with address 0x4, skipping
[ 1071.744099][ T5946] usb 6-1: config 11 interface 189 altsetting 120 endpoint 0x7 has invalid maxpacket 49152, setting to 1024
[ 1071.755817][ T5946] usb 6-1: config 11 interface 189 has no altsetting 0
[ 1071.764582][ T5946] usb 6-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=33.84
[ 1071.773870][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.781941][ T5946] usb 6-1: Product: syz
[ 1071.786121][ T5946] usb 6-1: Manufacturer: syz
[ 1071.791006][ T5946] usb 6-1: SerialNumber: syz
[ 1071.822886][T26866] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1071.832183][T26866] usb 8-1: config 2 has no interfaces?
[ 1071.842819][T26866] usb 8-1: string descriptor 0 read error: -22
[ 1071.849109][T26866] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=a4.c4
[ 1071.858321][T26866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.006811][ T5946] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones
[ 1072.023480][ T5946] usb 6-1: USB disconnect, device number 28
[ 1072.073853][ T5919] usb 8-1: USB disconnect, device number 12
[ 1072.292205][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1072.645880][T28137] vivid-000: =================  START STATUS  =================
[ 1072.662984][T28137] vivid-000: Test Pattern: 75% Colorbar
[ 1072.680977][T28137] vivid-000: Fill Percentage of Frame: 0
[ 1072.686728][T28137] vivid-000: Horizontal Movement: No Movement
[ 1072.698162][T28137] vivid-000: Vertical Movement: Move Down Fast
[ 1072.705800][T28137] vivid-000: OSD Text Mode: All
[ 1072.713779][T28137] vivid-000: Show Border: false
[ 1072.719225][T28137] vivid-000: Show Square: false
[ 1072.739302][T28137] vivid-000: Sensor Flipped Horizontally: false
[ 1072.751165][T28137] vivid-000: Sensor Flipped Vertically: false
[ 1072.757296][T28137] vivid-000: Insert SAV Code in Image: false
[ 1072.766216][T28137] vivid-000: Insert EAV Code in Image: false
[ 1072.776630][T28137] vivid-000: Insert Video Guard Band: false
[ 1072.784648][T28137] vivid-000: Reduced Framerate: false
[ 1072.790181][T28137] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[ 1072.800378][T28137] vivid-000: S-Video 000-0 Is Connected To: None
[ 1072.810016][T28137] vivid-000: Enable Capture Cropping: true
[ 1072.816742][T28137] vivid-000: Enable Capture Composing: true
[ 1072.825996][T28137] vivid-000: Enable Capture Scaler: true
[ 1072.832841][T28137] vivid-000: Timestamp Source: End of Frame
[ 1072.839405][T28137] vivid-000: Colorspace: SMPTE 170M
[ 1072.846016][T28137] vivid-000: Transfer Function: Default
[ 1072.854598][T28137] vivid-000: Y'CbCr Encoding: Default
[ 1072.860136][T28137] vivid-000: HSV Encoding: Hue 0-256
[ 1072.871638][T28137] vivid-000: Quantization: Limited Range
[ 1072.877900][T28137] vivid-000: Apply Alpha To Red Only: false
[ 1072.892126][T28137] vivid-000: Standard Aspect Ratio: 4x3
[ 1072.898667][T28137] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[ 1072.910799][T28137] vivid-000: DV Timings: 640x480p59 inactive
[ 1072.917027][T28137] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[ 1072.926160][T28137] vivid-000: Maximum EDID Blocks: 2
[ 1072.934060][T28137] vivid-000: Limited RGB Range (16-235): false
[ 1072.940460][T28137] vivid-000: Rx RGB Quantization Range: Automatic
[ 1072.948764][T28137] vivid-000: Power Present: 0x00000001
[ 1072.955131][T28137] tpg source WxH: 720x576 (R'G'B)
[ 1072.960245][T28137] tpg field: 4
[ 1072.964766][T28137] tpg crop: (0,0)/64x64
[ 1072.969105][T28137] tpg compose: (0,0)/16x16
[ 1072.973638][T28137] tpg colorspace: 9
[ 1072.977570][T28137] tpg transfer function: 7/1
[ 1072.982271][T28137] tpg quantization: 1/1
[ 1072.986445][T28137] tpg RGB range: 0/2
[ 1072.990401][T28137] vivid-000: ==================  END STATUS  ==================
[ 1073.580404][T28156] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4885'.
[ 1073.590512][T28156] unsupported nlmsg_type 40
[ 1073.941334][ T5946] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1074.091394][ T5946] usb 6-1: Using ep0 maxpacket: 32
[ 1074.099182][ T5946] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1074.108023][ T5946] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1074.118302][ T5946] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1074.129185][ T5946] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1074.139047][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.148012][ T5946] usb 6-1: Product: syz
[ 1074.152307][ T5946] usb 6-1: Manufacturer: syz
[ 1074.157399][ T5946] usb 6-1: SerialNumber: syz
[ 1074.304516][T28163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4888'.
[ 1074.383982][ T5946] usb 6-1: 0:2 : does not exist
[ 1074.462627][ T5946] usb 6-1: USB disconnect, device number 29
[ 1074.518464][T28091] udevd[28091]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1075.341984][T26866] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1075.493254][T26866] usb 6-1: Using ep0 maxpacket: 8
[ 1075.499821][T25809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1075.516408][T26866] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1075.526342][T26866] usb 6-1: config 9 has an invalid interface number: 5 but max is 1
[ 1075.534450][T26866] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.545255][T26866] usb 6-1: config 9 has 1 interface, different from the descriptor's value: 2
[ 1075.554460][T26866] usb 6-1: config 9 has no interface number 0
[ 1075.560574][T26866] usb 6-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping
[ 1075.571239][T26866] usb 6-1: config 9 interface 5 has no altsetting 0
[ 1075.580197][T26866] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[ 1075.589389][T26866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.597503][T26866] usb 6-1: Product: syz
[ 1075.601665][T26866] usb 6-1: Manufacturer: syz
[ 1075.606307][T26866] usb 6-1: SerialNumber: syz
[ 1075.828953][T26866] usb 6-1: USB disconnect, device number 30
[ 1075.962378][ T6377] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1076.112372][ T6377] usb 8-1: Using ep0 maxpacket: 32
[ 1076.119015][ T6377] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1076.130848][ T6377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1076.145585][ T6377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1076.156929][ T6377] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1076.166470][ T6377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.177693][ T6377] usb 8-1: config 0 descriptor??
[ 1076.183640][T28176] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[ 1076.192975][ T6377] hub 8-1:0.0: USB hub found
[ 1076.370543][T28178] ptrace attach of "./syz-executor exec"[27073] was attempted by ""[28178]
[ 1076.396265][ T6377] hub 8-1:0.0: 2 ports detected
[ 1076.622634][ T5868] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1076.773125][ T5868] usb 6-1: Using ep0 maxpacket: 8
[ 1076.782125][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1076.791394][ T5868] usb 6-1: config 140 has an invalid interface number: 182 but max is 1
[ 1076.799883][ T5868] usb 6-1: config 140 has no interface number 1
[ 1076.804166][T28176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1076.807595][ T5868] usb 6-1: config 140 interface 182 has no altsetting 0
[ 1076.819216][T28176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.829354][ T5868] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[ 1076.834072][T28176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1076.841264][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.849552][T28176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.858990][ T5868] usb 6-1: Product: syz
[ 1076.867983][ T5868] usb 6-1: Manufacturer: syz
[ 1076.873219][ T5868] usb 6-1: SerialNumber: syz
[ 1077.093570][ T5868] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I
[ 1077.282650][T28176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1077.292055][T28176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1077.595761][T28182] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.4896'.
[ 1077.696797][T28188] overlayfs: workdir and upperdir must reside under the same mount
[ 1077.733712][ T5868] usb 6-1: reset high-speed USB device number 31 using dummy_hcd
[ 1078.021573][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1078.050071][ T5868] usb 6-1: device firmware changed
[ 1078.056314][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1078.082366][ T5868] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1078.108000][ T5868] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 1078.127958][T26866] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[ 1078.155723][ T5868] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I
[ 1078.166279][T26866] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[ 1078.174776][ T5868] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1078.197321][ T5868] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 1078.222890][ T5868] usb 6-1: USB disconnect, device number 31
[ 1078.234136][ T5868] usb 6-1: [ueagle-atm] ADSL device removed
[ 1078.297612][T28209] AppArmor: change_hat: Invalid input '9'
[ 1078.335864][   T29] usb 8-1: USB disconnect, device number 13
[ 1078.351249][ T6377] hub 8-1:0.0: hub_ext_port_status failed (err = -71)
[ 1078.843705][   T29] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1078.891846][T28215] tmpfs: Bad value for 'size'
[ 1078.897560][T28215] netlink: 'syz.7.4906': attribute type 1 has an invalid length.
[ 1078.949043][T28217] netlink: 774 bytes leftover after parsing attributes in process `syz.7.4907'.
[ 1078.960610][T28217] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4907'.
[ 1079.003787][   T29] usb 6-1: Using ep0 maxpacket: 16
[ 1079.012337][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1079.029663][   T29] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1079.056792][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.065166][   T29] usb 6-1: Product: syz
[ 1079.069428][   T29] usb 6-1: Manufacturer: syz
[ 1079.074153][   T29] usb 6-1: SerialNumber: syz
[ 1079.092598][   T29] usb 6-1: config 0 descriptor??
[ 1079.108118][   T29] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1079.119586][   T29] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 1079.196923][T28231] binder: 28230:28231 ioctl c0306201 0 returned -14
[ 1079.207335][T28231] binder: 28230:28231 ioctl c0306201 2000000000c0 returned -11
[ 1079.217206][   T30] audit: type=1326 audit(1771767455.430:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28230 comm="syz.7.4911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x0
[ 1079.722650][   T29] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1080.186663][   T29] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1080.197381][   T29] em28xx 6-1:0.0: board has no eeprom
[ 1080.274397][   T29] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1080.282562][   T29] em28xx 6-1:0.0: dvb set to bulk mode.
[ 1080.289792][ T5868] em28xx 6-1:0.0: Binding DVB extension
[ 1080.305534][   T29] usb 6-1: USB disconnect, device number 32
[ 1080.325692][   T29] em28xx 6-1:0.0: Disconnecting em28xx
[ 1080.351319][ T5868] em28xx 6-1:0.0: Registering input extension
[ 1080.359158][   T29] em28xx 6-1:0.0: Closing input extension
[ 1080.370802][   T29] em28xx 6-1:0.0: Freeing device
[ 1080.589978][T28252] overlayfs: conflicting lowerdir path
[ 1080.616223][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1081.046040][    T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1081.207182][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1081.216988][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1081.226699][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1081.242328][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1081.251481][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.259809][    T9] usb 6-1: Product: syz
[ 1081.264861][    T9] usb 6-1: Manufacturer: syz
[ 1081.269499][    T9] usb 6-1: SerialNumber: syz
[ 1081.279244][    T9] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1081.285274][    T9] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1081.482373][    T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1082.205323][    T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1082.335383][    T9] usb 8-1: device descriptor read/64, error -71
[ 1082.533042][   T29] usb 6-1: USB disconnect, device number 33
[ 1082.542208][   T29] usblp0: removed
[ 1082.576791][    T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1082.705635][    T9] usb 8-1: device descriptor read/64, error -71
[ 1082.816737][    T9] usb usb8-port1: attempt power cycle
[ 1083.166069][    T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1083.176885][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1083.188669][    T9] usb 8-1: device descriptor read/8, error -71
[ 1083.375970][ T5938] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1083.436009][    T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1083.456448][    T9] usb 8-1: device descriptor read/8, error -71
[ 1083.526012][ T5938] usb 6-1: Using ep0 maxpacket: 16
[ 1083.534871][ T5938] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 1083.544131][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.552252][ T5938] usb 6-1: Product: syz
[ 1083.556573][ T5938] usb 6-1: Manufacturer: syz
[ 1083.561195][ T5938] usb 6-1: SerialNumber: syz
[ 1083.567346][    T9] usb usb8-port1: unable to enumerate USB device
[ 1083.574616][ T5938] usb 6-1: config 0 descriptor??
[ 1083.583543][ T5938] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 1083.592068][ T5938] usb 6-1: Detected FT-X
[ 1083.881080][T28281] input: syz0 as /devices/virtual/input/input125
[ 1084.051081][T28286] bond_slave_1: entered allmulticast mode
[ 1084.062258][T28286] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4929'.
[ 1084.204518][T28288] netlink: 'syz.4.4930': attribute type 10 has an invalid length.
[ 1084.214711][T28288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.227468][T28288] bridge_slave_1: left allmulticast mode
[ 1084.234188][T28288] bridge_slave_1: left promiscuous mode
[ 1084.241354][T28288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.255027][T28288] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1084.259190][T28289] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1084.274106][T28289] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[ 1084.283002][T28289] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1084.291089][T28289] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[ 1084.385425][T28294] 9p: Bad value for 'rfdno'
[ 1084.392139][T28294] 9p: Bad value for 'rfdno'
[ 1084.797243][T28320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4939'.
[ 1085.028763][T28322] netlink: 'syz.7.4940': attribute type 27 has an invalid length.
[ 1085.036931][T28322] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4940'.
[ 1085.506955][    T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1085.664415][    T9] usb 8-1: config index 0 descriptor too short (expected 2340, got 36)
[ 1085.675168][    T9] usb 8-1: config 5 has too many interfaces: 33, using maximum allowed: 32
[ 1085.685678][    T9] usb 8-1: config 5 has an invalid descriptor of length 34, skipping remainder of the config
[ 1085.696517][    T9] usb 8-1: config 5 has 0 interfaces, different from the descriptor's value: 33
[ 1085.706421][    T9] usb 8-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[ 1085.715970][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.101425][ T5938] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1086.108964][ T5938] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1086.118681][ T5938] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[ 1086.127459][ T5938] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1086.141026][ T5938] usb 6-1: USB disconnect, device number 34
[ 1086.152213][ T5938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1086.162357][ T5938] ftdi_sio 6-1:0.0: device disconnected
[ 1086.379165][T25809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1086.517677][ T5938] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[ 1086.669909][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1086.678740][ T5938] usb 6-1: not running at top speed; connect to a high speed hub
[ 1086.688159][ T5938] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[ 1086.702199][ T5938] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[ 1086.711380][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.719809][ T5938] usb 6-1: Product: syz
[ 1086.723995][ T5938] usb 6-1: Manufacturer: syz
[ 1086.728649][ T5938] usb 6-1: SerialNumber: syz
[ 1087.578160][ T5938] usb 6-1: reset full-speed USB device number 35 using dummy_hcd
[ 1087.761108][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1087.775175][ T5938] usb 6-1: device firmware changed
[ 1087.791113][ T5938] usb 6-1: USB disconnect, device number 35
[ 1088.216092][ T5868] usb 8-1: USB disconnect, device number 18
[ 1088.469502][T28344] cgroup: Unknown subsys name 'seclabel'
[ 1088.568416][ T5868] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1088.586729][T28349] kvm: pic: non byte write
[ 1088.720314][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1088.731351][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1088.742417][ T5868] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1088.751569][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.761626][ T5868] usb 8-1: config 0 descriptor??
[ 1088.940119][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1088.972650][T28338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.981815][T28338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.194916][ T5868] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0
[ 1089.202507][ T5868] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0
[ 1089.210068][ T5868] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0
[ 1089.217639][ T5868] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0
[ 1089.225375][ T5868] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0
[ 1089.234796][ T5868] playstation 0003:054C:0DF2.0045: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0
[ 1089.371589][T28356] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4950'.
[ 1089.385789][T28356] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1089.397235][T28356] overlayfs: failed to set xattr on upper
[ 1089.403322][ T5868] playstation 0003:054C:0DF2.0045: Failed to retrieve feature with reportID 9: -71
[ 1089.417744][T28356] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1089.430554][ T5868] playstation 0003:054C:0DF2.0045: Failed to retrieve DualSense pairing info: -71
[ 1089.439919][T28356] overlayfs: ...falling back to index=off.
[ 1089.448222][T28356] overlayfs: ...falling back to uuid=null.
[ 1089.454342][ T5868] playstation 0003:054C:0DF2.0045: Failed to get MAC address from DualSense
[ 1089.468028][ T5868] playstation 0003:054C:0DF2.0045: Failed to create dualsense.
[ 1089.479503][ T5868] playstation 0003:054C:0DF2.0045: probe with driver playstation failed with error -71
[ 1089.495443][ T5868] usb 8-1: USB disconnect, device number 19
[ 1089.610492][T28352] fido_id[28352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 1089.699062][    T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1089.829038][    T9] usb 6-1: device descriptor read/64, error -71
[ 1090.069160][    T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1090.199325][    T9] usb 6-1: device descriptor read/64, error -71
[ 1090.310162][    T9] usb usb6-port1: attempt power cycle
[ 1090.319430][ T5938] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1090.469388][ T5938] usb 8-1: Using ep0 maxpacket: 8
[ 1090.477015][ T5938] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.489339][ T5938] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1090.500589][ T5938] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1090.509724][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.517897][ T5938] usb 8-1: Product: ��뻴�裃擿芼먋虤窎촉䛔ଂ粞࠿䠙跕ⶀ孱ʒ
[ 1090.527050][ T5938] usb 8-1: Manufacturer: ᶴ앋쇾����Ǩɰ骎ݱ좇��ᾭ䬤��鞺鴤ᜀ�煊ᨦ䌫�뜻죱�즌寫ꕜ鈎퇤Ꚋ��ᛡ꺰켿ᔢ옧闫龹ទ涾���抅엑⤷넦郠鈨휑⧙⠼晖碆ꒇ��漳ῄ궳렙찒고⣽쿱㒗⠗瞺�鰥픃ấ䛎ᨦ丠슣黲꞊ᤥ�綆އ僜
[ 1090.555491][ T5938] usb 8-1: SerialNumber: 貯ꚼ㌵䶎깼瓨悗
[ 1090.563786][ T5938] usb 8-1: rejected 1 configuration due to insufficient available bus power
[ 1090.572528][ T5938] usb 8-1: no configuration chosen from 1 choice
[ 1090.644428][T28363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4953'.
[ 1090.660355][    T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1090.684533][    T9] usb 6-1: device descriptor read/8, error -71
[ 1090.929659][    T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1090.950395][    T9] usb 6-1: device descriptor read/8, error -71
[ 1091.060557][    T9] usb usb6-port1: unable to enumerate USB device
[ 1091.699412][T28370] netlink: 'syz.4.4955': attribute type 6 has an invalid length.
[ 1092.140843][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1092.710457][    T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1092.860597][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1092.869592][    T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1092.878777][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.886900][    T9] usb 6-1: Product: syz
[ 1092.891123][    T9] usb 6-1: Manufacturer: syz
[ 1092.895978][    T9] usb 6-1: SerialNumber: syz
[ 1092.903422][    T9] usb 6-1: config 0 descriptor??
[ 1093.033683][ T5919] usb 8-1: USB disconnect, device number 20
[ 1093.111117][    T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1093.121820][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1093.132336][    T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1093.140497][    T9] usb 6-1: media controller created
[ 1093.159074][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1093.312699][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1093.323898][    T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1093.333558][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1093.486920][ T6377] usb 6-1: USB disconnect, device number 40
[ 1093.539162][ T6377] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1093.967863][T28399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1093.984385][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1093.986653][T28399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1094.091151][ T6377] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1094.241214][ T6377] usb 6-1: Using ep0 maxpacket: 32
[ 1094.248287][ T6377] usb 6-1: config 2 has an invalid interface number: 88 but max is 0
[ 1094.256453][ T6377] usb 6-1: config 2 has no interface number 0
[ 1094.261253][    T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 1094.262705][ T6377] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[ 1094.281249][ T6377] usb 6-1: config 2 interface 88 has no altsetting 0
[ 1094.290474][ T6377] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1094.300053][ T6377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.308208][ T6377] usb 6-1: Product: syz
[ 1094.313509][ T6377] usb 6-1: Manufacturer: syz
[ 1094.318183][ T6377] usb 6-1: SerialNumber: syz
[ 1094.326777][T28390] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1094.421391][    T9] usb 8-1: device descriptor read/64, error -71
[ 1094.538808][T28389] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1094.661461][    T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 1094.748238][ T6377] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1094.773506][ T6377] asix 6-1:2.88: probe with driver asix failed with error -71
[ 1094.788088][ T6377] usb 6-1: USB disconnect, device number 41
[ 1094.803487][    T9] usb 8-1: device descriptor read/64, error -71
[ 1094.942139][    T9] usb usb8-port1: attempt power cycle
[ 1095.281807][    T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[ 1095.302538][    T9] usb 8-1: device descriptor read/8, error -71
[ 1095.448515][T28417] 9p: Bad value for 'rfdno'
[ 1095.551913][    T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 1095.572535][    T9] usb 8-1: device descriptor read/8, error -71
[ 1095.668209][T28421] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4969'.
[ 1095.682316][    T9] usb usb8-port1: unable to enumerate USB device
[ 1096.062393][    T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1096.213875][    T9] usb 6-1: config index 0 descriptor too short (expected 64851, got 72)
[ 1096.225684][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1096.235126][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.243371][    T9] usb 6-1: Product: syz
[ 1096.247695][    T9] usb 6-1: Manufacturer: syz
[ 1096.252539][    T9] usb 6-1: SerialNumber: syz
[ 1096.261252][    T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1096.276932][ T5938] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1096.871714][T28429] usb usb1: usbfs: process 28429 (syz.6.4971) did not claim interface 0 before use
[ 1096.882264][    T9] usb 6-1: USB disconnect, device number 42
[ 1097.344114][ T5938] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1097.355707][ T5938] ath9k_htc: Failed to initialize the device
[ 1097.362187][    T9] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1097.482828][T25306] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[ 1097.652815][T25306] usb 8-1: Using ep0 maxpacket: 8
[ 1097.662252][T25306] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1097.672520][T25306] usb 8-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024
[ 1097.703726][T25306] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1097.716356][T25306] usb 8-1: config 8 interface 0 has no altsetting 0
[ 1097.726471][T25306] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[ 1097.736023][T25306] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.747908][T25306] usb 8-1: Product: syz
[ 1097.752099][T25306] usb 8-1: Manufacturer: syz
[ 1097.758944][T25306] usb 8-1: SerialNumber: syz
[ 1097.911497][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1098.773431][   T29] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1098.933506][   T29] usb 6-1: Using ep0 maxpacket: 8
[ 1098.941640][   T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1098.953519][   T29] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1098.962762][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.971038][   T29] usb 6-1: Product: syz
[ 1098.975406][   T29] usb 6-1: Manufacturer: syz
[ 1098.980024][   T29] usb 6-1: SerialNumber: syz
[ 1098.988928][   T29] usb 6-1: config 0 descriptor??
[ 1098.999036][   T29] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1099.059765][T28459] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4980'.
[ 1099.184457][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1100.169597][T25306] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 1100.185091][T25306] usb 8-1: selecting invalid altsetting 0
[ 1100.361821][T25306] usb 8-1: USB disconnect, device number 25
[ 1100.884398][T25306] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 1101.056197][T25306] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1101.069244][T25306] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1101.078390][T25306] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1101.089213][T25306] usb 8-1: config 0 descriptor??
[ 1101.525846][T25306] hid-led 0003:27B8:01ED.0046: unknown main item tag 0x0
[ 1101.537438][T25306] hid-led 0003:27B8:01ED.0046: unknown main item tag 0x0
[ 1101.550273][T25306] hid-led 0003:27B8:01ED.0046: unknown main item tag 0x0
[ 1101.591515][T28472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4986'.
[ 1101.712171][T25306] hid-led 0003:27B8:01ED.0046: probe with driver hid-led failed with error -71
[ 1101.736344][T25306] usb 8-1: USB disconnect, device number 26
[ 1101.905140][T28481] netlink: 'syz.4.4989': attribute type 21 has an invalid length.
[ 1101.914368][T28481] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4989'.
[ 1101.968533][T28483] sg_write: data in/out 327681/8 bytes for SCSI command 0x0-- guessing data in;
[ 1101.968533][T28483]    program syz.4.4990 not setting count and/or reply_len properly
[ 1103.021739][   T29] gspca_zc3xx: reg_w_i err -110
[ 1103.076847][   T29] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 1103.110867][   T29] usb 6-1: USB disconnect, device number 43
[ 1103.535701][   T29] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1103.666083][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1103.732611][   T29] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1103.758132][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.784151][   T29] usb 6-1: Product: syz
[ 1103.797622][   T29] usb 6-1: Manufacturer: syz
[ 1103.812572][   T29] usb 6-1: SerialNumber: syz
[ 1103.837309][   T29] usb 6-1: config 0 descriptor??
[ 1103.851973][   T29] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1103.876250][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1103.898818][   T29] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 1103.923040][   T29] usb 6-1: media controller created
[ 1103.948317][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1103.989556][   T29] DVB: Unable to find symbol mt352_attach()
[ 1104.035747][   T29] DVB: Unable to find symbol nxt6000_attach()
[ 1104.048819][   T29] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 1104.067948][T28499] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[ 1104.087985][T28499] dvb-usb: bulk message failed: -22 (7/0)
[ 1104.098972][   T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input126
[ 1104.130745][   T29] dvb-usb: schedule remote query interval to 1000 msecs.
[ 1104.150348][   T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 1104.172937][   T29] dvb-usb: bulk message failed: -22 (7/0)
[ 1104.185966][   T29] dvb-usb: bulk message failed: -22 (7/0)
[ 1104.216028][   T29] usb 6-1: USB disconnect, device number 44
[ 1104.375082][   T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1104.490502][T28520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1105.373675][T28531] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1109.938502][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1109.952770][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1115.621242][T28622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1116.778175][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.802542][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.832035][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1116.832586][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1118.731614][T28641] infiniband: Added to hash: ib_dev=ffff88803b5ec000 (0)() ndev=ffff888067d20000 (31)(bond0)
[ 1118.792366][T28641] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1118.820224][T28641] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1118.864258][T28641] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1118.893469][T28641] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1118.925077][T28641] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1119.742094][T28660] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5050'.
[ 1120.797059][T28670] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5055'.
[ 1120.822646][T28670] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5055'.
[ 1120.966132][T28674] netlink: 'syz.4.5056': attribute type 2 has an invalid length.
[ 1122.236698][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1122.251214][T25809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1122.395492][ T5938] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[ 1122.567295][ T5938] usb 8-1: Using ep0 maxpacket: 16
[ 1122.589044][ T5938] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1122.637833][ T5938] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1122.658248][ T5938] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1122.679188][ T5938] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.925962][T28696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1122.938924][T28696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1123.172216][ T5938] mcp2221 0003:04D8:00DD.0047: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[ 1123.364849][T28207] usb 8-1: USB disconnect, device number 27
[ 1124.361836][   T30] audit: type=1326 audit(1771767500.548:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1124.442497][   T30] audit: type=1326 audit(1771767500.548:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1124.513034][   T30] audit: type=1326 audit(1771767500.548:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1124.607356][   T30] audit: type=1326 audit(1771767500.548:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1124.715202][   T30] audit: type=1326 audit(1771767500.548:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1124.744724][   T30] audit: type=1326 audit(1771767500.548:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1124.813630][   T30] audit: type=1326 audit(1771767500.578:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1124.883425][   T30] audit: type=1326 audit(1771767500.578:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.7.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1127.378938][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1127.999724][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1129.581494][T28768] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1129.850969][   T30] audit: type=1326 audit(1771767506.036:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28797 comm="syz.4.5099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f198179c629 code=0x0
[ 1130.251356][T28808] futex_wake_op: syz.6.5102 tries to shift op by 144; fix this program
[ 1131.244640][T28828] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5107'.
[ 1132.409977][ T5868] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1132.468980][T28848] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5115'.
[ 1132.494647][T28848] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5115'.
[ 1132.590549][ T5868] usb 6-1: Using ep0 maxpacket: 16
[ 1132.620917][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1132.640431][ T5868] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1132.670178][ T5868] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1132.686814][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.712534][ T5868] usb 6-1: config 0 descriptor??
[ 1133.270329][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1133.340904][T28841] netlink: 'syz.5.5112': attribute type 1 has an invalid length.
[ 1133.354908][ T5868] usb 6-1: USB disconnect, device number 45
[ 1133.761239][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1134.663995][T28879] block nbd7: NBD_DISCONNECT
[ 1135.845052][T28880] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 1136.285318][   T30] audit: type=1326 audit(1771767512.472:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1136.351952][   T30] audit: type=1326 audit(1771767512.472:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1136.445231][   T30] audit: type=1326 audit(1771767512.512:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1136.524694][   T30] audit: type=1326 audit(1771767512.512:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1136.631875][   T30] audit: type=1326 audit(1771767512.512:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1136.709890][   T30] audit: type=1326 audit(1771767512.512:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1136.828764][   T30] audit: type=1326 audit(1771767512.512:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1136.851484][T28910] netlink: 'syz.5.5140': attribute type 2 has an invalid length.
[ 1137.196366][   T30] audit: type=1326 audit(1771767512.512:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1137.300531][   T30] audit: type=1326 audit(1771767512.522:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1137.375238][   T30] audit: type=1326 audit(1771767512.522:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.7.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1138.723235][   T29] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1138.752894][ T5938] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1138.794864][T28925] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns
[ 1138.884294][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1138.910488][   T29] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1138.923106][ T5938] usb 8-1: Using ep0 maxpacket: 32
[ 1138.928530][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.931031][ T5938] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1138.963452][   T29] usb 6-1: Product: syz
[ 1138.963569][ T5938] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1138.967984][   T29] usb 6-1: Manufacturer: syz
[ 1138.977414][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1138.990158][ T5938] usb 8-1: Product: syz
[ 1138.994667][ T5938] usb 8-1: Manufacturer: syz
[ 1139.001685][ T5938] usb 8-1: SerialNumber: syz
[ 1139.026410][ T5938] usb 8-1: config 0 descriptor??
[ 1139.044087][   T29] usb 6-1: SerialNumber: syz
[ 1139.047942][T28914] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1139.051568][   T29] usb 6-1: config 0 descriptor??
[ 1139.059488][ T5938] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1139.071515][ T5938] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1139.499886][   T29] usb 6-1: Firmware: major: 71, minor: 109, hardware type: ATUSB (2)
[ 1139.524198][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1139.703762][   T29] usb 6-1: failed to fetch extended address, random address set
[ 1139.875587][   T29] usb 6-1: USB disconnect, device number 46
[ 1140.728585][T28949] tap0: tun_chr_ioctl cmd 1074025677
[ 1140.740592][T28949] tap0: linktype set to 805
[ 1142.096370][   T24] usb 6-1: [UEAGLE-ATM] firmware is not available
[ 1142.104707][T26866] usb 6-1: [UEAGLE-ATM] firmware is not available
[ 1142.688196][T28975] ªªªªªª: renamed from vlan0
[ 1143.313658][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5169'.
[ 1143.323016][T28988] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5169'.
[ 1144.439670][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1144.503555][ T5882] usb 8-1: USB disconnect, device number 28
[ 1145.313624][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1148.317740][ T5938] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1148.609254][ T5938] usb 6-1: device descriptor read/64, error -71
[ 1148.847872][ T5938] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1148.909566][T29027] binder: 29026:29027 ioctl c0306201 200000000480 returned -22
[ 1149.096191][ T5938] usb 6-1: device descriptor read/64, error -71
[ 1149.692922][ T5938] usb usb6-port1: attempt power cycle
[ 1149.707164][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1150.211653][ T5938] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1150.881718][ T5938] usb 6-1: device not accepting address 49, error -71
[ 1151.050294][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1151.277310][T29064] ieee802154 phy0 wpan0: encryption failed: -22
[ 1154.081317][T29105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5209'.
[ 1154.159168][T29107] Set syz1 is full, maxelem 6117 reached
[ 1154.261923][T29105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1154.891477][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1155.170693][T29140] binder: 29139:29140 ioctl c0306201 200000000480 returned -22
[ 1156.094181][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1158.434697][T29193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1159.292991][ T5938] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[ 1159.458327][ T5938] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1159.488062][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1159.518286][ T5938] usb 6-1: Product: syz
[ 1159.528852][ T5938] usb 6-1: Manufacturer: syz
[ 1159.545397][ T5938] usb 6-1: SerialNumber: syz
[ 1159.577619][ T5938] usb 6-1: config 0 descriptor??
[ 1159.819297][ T5938] usb 6-1: USB disconnect, device number 51
[ 1160.013862][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1161.029496][T29220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1161.294557][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1161.764312][T29253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5263'.
[ 1161.922115][T29260] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5266'.
[ 1162.100844][T29271] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1162.158272][T29274] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1162.307695][    T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1162.994691][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1163.010126][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1163.031242][    T9] usb 6-1: config 0 has no interface number 0
[ 1163.068323][    T9] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1163.084952][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.186168][    T9] usb 6-1: Product: syz
[ 1164.250000][    T9] usb 6-1: Manufacturer: syz
[ 1164.254653][    T9] usb 6-1: SerialNumber: syz
[ 1164.282607][    T9] usb 6-1: config 0 descriptor??
[ 1164.309982][    T9] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1164.333148][    T9] usb 6-1: selecting invalid altsetting 1
[ 1164.352962][    T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1164.409423][    T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1164.431083][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1164.440703][    T9] usb 6-1: media controller created
[ 1164.483182][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1166.148011][T29263] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1166.220526][    T9] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[ 1166.245716][    T9] zl10353_read_register: readreg error (reg=127, ret==-32)
[ 1166.314028][    T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1166.456201][    T9] usb 6-1: USB disconnect, device number 52
[ 1166.816935][    T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1166.986637][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1166.998470][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1167.021270][    T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1167.035659][T29328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1167.044640][    T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1167.058442][T25809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1167.075406][    T9] usb 6-1: Product: syz
[ 1167.081977][    T9] usb 6-1: Manufacturer: syz
[ 1167.086779][    T9] usb 6-1: SerialNumber: syz
[ 1167.102409][    T9] usb 6-1: config 0 descriptor??
[ 1167.109987][T29308] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1167.142031][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1167.151111][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1167.308823][T29334] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[ 1167.337050][T25813] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1170.003358][T24356] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1170.573671][T29360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1170.587256][T29360] No control pipe specified
[ 1172.081481][    C1] IPv4: Oversized IP packet from 172.20.20.24
[ 1172.360395][T29380] No control pipe specified
[ 1172.431897][T29382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1172.454021][T29382] No control pipe specified
[ 1172.662469][ T5938] usb 6-1: USB disconnect, device number 53
[ 1172.833846][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1173.161403][T29399] No control pipe specified
[ 1173.613120][ T5938] libceph: connect (1)[c::]:6789 error -101
[ 1173.692277][ T5938] libceph: mon0 (1)[c::]:6789 connect error
[ 1173.903822][T29405] ceph: No mds server is up or the cluster is laggy
[ 1174.580301][ T5938] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[ 1174.617952][T29418] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1174.630730][T29418] No control pipe specified
[ 1174.752032][ T5938] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1174.762142][ T5938] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1174.775482][ T5938] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1174.784613][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1174.901381][T24356] Bluetooth: hci6: command 0x0406 tx timeout
[ 1174.998904][ T5938] usb 6-1: usb_control_msg returned -32
[ 1175.005809][ T5938] usbtmc 6-1:16.0: can't read capabilities
[ 1175.558278][ T5938] usb 6-1: USB disconnect, device number 54
[ 1175.667367][T29427] No control pipe specified
[ 1177.182564][T29443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1178.009683][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1178.022931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.592822][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1180.099959][T29486] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1180.104950][T24356] Bluetooth: hci3: command 0x0406 tx timeout
[ 1180.132813][T25813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1180.175114][T29488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1180.196507][T29488] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1180.214005][T29488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1180.229781][T29488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1180.241958][T29488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1180.753127][T25816] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.282058][T25816] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.344120][ T5838] Bluetooth: hci4: command tx timeout
[ 1182.433540][T25816] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.471262][T29481] chnl_net:caif_netlink_parms(): no params data found
[ 1182.567116][T25816] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.838475][T29481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1182.846458][T29481] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1182.853824][T29481] bridge_slave_0: entered allmulticast mode
[ 1182.867272][T29481] bridge_slave_0: entered promiscuous mode
[ 1182.916240][T29481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1182.923575][T29481] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.948665][T29481] bridge_slave_1: entered allmulticast mode
[ 1182.966253][T29481] bridge_slave_1: entered promiscuous mode
[ 1183.015668][T29481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1183.104168][T29481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1183.210539][T29481] team0: Port device team_slave_0 added
[ 1183.237380][T29481] team0: Port device team_slave_1 added
[ 1183.283584][T29481] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1183.302973][T29481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1183.329868][T29481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1183.366706][T29481] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1183.378494][T29481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1183.433972][T29481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1183.737635][T29536] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1183.800345][T25816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1183.844146][T25816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1183.865259][T25816] bond0 (unregistering): Released all slaves
[ 1184.013015][T29481] hsr_slave_0: entered promiscuous mode
[ 1184.040957][T29481] hsr_slave_1: entered promiscuous mode
[ 1184.057905][T29481] debugfs: 'hsr0' already exists in 'hsr'
[ 1184.063774][T29481] Cannot create hsr debugfs directory
[ 1184.074078][T25816] tipc: Left network mode
[ 1184.354410][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1184.427058][ T5838] Bluetooth: hci4: command tx timeout
[ 1184.807763][T25816] hsr_slave_0: left promiscuous mode
[ 1184.831411][T25816] hsr_slave_1: left promiscuous mode
[ 1184.845398][T25816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1184.859526][T25816] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1184.888121][T25816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1184.905499][T25816] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1184.947294][T25816] veth1_macvtap: left promiscuous mode
[ 1184.952829][T25816] veth0_macvtap: left promiscuous mode
[ 1184.990322][T25816] veth1_vlan: left promiscuous mode
[ 1185.210036][T25816] pimreg3 (unregistering): left allmulticast mode
[ 1185.627083][T25815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1186.516934][ T5838] Bluetooth: hci4: command tx timeout
[ 1186.525606][T29589] loop5: detected capacity change from 0 to 3271
[ 1186.566423][T29589] loop5: detected capacity change from 3271 to 3279
[ 1186.781326][T28091] Buffer I/O error on dev loop5, logical block 409, async page read
[ 1187.724674][T25816] IPVS: stop unused estimator thread 0...
[ 1188.067090][T29612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1188.124238][T29481] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1188.163245][T29481] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1188.225183][T29481] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1188.579192][T29481] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1188.588223][ T5838] Bluetooth: hci4: command tx timeout
[ 1189.340183][T29481] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1189.435891][T29481] 8021q: adding VLAN 0 to HW filter on device team0
[ 1189.481900][T25816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.489159][T25816] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1189.535138][T29279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1189.542380][T29279] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1189.884349][T29481] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1190.108798][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1190.453274][T29481] veth0_vlan: entered promiscuous mode
[ 1190.666441][T29481] veth1_vlan: entered promiscuous mode
[ 1191.246567][T29481] veth0_macvtap: entered promiscuous mode
[ 1191.277957][T29481] veth1_macvtap: entered promiscuous mode
[ 1191.400253][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1191.506996][T29481] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1191.626248][T29481] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1191.783324][T29279] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.834626][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5397'.
[ 1191.864967][T29279] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.904540][T29279] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.938814][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5397'.
[ 1191.986505][T29279] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1192.256624][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.306340][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.471629][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.513389][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1193.568851][T29739] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1194.403870][T29755] No control pipe specified
[ 1195.407288][T29770] No control pipe specified
[ 1195.838140][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'.
[ 1195.883757][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1196.618639][T29791] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1196.852882][T29794] No control pipe specified
[ 1197.139454][T29802] No control pipe specified
[ 1197.153326][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1198.863036][T29824] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1199.105300][T29831] No control pipe specified
[ 1199.774479][T29846] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5438'.
[ 1199.798446][T29847] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5438'.
[ 1200.183440][T29860] autofs: Bad value for 'fd'
[ 1200.302550][T29864] nbd: must specify a size in bytes for the device
[ 1201.627614][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1201.627629][   T30] audit: type=1326 audit(1771767577.781:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.6.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7fc00000
[ 1201.664652][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1201.776678][T29886] autofs: Bad value for 'fd'
[ 1202.942456][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1205.753118][T29917] autofs: Bad value for 'fd'
[ 1206.196033][   T30] audit: type=1800 audit(1771767582.338:659): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5465" name="bus" dev="tmpfs" ino=1323 res=0 errno=0
[ 1207.047819][T29937] binder: BINDER_SET_CONTEXT_MGR already set
[ 1207.053844][T29937] binder: 29935:29937 ioctl 4018620d 200000000180 returned -16
[ 1207.099458][T29937] binder: 29935:29937 ioctl c0306201 200000000480 returned -22
[ 1207.316980][T29950] autofs: Unknown parameter '0x0000000000000000'
[ 1207.397636][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1208.524361][T29971] binder: BINDER_SET_CONTEXT_MGR already set
[ 1208.596906][T29971] binder: 29968:29971 ioctl 4018620d 200000000180 returned -16
[ 1208.603379][T29975] binder: 29968:29975 ioctl c0306201 200000000480 returned -22
[ 1208.678182][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1209.049867][T29981] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5487'.
[ 1209.929438][ T5882] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1210.682349][ T5882] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1210.697934][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1210.716985][ T5882] usb 6-1: Product: syz
[ 1210.721737][ T5882] usb 6-1: Manufacturer: syz
[ 1210.726354][ T5882] usb 6-1: SerialNumber: syz
[ 1210.748570][ T5882] usb 6-1: config 0 descriptor??
[ 1210.766706][ T5882] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1210.788463][ T5882] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1210.968088][ T5882] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1210.997344][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1211.015010][T30009] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1211.017637][ T5882] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1211.032690][ T5882] usb 6-1: media controller created
[ 1211.124494][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1211.303975][ T5882] DVB: Unable to find symbol dib7000p_attach()
[ 1211.313690][ T5882] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1211.515969][T30021] binder: BINDER_SET_CONTEXT_MGR already set
[ 1211.523089][T30021] binder: 30020:30021 ioctl 4018620d 200000000180 returned -16
[ 1211.537785][T30021] binder: 30020:30021 ioctl c0306201 200000000480 returned -22
[ 1211.570716][ T5882] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1211.589192][ T5882] Registered IR keymap rc-empty
[ 1211.607435][ T5882] dvb-usb: could not initialize remote control.
[ 1211.620744][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1212.169449][ T5882] usb 6-1: USB disconnect, device number 55
[ 1212.302812][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1212.460324][T30035] Invalid ELF header magic: != ELF
[ 1213.159787][T25813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1213.239728][ T5946] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[ 1213.413339][ T5946] usb 6-1: config 0 has no interfaces?
[ 1213.432208][ T5946] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1213.459304][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.493977][ T5946] usb 6-1: config 0 descriptor??
[ 1214.440169][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1214.784868][T26866] IPVS: starting estimator thread 0...
[ 1214.794809][   T30] audit: type=1326 audit(1771767590.944:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.7.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1214.818004][   T30] audit: type=1326 audit(1771767590.944:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.7.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1214.842269][   T30] audit: type=1326 audit(1771767590.944:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.7.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1214.896869][   T30] audit: type=1326 audit(1771767590.944:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30097 comm="syz.7.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe84cb9c629 code=0x7ffc0000
[ 1214.920838][T30099] IPVS: using max 54 ests per chain, 129600 per kthread
[ 1215.032141][T30105] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5532'.
[ 1215.042064][T30105] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5532'.
[ 1215.051521][T30105] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5532'.
[ 1215.060669][T30105] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5532'.
[ 1215.996055][ T5882] usb 6-1: USB disconnect, device number 56
[ 1216.084877][T30125] netlink: 'syz.4.5541': attribute type 1 has an invalid length.
[ 1216.443177][T30142] netlink: 'syz.7.5550': attribute type 1 has an invalid length.
[ 1217.081023][T30173] netlink: 'syz.7.5561': attribute type 1 has an invalid length.
[ 1217.242530][T30180] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5564'.
[ 1217.374468][T30182] input: syz0 as /devices/virtual/input/input129
[ 1217.865649][T30198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5571'.
[ 1217.879460][T30200] No control pipe specified
[ 1218.186132][T30214] binder: 30213:30214 ioctl c0306201 200000000480 returned -22
[ 1219.432512][T25813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1219.549277][T30224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5582'.
[ 1219.565144][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1219.640389][T30226] No control pipe specified
[ 1219.818945][T30234] binder: 30233:30234 ioctl c0306201 200000000480 returned -22
[ 1220.755000][T30250] No control pipe specified
[ 1221.268787][T30259] binder: 30258:30259 ioctl c0306201 200000000480 returned -22
[ 1222.132271][T30263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5598'.
[ 1222.343574][ T5946] IPVS: starting estimator thread 0...
[ 1222.433895][T30273] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1222.596143][T30283] binder: 30282:30283 ioctl c0306201 200000000480 returned -22
[ 1222.739150][T30289] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1223.333456][T30304] binder: 30303:30304 ioctl c0306201 200000000480 returned -22
[ 1223.682254][T30315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5618'.
[ 1224.258418][T30321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5620'.
[ 1224.340880][T30323] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1224.947783][T29279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1225.098779][T30333] binder: 30332:30333 ioctl c0306201 200000000480 returned -22
[ 1226.440148][T30352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5634'.
[ 1226.519947][T30354] binder: 30353:30354 ioctl c0306201 200000000480 returned -22
[ 1227.369269][T30369] No control pipe specified
[ 1227.483388][T30372] binder: 30371:30372 ioctl c0306201 200000000480 returned -22
[ 1227.508068][T30376] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1227.651094][T30384] binder: 30383:30384 ioctl c0306201 2000000003c0 returned -14
[ 1227.810612][T30392] overlayfs: failed to resolve './file0': -2
[ 1227.874817][T30396] No control pipe specified
[ 1227.992291][T30402] binder: 30401:30402 ioctl 4018620d 0 returned -22
[ 1228.003375][T30402] binder: 30401:30402 ioctl c0306201 200000000480 returned -22
[ 1228.461763][T30419] overlayfs: failed to resolve './file0': -2
[ 1228.528802][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1228.595461][T30423] No control pipe specified
[ 1228.694034][T30425] binder: 30424:30425 ioctl 4018620d 0 returned -22
[ 1228.711105][T30425] binder: 30424:30425 ioctl c0306201 200000000480 returned -22
[ 1230.448601][T25813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1231.921640][T30461] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1234.375034][T25813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1235.121332][T30491] overlayfs: failed to resolve './file0': -2
[ 1235.883424][T30501] input: syz1 as /devices/virtual/input/input130
[ 1236.336060][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1236.750325][T30515] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1238.208034][T30544] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1238.362131][ T5919] IPVS: starting estimator thread 0...
[ 1238.700194][T30554] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1239.993444][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.999829][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.053435][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1240.330199][T30575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5721'.
[ 1240.470452][T30580] binder: 30579:30580 ioctl c0306201 2000000003c0 returned -14
[ 1240.867259][T30594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5730'.
[ 1240.905378][T30593] syzkaller1: entered promiscuous mode
[ 1240.910972][T30593] syzkaller1: entered allmulticast mode
[ 1241.854422][T30604] binder: 30603:30604 ioctl c0306201 2000000003c0 returned -14
[ 1241.920444][T30606] No control pipe specified
[ 1241.975157][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1242.898301][T30620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5738'.
[ 1242.962703][T30624] binder: 30623:30624 ioctl c0306201 0 returned -14
[ 1243.043466][T30627] No control pipe specified
[ 1243.105053][T30630] binder: 30629:30630 ioctl c0306201 2000000003c0 returned -14
[ 1244.885943][T30653] binder: 30652:30653 ioctl c0306201 0 returned -14
[ 1244.896772][T30656] netlink: 'syz.7.5739': attribute type 1 has an invalid length.
[ 1245.010623][T30658] No control pipe specified
[ 1245.175747][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1245.777473][T30674] fuse: Bad value for 'group_id'
[ 1245.792834][T30674] fuse: Bad value for 'group_id'
[ 1246.087033][T30678] binder: 30677:30678 ioctl c0306201 2000000003c0 returned -14
[ 1246.136357][T30680] autofs: Bad value for 'fd'
[ 1246.194754][T30682] netlink: 'syz.7.5764': attribute type 1 has an invalid length.
[ 1246.676772][T30696] fuse: Bad value for 'group_id'
[ 1246.681761][T30696] fuse: Bad value for 'group_id'
[ 1246.794138][T30703] autofs: Bad value for 'fd'
[ 1246.795965][T30704] netlink: 'syz.6.5775': attribute type 1 has an invalid length.
[ 1246.935826][ T5946] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1246.958423][T30711] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1247.087350][ T5946] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1247.109652][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.128719][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.143088][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.156743][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.171217][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.183243][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.194938][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.204699][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.237316][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.283939][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.505925][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.649487][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.661949][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.671187][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.700247][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.737053][T29279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1247.783203][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.795135][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.806384][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.813320][T30731] autofs: Bad value for 'fd'
[ 1247.819264][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.828642][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.839979][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.851164][ T5946] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1247.870879][ T5946] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1247.887170][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1247.897778][ T5946] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1247.907375][ T5946] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1247.915738][ T5946] usb 6-1: Product: syz
[ 1247.920493][ T5946] usb 6-1: Manufacturer: syz
[ 1247.925115][ T5946] usb 6-1: SerialNumber: syz
[ 1247.933431][T30734] netlink: 'syz.4.5785': attribute type 1 has an invalid length.
[ 1247.957762][ T5946] usb 6-1: config 0 descriptor??
[ 1247.994211][ T5946] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[ 1248.413589][    C0] usb 6-1: yurex_control_callback - control failed: -71
[ 1248.415876][   T29] usb 6-1: USB disconnect, device number 57
[ 1248.907371][   T29] yurex 6-1:0.0: USB YUREX #0 now disconnected
[ 1249.223054][T30758] autofs: Unknown parameter '0x0000000000000000'
[ 1249.338816][T30760] netlink: 'syz.4.5796': attribute type 1 has an invalid length.
[ 1249.690201][T30766] netlink: 'syz.4.5797': attribute type 4 has an invalid length.
[ 1249.698031][T30766] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5797'.
[ 1250.210823][T30779] autofs: Unknown parameter '0x0000000000000000'
[ 1250.412468][T30783] netlink: 'syz.7.5806': attribute type 1 has an invalid length.
[ 1250.861861][T30801] autofs: Unknown parameter '0x0000000000000000'
[ 1250.939575][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1252.451284][T30820] netlink: 'syz.7.5819': attribute type 4 has an invalid length.
[ 1252.461206][T30820] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5819'.
[ 1252.675561][T30830] autofs: Unknown parameter '0x0000000000000000'
[ 1253.498933][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1255.255421][T30858] tipc: Failed to remove unknown binding: 66,0,0/0:3974256819/3974256821
[ 1255.265385][T30858] tipc: Failed to remove unknown binding: 66,0,0/0:3974256819/3974256820
[ 1255.365199][T30864] fuse: Unknown parameter 'grou00000000000000000000'
[ 1255.909653][T30871] Invalid source name
[ 1255.913734][T30871] UBIFS error (pid: 30871): cannot open "/dev/sg0", error -22
[ 1256.418088][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1256.449647][T30870] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1257.412798][T30892] fuse: Unknown parameter 'grou00000000000000000000'
[ 1257.671186][T30896] netlink: 'syz.5.5849': attribute type 1 has an invalid length.
[ 1258.128647][T30875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1259.164396][T30923] fuse: Unknown parameter 'grou00000000000000000000'
[ 1259.264098][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1259.458831][T30933] Failed to get privilege flags for destination (handle=0x2:0x0)
[ 1259.614483][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1259.631243][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1259.631277][ T5838] Tainted: [L]=SOFTLOCKUP
[ 1259.631285][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1259.631300][ T5838] Workqueue: hci4 hci_rx_work
[ 1259.631336][ T5838] Call Trace:
[ 1259.631345][ T5838]  <TASK>
[ 1259.631355][ T5838]  dump_stack_lvl+0xe8/0x150
[ 1259.631381][ T5838]  sysfs_create_dir_ns+0x271/0x2a0
[ 1259.631408][ T5838]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1259.631433][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[ 1259.631456][ T5838]  kobject_add_internal+0x62b/0xd00
[ 1259.631485][ T5838]  kobject_add+0x163/0x240
[ 1259.631506][ T5838]  ? __pfx_kobject_add+0x10/0x10
[ 1259.631527][ T5838]  ? _raw_spin_unlock+0x28/0x50
[ 1259.631555][ T5838]  ? get_device_parent+0x366/0x3a0
[ 1259.631585][ T5838]  device_add+0x408/0xb70
[ 1259.631614][ T5838]  hci_conn_add_sysfs+0xd5/0x210
[ 1259.631648][ T5838]  le_conn_complete_evt+0xf1d/0x1430
[ 1259.631682][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1259.631705][ T5838]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1259.631728][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[ 1259.631748][ T5838]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1259.631767][ T5838]  ? skb_pull_data+0xfb/0x200
[ 1259.631790][ T5838]  hci_le_conn_complete_evt+0x187/0x470
[ 1259.631821][ T5838]  hci_event_packet+0x7af/0x12c0
[ 1259.631857][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1259.631880][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[ 1259.631914][ T5838]  ? kcov_remote_start+0x49a/0x7a0
[ 1259.631944][ T5838]  ? hci_send_to_monitor+0xe2/0x590
[ 1259.631971][ T5838]  hci_rx_work+0x3ee/0x1040
[ 1259.632010][ T5838]  ? process_one_work+0x87c/0x1650
[ 1259.632044][ T5838]  process_one_work+0x949/0x1650
[ 1259.632091][ T5838]  ? __pfx_process_one_work+0x10/0x10
[ 1259.632114][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1259.632148][ T5838]  worker_thread+0xb46/0x1140
[ 1259.632201][ T5838]  kthread+0x388/0x470
[ 1259.632222][ T5838]  ? __pfx_worker_thread+0x10/0x10
[ 1259.632247][ T5838]  ? __pfx_kthread+0x10/0x10
[ 1259.632268][ T5838]  ret_from_fork+0x51e/0xb90
[ 1259.632298][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[ 1259.632346][ T5838]  ? __switch_to+0xc7d/0x1450
[ 1259.632374][ T5838]  ? __pfx_kthread+0x10/0x10
[ 1259.632395][ T5838]  ret_from_fork_asm+0x1a/0x30
[ 1259.632441][ T5838]  </TASK>
[ 1259.632499][ T5838] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1259.876293][ T5838] Bluetooth: hci4: failed to register connection device
[ 1260.017058][T30949] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1262.087060][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1263.125865][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1263.138165][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1263.138197][ T5838] Tainted: [L]=SOFTLOCKUP
[ 1263.138203][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1263.138216][ T5838] Workqueue: hci3 hci_rx_work
[ 1263.138247][ T5838] Call Trace:
[ 1263.138253][ T5838]  <TASK>
[ 1263.138261][ T5838]  dump_stack_lvl+0xe8/0x150
[ 1263.138287][ T5838]  sysfs_create_dir_ns+0x271/0x2a0
[ 1263.138311][ T5838]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1263.138333][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[ 1263.138353][ T5838]  kobject_add_internal+0x62b/0xd00
[ 1263.138377][ T5838]  kobject_add+0x163/0x240
[ 1263.138397][ T5838]  ? __pfx_kobject_add+0x10/0x10
[ 1263.138414][ T5838]  ? _raw_spin_unlock+0x28/0x50
[ 1263.138437][ T5838]  ? get_device_parent+0x366/0x3a0
[ 1263.138461][ T5838]  device_add+0x408/0xb70
[ 1263.138482][ T5838]  hci_conn_add_sysfs+0xd5/0x210
[ 1263.138515][ T5838]  le_conn_complete_evt+0xf1d/0x1430
[ 1263.138542][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1263.138561][ T5838]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1263.138579][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[ 1263.138594][ T5838]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1263.138609][ T5838]  ? skb_pull_data+0xfb/0x200
[ 1263.138628][ T5838]  hci_le_conn_complete_evt+0x187/0x470
[ 1263.138651][ T5838]  hci_event_packet+0x7af/0x12c0
[ 1263.138679][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1263.138696][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[ 1263.138723][ T5838]  ? kcov_remote_start+0x49a/0x7a0
[ 1263.138749][ T5838]  ? hci_send_to_monitor+0xe2/0x590
[ 1263.138770][ T5838]  hci_rx_work+0x3ee/0x1040
[ 1263.138800][ T5838]  ? process_one_work+0x87c/0x1650
[ 1263.138819][ T5838]  process_one_work+0x949/0x1650
[ 1263.138853][ T5838]  ? __pfx_process_one_work+0x10/0x10
[ 1263.138871][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1263.138898][ T5838]  worker_thread+0xb46/0x1140
[ 1263.138937][ T5838]  kthread+0x388/0x470
[ 1263.138952][ T5838]  ? __pfx_worker_thread+0x10/0x10
[ 1263.138971][ T5838]  ? __pfx_kthread+0x10/0x10
[ 1263.138986][ T5838]  ret_from_fork+0x51e/0xb90
[ 1263.139009][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[ 1263.139027][ T5838]  ? __switch_to+0xc7d/0x1450
[ 1263.139047][ T5838]  ? __pfx_kthread+0x10/0x10
[ 1263.139063][ T5838]  ret_from_fork_asm+0x1a/0x30
[ 1263.139097][ T5838]  </TASK>
[ 1263.139127][ T5838] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1263.383862][ T5838] Bluetooth: hci3: failed to register connection device
[ 1263.439644][T30985] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1263.790130][   T30] audit: type=1800 audit(1771768151.908:664): pid=30980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5878" name="bus" dev="ramfs" ino=127836 res=0 errno=0
[ 1264.900982][T31011] QAT: Invalid ioctl -2146921447
[ 1264.938058][T31011] QAT: Invalid ioctl -805268419
[ 1264.946882][T31011] QAT: Invalid ioctl -805268463
[ 1265.036888][T29279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1265.341583][T31013] QAT: Invalid ioctl -2114415556
[ 1265.346610][T31012] QAT: Invalid ioctl -2114415556
[ 1265.379635][T31015] QAT: Invalid ioctl -805268418
[ 1265.380771][T31016] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1266.608503][T29488] Bluetooth: hci4: command 0x0406 tx timeout
[ 1267.648173][T31046] netlink: 'syz.5.5899': attribute type 11 has an invalid length.
[ 1267.678505][T31045] binder: 31043:31045 ioctl c0306201 2000000003c0 returned -14
[ 1267.928970][   T30] audit: type=1326 audit(1771768156.058:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1267.978687][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1267.999911][   T30] audit: type=1326 audit(1771768156.058:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1268.033550][   T30] audit: type=1326 audit(1771768156.088:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1268.073433][   T30] audit: type=1326 audit(1771768156.088:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1268.135954][   T30] audit: type=1326 audit(1771768156.088:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1268.161104][T31063] No control pipe specified
[ 1268.175986][   T30] audit: type=1326 audit(1771768156.088:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1268.240554][   T30] audit: type=1326 audit(1771768156.088:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1268.271886][   T30] audit: type=1326 audit(1771768156.088:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1268.320336][   T30] audit: type=1326 audit(1771768156.088:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31052 comm="syz.5.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fca1bd9c629 code=0x7ffc0000
[ 1269.089577][T31088] No control pipe specified
[ 1269.665366][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[ 1270.791211][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1271.252603][T31111] No control pipe specified
[ 1271.848193][T31117] netlink: 'syz.6.5928': attribute type 4 has an invalid length.
[ 1271.855955][T31117] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5928'.
[ 1273.345549][T25813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1274.398706][T31161] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.5948'.
[ 1274.418051][T31161] netlink: Conntrack attr has 4 unknown bytes
[ 1274.708430][T31166] netlink: 'syz.7.5946': attribute type 4 has an invalid length.
[ 1274.716229][T31166] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5946'.
[ 1274.796851][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5942'.
[ 1276.034931][T31212] overlayfs: failed to clone upperpath
[ 1276.839835][T25813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1277.000027][T31222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1277.027655][T31226] netlink: 840 bytes leftover after parsing attributes in process `syz.6.5970'.
[ 1277.159819][T31230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1277.190830][T31230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1277.226439][T31230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1277.256166][T31230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5972'.
[ 1278.438165][T31244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5978'.
[ 1278.468629][T29279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1278.520545][T31246] netlink: 840 bytes leftover after parsing attributes in process `syz.5.5979'.
[ 1279.703967][T31282] overlayfs: missing 'lowerdir'
[ 1279.861167][T31289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5994'.
[ 1280.171436][T31295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1280.186753][T31295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1280.999631][T31314] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1281.028090][T31314] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1281.243500][T31326] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1281.817627][T31337] netlink: 'syz.5.6016': attribute type 21 has an invalid length.
[ 1282.096365][T31352] fuse: Unknown parameter '00000000000000000000'
[ 1282.143691][T31354] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1282.298268][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1282.599005][T31371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6030'.
[ 1283.021317][T31382] fuse: Bad value for 'fd'
[ 1283.117037][T31386] fuse: Unknown parameter 'user00000000000000000000'
[ 1283.173141][T31392] overlayfs: failed to clone upperpath
[ 1283.489218][T31403] netlink: 840 bytes leftover after parsing attributes in process `syz.5.6042'.
[ 1283.873618][T31418] fuse: Unknown parameter 'user00000000000000000000'
[ 1284.179468][   T30] audit: type=1326 audit(1771768172.298:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.218313][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1284.238104][   T30] audit: type=1326 audit(1771768172.308:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.277148][T31429] netlink: 840 bytes leftover after parsing attributes in process `syz.4.6053'.
[ 1284.341401][   T30] audit: type=1326 audit(1771768172.308:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.382396][   T30] audit: type=1326 audit(1771768172.308:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.407068][   T30] audit: type=1326 audit(1771768172.308:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.438321][   T30] audit: type=1326 audit(1771768172.308:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.471140][   T30] audit: type=1326 audit(1771768172.338:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.524289][   T30] audit: type=1326 audit(1771768172.338:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.599717][   T30] audit: type=1326 audit(1771768172.338:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.666258][   T30] audit: type=1326 audit(1771768172.348:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31425 comm="syz.6.6052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34899c629 code=0x7ffc0000
[ 1284.909059][T31443] fuse: Unknown parameter 'user00000000000000000000'
[ 1285.110772][T31447] netlink: 'syz.4.6059': attribute type 21 has an invalid length.
[ 1285.879402][T31462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6064'.
[ 1286.100479][T31468] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1286.277008][T31472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6070'.
[ 1286.464367][T31482] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6075'.
[ 1286.629421][T31490] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1287.438350][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1289.385664][T31568] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6114'.
[ 1289.691216][T31576] overlayfs: failed to clone upperpath
[ 1289.988351][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1290.083769][T31586] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6123'.
[ 1290.681535][T31607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6130'.
[ 1290.703769][T31607] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6130'.
[ 1291.130710][T31616] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6133'.
[ 1291.463013][T31626] netlink: 'syz.5.6139': attribute type 11 has an invalid length.
[ 1291.514589][T31628] binder: 31627:31628 ioctl c0306201 0 returned -14
[ 1291.533828][T31628] binder: 31627:31628 ioctl c0306201 2000000003c0 returned -14
[ 1291.670988][T31636] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6144'.
[ 1291.689645][T31636] netlink: ct family unspecified
[ 1291.821029][T29488] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[ 1292.021796][T31655] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1292.304264][T31661] overlayfs: failed to clone upperpath
[ 1292.560330][T31677] 9p: Unknown access argument 18446744073709551615: -34
[ 1292.609422][T31679] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1293.028354][T31697] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6173'.
[ 1293.096447][ T5838] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[ 1293.157629][T31704] overlayfs: failed to clone lowerpath
[ 1293.233764][T31708] overlayfs: failed to clone lowerpath
[ 1293.962995][T31719] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.6181'.
[ 1294.205994][T31725] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6184'.
[ 1294.219990][T31725] netlink: ct family unspecified
[ 1295.739636][ T1348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1295.842374][T31760] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6196'.
[ 1295.869107][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6196'.
[ 1295.892630][T31760] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6196'.
[ 1295.924745][T31760] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6196'.
[ 1296.114345][T31768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6202'.
[ 1296.133986][T31768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6202'.
[ 1296.320712][T31771] tipc: Started in network mode
[ 1296.326322][T31771] tipc: Node identity , cluster identity 4711
[ 1296.335738][T31771] tipc: Failed to obtain node identity
[ 1296.349179][T31771] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[ 1296.593830][ T5838] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1297.211282][T31797] fuse: Unknown parameter '0x0000000000000003'
[ 1297.533776][T31801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6215'.
[ 1297.576266][T31801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6215'.
[ 1297.606142][T31801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6215'.
[ 1297.639657][T31801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6215'.
[ 1298.685131][T31810] overlayfs: missing 'lowerdir'
[ 1298.879615][T31821] fuse: Unknown parameter '0x0000000000000003'
[ 1299.845972][T31840] fuse: Unknown parameter '0x0000000000000003'
[ 1300.502089][T31861] netlink: ct family unspecified
[ 1300.633687][T31864] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1300.868409][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.874785][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.222067][T31889] __nla_validate_parse: 9 callbacks suppressed
[ 1301.222080][T31889] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6250'.
[ 1301.241758][T31889] netlink: ct family unspecified
[ 1301.348469][T31894] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1301.498522][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1301.700162][T31913] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6260'.
[ 1301.726769][T31913] netlink: ct family unspecified
[ 1303.115360][T29488] Bluetooth: hci4: command 0x0406 tx timeout
[ 1303.140036][T31920] netlink: 260 bytes leftover after parsing attributes in process `syz.7.6263'.
[ 1303.251339][T31924] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6264'.
[ 1303.438899][T31930] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1303.785439][T31935] sctp: [Deprecated]: syz.7.6268 (pid 31935) Use of int in max_burst socket option.
[ 1303.785439][T31935] Use struct sctp_assoc_value instead
[ 1303.952385][T31941] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6269'.
[ 1303.961740][T31941] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6269'.
[ 1303.972230][T31941] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6269'.
[ 1303.981525][T31941] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6269'.
[ 1306.537609][T31969] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6280'.
[ 1306.572784][T31969] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6280'.
[ 1306.609379][T31969] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6280'.
[ 1306.619463][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1306.640663][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1306.647960][T31969] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6280'.
[ 1306.822406][T31971] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6281'.
[ 1306.843987][T31971] netlink: ct family unspecified
[ 1308.030065][T31988] netlink: 260 bytes leftover after parsing attributes in process `syz.7.6287'.
[ 1311.740901][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1312.380386][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1313.012430][T32090] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6325'.
[ 1313.079328][T32094] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6327'.
[ 1313.090091][T32094] netlink: ct family unspecified
[ 1313.609384][T32116] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6336'.
[ 1313.619604][T32116] netlink: ct family unspecified
[ 1313.639879][T32118] overlayfs: failed to clone upperpath
[ 1313.763358][T32126] overlayfs: failed to clone upperpath
[ 1313.871506][T32131] overlayfs: failed to clone lowerpath
[ 1314.345842][T32157] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6354'.
[ 1316.455879][T32220] netlink: 'syz.5.6377': attribute type 10 has an invalid length.
[ 1316.487134][T32220] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1316.634180][T32228] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6380'.
[ 1316.865969][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1317.092193][T32253] netlink: 'syz.4.6391': attribute type 21 has an invalid length.
[ 1317.102328][T32253] netlink: 14532 bytes leftover after parsing attributes in process `syz.4.6391'.
[ 1317.114430][T32253] netlink: 'syz.4.6391': attribute type 10 has an invalid length.
[ 1317.124782][T32253] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6391'.
[ 1317.166154][T32258] overlayfs: failed to clone upperpath
[ 1317.499255][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1317.562460][T32277] FAULT_INJECTION: forcing a failure.
[ 1317.562460][T32277] name failslab, interval 1, probability 0, space 0, times 0
[ 1317.578037][T32277] CPU: 1 UID: 0 PID: 32277 Comm: syz.7.6401 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1317.578066][T32277] Tainted: [L]=SOFTLOCKUP
[ 1317.578073][T32277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1317.578083][T32277] Call Trace:
[ 1317.578091][T32277]  <TASK>
[ 1317.578097][T32277]  dump_stack_lvl+0xe8/0x150
[ 1317.578126][T32277]  should_fail_ex+0x412/0x560
[ 1317.578153][T32277]  should_failslab+0xa8/0x100
[ 1317.578173][T32277]  ? vm_area_dup+0x2b/0x680
[ 1317.578191][T32277]  kmem_cache_alloc_noprof+0x87/0x650
[ 1317.578217][T32277]  ? look_up_lock_class+0x57/0x110
[ 1317.578243][T32277]  vm_area_dup+0x2b/0x680
[ 1317.578263][T32277]  __split_vma+0x1dc/0xa40
[ 1317.578294][T32277]  ? __pfx___split_vma+0x10/0x10
[ 1317.578325][T32277]  ? mas_find+0xb0e/0xd30
[ 1317.578355][T32277]  vms_gather_munmap_vmas+0x4fa/0x1370
[ 1317.578395][T32277]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1317.578427][T32277]  ? mas_find+0xa7d/0xd30
[ 1317.578455][T32277]  mmap_region+0x85b/0x2240
[ 1317.578492][T32277]  ? __pfx_mmap_region+0x10/0x10
[ 1317.578516][T32277]  ? __lock_acquire+0x6b5/0x2cf0
[ 1317.578549][T32277]  ? unwind_next_frame+0xa5/0x23c0
[ 1317.578627][T32277]  ? arch_get_unmapped_area_topdown+0x264/0xb60
[ 1317.578671][T32277]  ? mm_get_unmapped_area+0xd3/0x100
[ 1317.578700][T32277]  ? shmem_get_unmapped_area+0x293/0x8e0
[ 1317.578732][T32277]  ? cap_mmap_addr+0xaf/0x100
[ 1317.578755][T32277]  ? bpf_lsm_mmap_addr+0x9/0x50
[ 1317.578775][T32277]  ? security_mmap_addr+0x71/0x240
[ 1317.578805][T32277]  do_mmap+0xc39/0x10c0
[ 1317.578839][T32277]  ? __pfx_do_mmap+0x10/0x10
[ 1317.578859][T32277]  ? down_write_killable+0x180/0x240
[ 1317.578881][T32277]  ? __pfx_down_write_killable+0x10/0x10
[ 1317.578908][T32277]  ? apparmor_mmap_file+0x197/0x3e0
[ 1317.578928][T32277]  ? security_mmap_file+0xf9/0xa20
[ 1317.578964][T32277]  vm_mmap_pgoff+0x2c9/0x4f0
[ 1317.578995][T32277]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1317.579015][T32277]  ? ksys_write+0x242/0x270
[ 1317.579036][T32277]  ? __pfx_ksys_write+0x10/0x10
[ 1317.579056][T32277]  ? ksys_mmap_pgoff+0xf3/0x760
[ 1317.579080][T32277]  ? __x64_sys_mmap+0x7f/0x140
[ 1317.579107][T32277]  do_syscall_64+0x14d/0xf80
[ 1317.579121][T32277]  ? trace_irq_disable+0x3b/0x150
[ 1317.579142][T32277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1317.579157][T32277]  ? clear_bhb_loop+0x40/0x90
[ 1317.579176][T32277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1317.579193][T32277] RIP: 0033:0x7fe84cb9c629
[ 1317.579210][T32277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1317.579224][T32277] RSP: 002b:00007fe84adee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1317.579241][T32277] RAX: ffffffffffffffda RBX: 00007fe84ce15fa0 RCX: 00007fe84cb9c629
[ 1317.579253][T32277] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000
[ 1317.579265][T32277] RBP: 00007fe84adee090 R08: ffffffffffffffff R09: 00000000ec776000
[ 1317.579276][T32277] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001
[ 1317.579287][T32277] R13: 00007fe84ce16038 R14: 00007fe84ce15fa0 R15: 00007fffa1235c98
[ 1317.579314][T32277]  </TASK>
[ 1318.628060][T29488] Bluetooth: hci3: command 0x0406 tx timeout
[ 1319.107401][T32321] No control pipe specified
[ 1319.144770][T32327] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6423'.
[ 1319.155108][T32328] FAULT_INJECTION: forcing a failure.
[ 1319.155108][T32328] name failslab, interval 1, probability 0, space 0, times 0
[ 1319.175922][T32328] CPU: 0 UID: 0 PID: 32328 Comm: syz.7.6422 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1319.175958][T32328] Tainted: [L]=SOFTLOCKUP
[ 1319.175965][T32328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1319.175989][T32328] Call Trace:
[ 1319.175997][T32328]  <TASK>
[ 1319.176005][T32328]  dump_stack_lvl+0xe8/0x150
[ 1319.176034][T32328]  should_fail_ex+0x412/0x560
[ 1319.176065][T32328]  should_failslab+0xa8/0x100
[ 1319.176086][T32328]  ? mas_alloc_nodes+0x291/0x350
[ 1319.176108][T32328]  kmem_cache_alloc_noprof+0x87/0x650
[ 1319.176140][T32328]  mas_alloc_nodes+0x291/0x350
[ 1319.176164][T32328]  mas_preallocate+0x2d6/0x640
[ 1319.176188][T32328]  ? rcu_is_watching+0x15/0xb0
[ 1319.176211][T32328]  ? __pfx_mas_preallocate+0x10/0x10
[ 1319.176245][T32328]  ? __mas_set_range+0x12f/0x3c0
[ 1319.176274][T32328]  __split_vma+0x318/0xa40
[ 1319.176309][T32328]  ? __pfx___split_vma+0x10/0x10
[ 1319.176342][T32328]  ? mas_find+0xb0e/0xd30
[ 1319.176388][T32328]  vms_gather_munmap_vmas+0x4fa/0x1370
[ 1319.176427][T32328]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1319.176459][T32328]  ? mas_find+0xa7d/0xd30
[ 1319.176488][T32328]  mmap_region+0x85b/0x2240
[ 1319.176524][T32328]  ? __pfx_mmap_region+0x10/0x10
[ 1319.176549][T32328]  ? __lock_acquire+0x6b5/0x2cf0
[ 1319.176581][T32328]  ? unwind_next_frame+0xa5/0x23c0
[ 1319.176658][T32328]  ? arch_get_unmapped_area_topdown+0x264/0xb60
[ 1319.176702][T32328]  ? mm_get_unmapped_area+0xd3/0x100
[ 1319.176731][T32328]  ? shmem_get_unmapped_area+0x293/0x8e0
[ 1319.176757][T32328]  ? cap_mmap_addr+0xaf/0x100
[ 1319.176781][T32328]  ? bpf_lsm_mmap_addr+0x9/0x50
[ 1319.176800][T32328]  ? security_mmap_addr+0x71/0x240
[ 1319.176830][T32328]  do_mmap+0xc39/0x10c0
[ 1319.176865][T32328]  ? __pfx_do_mmap+0x10/0x10
[ 1319.176885][T32328]  ? down_write_killable+0x180/0x240
[ 1319.176908][T32328]  ? __pfx_down_write_killable+0x10/0x10
[ 1319.176927][T32328]  ? apparmor_mmap_file+0x197/0x3e0
[ 1319.176954][T32328]  ? security_mmap_file+0xf9/0xa20
[ 1319.176979][T32328]  vm_mmap_pgoff+0x2c9/0x4f0
[ 1319.177007][T32328]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1319.177028][T32328]  ? ksys_write+0x242/0x270
[ 1319.177047][T32328]  ? __pfx_ksys_write+0x10/0x10
[ 1319.177066][T32328]  ? ksys_mmap_pgoff+0xf3/0x760
[ 1319.177090][T32328]  ? __x64_sys_mmap+0x7f/0x140
[ 1319.177116][T32328]  do_syscall_64+0x14d/0xf80
[ 1319.177131][T32328]  ? trace_irq_disable+0x3b/0x150
[ 1319.177153][T32328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.177171][T32328]  ? clear_bhb_loop+0x40/0x90
[ 1319.177192][T32328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.177208][T32328] RIP: 0033:0x7fe84cb9c629
[ 1319.177225][T32328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1319.177240][T32328] RSP: 002b:00007fe84adcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1319.177259][T32328] RAX: ffffffffffffffda RBX: 00007fe84ce16090 RCX: 00007fe84cb9c629
[ 1319.177272][T32328] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000
[ 1319.177284][T32328] RBP: 00007fe84adcd090 R08: ffffffffffffffff R09: 00000000ec776000
[ 1319.177297][T32328] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001
[ 1319.177308][T32328] R13: 00007fe84ce16128 R14: 00007fe84ce16090 R15: 00007fffa1235c98
[ 1319.177337][T32328]  </TASK>
[ 1319.659024][T32339] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6427'.
[ 1319.676294][T32339] netlink: ct family unspecified
[ 1319.873962][T32349] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1319.931627][T32352] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6432'.
[ 1320.423757][T32391] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6445'.
[ 1320.436659][T32395] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6447'.
[ 1320.698171][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[ 1320.775170][T32415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6455'.
[ 1320.813401][T32415] overlayfs: failed to clone upperpath
[ 1321.008200][T32423] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6457'.
[ 1321.126057][T32425] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6458'.
[ 1321.212526][T32413] smc: net device bond0 applied user defined pnetid SYZ2
[ 1321.600152][T32446] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6466'.
[ 1321.821635][T32455] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6468'.
[ 1322.241638][T32468] fuse: Bad value for 'fd'
[ 1322.619343][T29279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1323.258650][ T1012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1323.323382][T32500] netlink: 'syz.7.6486': attribute type 1 has an invalid length.
[ 1323.596836][T29488] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1323.607388][T29488] CPU: 1 UID: 0 PID: 29488 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1323.607421][T29488] Tainted: [L]=SOFTLOCKUP
[ 1323.607429][T29488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1323.607443][T29488] Workqueue: hci4 hci_rx_work
[ 1323.607479][T29488] Call Trace:
[ 1323.607488][T29488]  <TASK>
[ 1323.607496][T29488]  dump_stack_lvl+0xe8/0x150
[ 1323.607529][T29488]  sysfs_create_dir_ns+0x271/0x2a0
[ 1323.607558][T29488]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1323.607585][T29488]  ? do_raw_spin_unlock+0xf5/0x210
[ 1323.607612][T29488]  kobject_add_internal+0x62b/0xd00
[ 1323.607644][T29488]  kobject_add+0x163/0x240
[ 1323.607669][T29488]  ? __pfx_kobject_add+0x10/0x10
[ 1323.607691][T29488]  ? _raw_spin_unlock+0x28/0x50
[ 1323.607722][T29488]  ? get_device_parent+0x366/0x3a0
[ 1323.607751][T29488]  device_add+0x408/0xb70
[ 1323.607780][T29488]  hci_conn_add_sysfs+0xd5/0x210
[ 1323.607814][T29488]  le_conn_complete_evt+0xf1d/0x1430
[ 1323.607846][T29488]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1323.607867][T29488]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1323.607886][T29488]  ? __pfx___mutex_lock+0x10/0x10
[ 1323.607906][T29488]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1323.607925][T29488]  ? skb_pull_data+0xfb/0x200
[ 1323.607950][T29488]  hci_le_conn_complete_evt+0x187/0x470
[ 1323.607982][T29488]  hci_event_packet+0x7af/0x12c0
[ 1323.608019][T29488]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1323.608042][T29488]  ? __pfx_hci_event_packet+0x10/0x10
[ 1323.608078][T29488]  ? kcov_remote_start+0x49a/0x7a0
[ 1323.608110][T29488]  ? hci_send_to_monitor+0xe2/0x590
[ 1323.608139][T29488]  hci_rx_work+0x3ee/0x1040
[ 1323.608180][T29488]  ? process_one_work+0x87c/0x1650
[ 1323.608204][T29488]  process_one_work+0x949/0x1650
[ 1323.608249][T29488]  ? __pfx_process_one_work+0x10/0x10
[ 1323.608273][T29488]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1323.608319][T29488]  worker_thread+0xb46/0x1140
[ 1323.608352][T29488]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1323.608390][T29488]  kthread+0x388/0x470
[ 1323.608408][T29488]  ? __pfx_worker_thread+0x10/0x10
[ 1323.608431][T29488]  ? __pfx_kthread+0x10/0x10
[ 1323.608449][T29488]  ret_from_fork+0x51e/0xb90
[ 1323.608477][T29488]  ? __pfx_ret_from_fork+0x10/0x10
[ 1323.608499][T29488]  ? __switch_to+0xc7d/0x1450
[ 1323.608524][T29488]  ? __pfx_kthread+0x10/0x10
[ 1323.608544][T29488]  ret_from_fork_asm+0x1a/0x30
[ 1323.608588][T29488]  </TASK>
[ 1323.886578][T29488] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1323.901620][T29488] Bluetooth: hci4: failed to register connection device
[ 1324.160319][T32521] overlayfs: failed to clone upperpath
[ 1324.550529][T32531] __nla_validate_parse: 3 callbacks suppressed
[ 1324.550559][T32531] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6498'.
[ 1324.828898][T32542] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6502'.
[ 1325.110864][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1325.122530][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1325.122562][ T5838] Tainted: [L]=SOFTLOCKUP
[ 1325.122570][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1325.122584][ T5838] Workqueue: hci4 hci_rx_work
[ 1325.122621][ T5838] Call Trace:
[ 1325.122630][ T5838]  <TASK>
[ 1325.122639][ T5838]  dump_stack_lvl+0xe8/0x150
[ 1325.122671][ T5838]  sysfs_create_dir_ns+0x271/0x2a0
[ 1325.122701][ T5838]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1325.122732][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[ 1325.122759][ T5838]  kobject_add_internal+0x62b/0xd00
[ 1325.122789][ T5838]  kobject_add+0x163/0x240
[ 1325.122815][ T5838]  ? __pfx_kobject_add+0x10/0x10
[ 1325.122837][ T5838]  ? _raw_spin_unlock+0x28/0x50
[ 1325.122868][ T5838]  ? get_device_parent+0x366/0x3a0
[ 1325.122897][ T5838]  device_add+0x408/0xb70
[ 1325.122925][ T5838]  hci_conn_add_sysfs+0xd5/0x210
[ 1325.122958][ T5838]  le_conn_complete_evt+0xf1d/0x1430
[ 1325.122993][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1325.123014][ T5838]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1325.123038][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[ 1325.123057][ T5838]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1325.123075][ T5838]  ? skb_pull_data+0xfb/0x200
[ 1325.123100][ T5838]  hci_le_conn_complete_evt+0x187/0x470
[ 1325.123131][ T5838]  hci_event_packet+0x7af/0x12c0
[ 1325.123167][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1325.123190][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[ 1325.123223][ T5838]  ? kcov_remote_start+0x49a/0x7a0
[ 1325.123255][ T5838]  ? hci_send_to_monitor+0xe2/0x590
[ 1325.123284][ T5838]  hci_rx_work+0x3ee/0x1040
[ 1325.123324][ T5838]  ? process_one_work+0x87c/0x1650
[ 1325.123349][ T5838]  process_one_work+0x949/0x1650
[ 1325.123396][ T5838]  ? __pfx_process_one_work+0x10/0x10
[ 1325.123419][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1325.123462][ T5838]  worker_thread+0xb46/0x1140
[ 1325.123514][ T5838]  kthread+0x388/0x470
[ 1325.123535][ T5838]  ? __pfx_worker_thread+0x10/0x10
[ 1325.123560][ T5838]  ? __pfx_kthread+0x10/0x10
[ 1325.123581][ T5838]  ret_from_fork+0x51e/0xb90
[ 1325.123610][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[ 1325.123634][ T5838]  ? __switch_to+0xc7d/0x1450
[ 1325.123661][ T5838]  ? __pfx_kthread+0x10/0x10
[ 1325.123683][ T5838]  ret_from_fork_asm+0x1a/0x30
[ 1325.123728][ T5838]  </TASK>
[ 1325.123757][ T5838] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1325.377070][ T5838] Bluetooth: hci4: failed to register connection device
[ 1325.665586][T32572] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6513'.
[ 1325.981895][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[ 1326.291746][T32600] fuse: Bad value for 'rootmode'
[ 1326.377126][T32603] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6526'.
[ 1326.604992][T32612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6528'.
[ 1326.729251][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6531'.
[ 1326.739109][T32619] No control pipe specified
[ 1326.805610][T32624] overlayfs: failed to clone upperpath
[ 1326.856634][T32626] bridge0: port 2(team0) entered blocking state
[ 1326.863805][T32626] bridge0: port 2(team0) entered disabled state
[ 1326.872843][T32626] team0: entered allmulticast mode
[ 1326.878444][T32626] team_slave_0: entered allmulticast mode
[ 1326.884351][T32626] team_slave_1: entered allmulticast mode
[ 1326.893254][T32626] team0: entered promiscuous mode
[ 1326.893412][T32628] fuse: Unknown parameter 'fdá0x0000000000000009'
[ 1326.898626][T32626] team_slave_0: entered promiscuous mode
[ 1326.911941][T32626] team_slave_1: entered promiscuous mode
[ 1326.919390][T32626] bridge0: port 2(team0) entered blocking state
[ 1326.925854][T32626] bridge0: port 2(team0) entered forwarding state
[ 1327.277763][T32642] overlayfs: failed to resolve './file0/file1': -2
[ 1327.478822][T32647] netlink: 'syz.6.6544': attribute type 16 has an invalid length.
[ 1327.488686][T32647] netlink: 'syz.6.6544': attribute type 2 has an invalid length.
[ 1327.496418][T32647] netlink: 'syz.6.6544': attribute type 2 has an invalid length.
[ 1327.523831][T32647] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.6544'.
[ 1327.555236][T32650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6545'.
[ 1327.740612][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1327.765167][T32659] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6549'.
[ 1327.883119][T32667] overlayfs: failed to clone upperpath
[ 1328.024411][T32675] fuse: Bad value for 'group_id'
[ 1328.030735][T32675] fuse: Bad value for 'group_id'
[ 1328.058126][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[ 1328.651053][T32704] No control pipe specified
[ 1328.667125][T32705] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6569'.
[ 1329.018745][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1329.169150][T32723] netlink: 'syz.7.6576': attribute type 10 has an invalid length.
[ 1329.192202][T32723] team0: Device vxcan1 is of different type
[ 1329.747145][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1329.747162][   T30] audit: type=1326 audit(1771768217.868:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32749 comm="syz.6.6586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34899c629 code=0x0
[ 1330.137984][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[ 1331.198967][  T342] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1331.329218][  T347] overlayfs: failed to clone upperpath
[ 1332.036433][  T355] __nla_validate_parse: 1 callbacks suppressed
[ 1332.036451][  T355] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6604'.
[ 1332.218023][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[ 1332.295251][  T368] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6610'.
[ 1332.340445][  T370] overlayfs: failed to clone upperpath
[ 1332.354378][  T370] No control pipe specified
[ 1332.452848][  T378] netlink: 296 bytes leftover after parsing attributes in process `syz.6.6614'.
[ 1332.669920][  T391] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6619'.
[ 1332.710269][  T393] netlink: 'syz.6.6620': attribute type 7 has an invalid length.
[ 1332.725970][  T393] : entered promiscuous mode
[ 1333.508186][T25811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1334.064301][  T451] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6642'.
[ 1334.245723][  T464] overlayfs: failed to clone upperpath
[ 1334.470636][  T476] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6652'.
[ 1334.780301][T29467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1334.863889][  T498] bridge0: port 3(batadv_slave_0) entered blocking state
[ 1334.874687][  T498] bridge0: port 3(batadv_slave_0) entered disabled state
[ 1334.884006][  T498] batadv_slave_0: entered allmulticast mode
[ 1334.895137][  T498] batadv_slave_0: entered promiscuous mode
[ 1334.902086][  T498] bridge0: port 3(batadv_slave_0) entered blocking state
[ 1334.909349][  T498] bridge0: port 3(batadv_slave_0) entered forwarding state
[ 1335.010631][  T506] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6662'.
[ 1335.418186][   T31] INFO: task syz.1.4755:27690 blocked for more than 143 seconds.
[ 1335.426427][   T31]       Tainted: G             L      syzkaller #0
[ 1335.438790][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1335.461018][   T31] task:syz.1.4755      state:D stack:24576 pid:27690 tgid:27690 ppid:25197  task_flags:0x400040 flags:0x00080002
[ 1335.473367][  T528] overlayfs: failed to resolve './file0': -2
[ 1335.488080][   T31] Call Trace:
[ 1335.497925][   T31]  <TASK>
[ 1335.501267][   T31]  __schedule+0x1585/0x5340
[ 1335.507889][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1335.522480][   T31]  ? __schedule+0x159b/0x5340
[ 1335.531015][   T31]  ? __pfx___schedule+0x10/0x10
[ 1335.535992][   T31]  ? schedule+0x90/0x360
[ 1335.540524][   T31]  schedule+0x164/0x360
[ 1335.544787][   T31]  schedule_timeout+0xc3/0x2c0
[ 1335.553131][   T31]  ? futex_unqueue+0x22/0x240
[ 1335.558849][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1335.564413][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1335.569722][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1335.575140][   T31]  ? wait_for_completion+0x274/0x5e0
[ 1335.581453][   T31]  wait_for_completion+0x2cc/0x5e0
[ 1335.586785][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1335.595314][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1335.600942][   T31]  restrict_one_thread_callback+0x320/0x570
[ 1335.607139][   T31]  task_work_run+0x1d9/0x270
[ 1335.612352][   T31]  ? __pfx_task_work_run+0x10/0x10
[ 1335.617574][   T31]  ? __pfx_futex_wait+0x10/0x10
[ 1335.624095][   T31]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1335.631332][   T31]  get_signal+0x11eb/0x1330
[ 1335.635994][   T31]  ? do_futex+0x333/0x420
[ 1335.649724][   T31]  arch_do_signal_or_restart+0xbc/0x830
[ 1335.655343][   T31]  ? read_tsc+0x9/0x20
[ 1335.666358][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1335.672945][   T31]  exit_to_user_mode_loop+0x86/0x480
[ 1335.678543][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1335.683454][   T31]  do_syscall_64+0x32d/0xf80
[ 1335.688154][   T31]  ? trace_irq_disable+0x3b/0x150
[ 1335.693316][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1335.699570][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1335.704318][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1335.710554][   T31] RIP: 0033:0x7fedd079c629
[ 1335.715005][   T31] RSP: 002b:00007ffded445938 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1335.723714][   T31] RAX: fffffffffffffdfc RBX: 00000000000fdaa4 RCX: 00007fedd079c629
[ 1335.732105][   T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fedd0a1618c
[ 1335.743456][   T31] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000
[ 1335.751568][   T31] R10: 00007ffded445a40 R11: 0000000000000246 R12: 00007ffded445a60
[ 1335.759638][   T31] R13: 00007fedd0a1618c R14: 00000000000fdad6 R15: 00007ffded445a40
[ 1335.767753][   T31]  </TASK>
[ 1335.770864][   T31] INFO: task syz.1.4755:27691 blocked for more than 144 seconds.
[ 1335.779610][   T31]       Tainted: G             L      syzkaller #0
[ 1335.786310][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1335.795103][   T31] task:syz.1.4755      state:D stack:27272 pid:27691 tgid:27690 ppid:25197  task_flags:0x400140 flags:0x00080002
[ 1335.807118][   T31] Call Trace:
[ 1335.810731][   T31]  <TASK>
[ 1335.813683][   T31]  __schedule+0x1585/0x5340
[ 1335.823479][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1335.829256][   T31]  ? __schedule+0x159b/0x5340
[ 1335.834258][   T31]  ? __pfx___schedule+0x10/0x10
[ 1335.839645][   T31]  ? schedule+0x90/0x360
[ 1335.844010][   T31]  schedule+0x164/0x360
[ 1335.848582][   T31]  schedule_timeout+0xc3/0x2c0
[ 1335.853380][   T31]  ? futex_unqueue+0x22/0x240
[ 1335.858422][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1335.863922][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1335.869044][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1335.874256][   T31]  ? wait_for_completion+0x274/0x5e0
[ 1335.879657][   T31]  wait_for_completion+0x2cc/0x5e0
[ 1335.884805][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1335.890532][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1335.895590][   T31]  restrict_one_thread_callback+0x320/0x570
[ 1335.901758][   T31]  task_work_run+0x1d9/0x270
[ 1335.906366][   T31]  ? __pfx_task_work_run+0x10/0x10
[ 1335.911791][   T31]  ? __pfx_futex_wait+0x10/0x10
[ 1335.916680][   T31]  get_signal+0x11eb/0x1330
[ 1335.921313][   T31]  ? do_futex+0x333/0x420
[ 1335.925712][   T31]  arch_do_signal_or_restart+0xbc/0x830
[ 1335.931377][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1335.938199][   T31]  exit_to_user_mode_loop+0x86/0x480
[ 1335.943523][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1335.948429][   T31]  do_syscall_64+0x32d/0xf80
[ 1335.953037][   T31]  ? trace_irq_disable+0x3b/0x150
[ 1335.958279][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1335.964360][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1335.969097][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1335.974997][   T31] RIP: 0033:0x7fedd079c629
[ 1335.981266][   T31] RSP: 002b:00007fedd15820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1335.989922][   T31] RAX: fffffffffffffe00 RBX: 00007fedd0a15fa8 RCX: 00007fedd079c629
[ 1335.998006][   T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fedd0a15fa8
[ 1336.005985][   T31] RBP: 00007fedd0a15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1336.014223][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1336.022421][   T31] R13: 00007fedd0a16038 R14: 00007ffded4456f0 R15: 00007ffded4457d8
[ 1336.030552][   T31]  </TASK>
[ 1336.033643][   T31] INFO: task syz.1.4755:27692 blocked for more than 144 seconds.
[ 1336.041831][   T31]       Tainted: G             L      syzkaller #0
[ 1336.048521][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1336.057187][   T31] task:syz.1.4755      state:D stack:26464 pid:27692 tgid:27690 ppid:25197  task_flags:0x400140 flags:0x00080006
[ 1336.069945][   T31] Call Trace:
[ 1336.073320][   T31]  <TASK>
[ 1336.076304][   T31]  __schedule+0x1585/0x5340
[ 1336.081209][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 1336.086349][   T31]  ? register_lock_class+0x31/0x2e0
[ 1336.095034][   T31]  ? __pfx___schedule+0x10/0x10
[ 1336.100085][   T31]  ? schedule+0x90/0x360
[ 1336.104452][   T31]  schedule+0x164/0x360
[ 1336.108770][   T31]  schedule_timeout+0xc3/0x2c0
[ 1336.113569][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1336.118841][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1336.124313][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1336.129948][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1336.135165][   T31]  ? wait_for_completion+0x274/0x5e0
[ 1336.140966][   T31]  wait_for_completion+0x2cc/0x5e0
[ 1336.146103][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1336.151858][   T31]  landlock_restrict_sibling_threads+0xe16/0x1190
[ 1336.158485][   T31]  ? landlock_restrict_sibling_threads+0x261/0x1190
[ 1336.165094][   T31]  ? __pfx_landlock_restrict_sibling_threads+0x10/0x10
[ 1336.172043][   T31]  ? landlock_put_ruleset+0x10/0xb0
[ 1336.177256][   T31]  __se_sys_landlock_restrict_self+0x540/0x810
[ 1336.183549][   T31]  do_syscall_64+0x14d/0xf80
[ 1336.188732][   T31]  ? trace_irq_disable+0x3b/0x150
[ 1336.193856][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1336.199970][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1336.204658][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1336.210616][   T31] RIP: 0033:0x7fedd079c629
[ 1336.215035][   T31] RSP: 002b:00007fedce9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[ 1336.223778][   T31] RAX: ffffffffffffffda RBX: 00007fedd0a16090 RCX: 00007fedd079c629
[ 1336.232177][   T31] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000008
[ 1336.241841][   T31] RBP: 00007fedd0832b39 R08: 0000000000000000 R09: 0000000000000000
[ 1336.250157][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1336.258228][   T31] R13: 00007fedd0a16128 R14: 00007fedd0a16090 R15: 00007ffded4457d8
[ 1336.266330][   T31]  </TASK>
[ 1336.269545][   T31] INFO: task syz.1.4755:27693 blocked for more than 144 seconds.
[ 1336.277268][   T31]       Tainted: G             L      syzkaller #0
[ 1336.290632][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1336.299486][   T31] task:syz.1.4755      state:D stack:28832 pid:27693 tgid:27690 ppid:25197  task_flags:0x400140 flags:0x00080006
[ 1336.311459][   T31] Call Trace:
[ 1336.314764][   T31]  <TASK>
[ 1336.317688][   T31]  __schedule+0x1585/0x5340
[ 1336.322487][   T31]  ? __pfx___schedule+0x10/0x10
[ 1336.327374][   T31]  ? schedule+0x90/0x360
[ 1336.331866][   T31]  schedule+0x164/0x360
[ 1336.336031][   T31]  schedule_timeout+0xc3/0x2c0
[ 1336.340934][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1336.346338][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1336.351849][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1336.356890][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1336.362145][   T31]  ? wait_for_completion+0x274/0x5e0
[ 1336.367449][   T31]  wait_for_completion+0x2cc/0x5e0
[ 1336.372658][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1336.378497][   T31]  ? landlock_restrict_sibling_threads+0x261/0x1190
[ 1336.385119][   T31]  landlock_restrict_sibling_threads+0xe16/0x1190
[ 1336.391616][   T31]  ? landlock_restrict_sibling_threads+0x261/0x1190
[ 1336.398292][   T31]  ? __pfx_landlock_restrict_sibling_threads+0x10/0x10
[ 1336.405185][   T31]  ? landlock_put_ruleset+0x10/0xb0
[ 1336.410653][   T31]  __se_sys_landlock_restrict_self+0x540/0x810
[ 1336.416821][   T31]  do_syscall_64+0x14d/0xf80
[ 1336.421495][   T31]  ? trace_irq_disable+0x3b/0x150
[ 1336.426704][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1336.432848][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1336.437584][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1336.443532][   T31] RIP: 0033:0x7fedd079c629
[ 1336.448212][   T31] RSP: 002b:00007fedce9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[ 1336.456628][   T31] RAX: ffffffffffffffda RBX: 00007fedd0a16180 RCX: 00007fedd079c629
[ 1336.464887][   T31] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000008
[ 1336.472918][   T31] RBP: 00007fedd0832b39 R08: 0000000000000000 R09: 0000000000000000
[ 1336.481021][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1336.489161][   T31] R13: 00007fedd0a16218 R14: 00007fedd0a16180 R15: 00007ffded4457d8
[ 1336.497140][   T31]  </TASK>
[ 1336.500366][   T31] 
[ 1336.500366][   T31] Showing all locks held in the system:
[ 1336.509836][   T31] 1 lock held by khungtaskd/31:
[ 1336.514691][   T31]  #0: ffffffff8e9602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1336.524781][   T31] 2 locks held by getty/5589:
[ 1336.529645][   T31]  #0: ffff8880322700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1336.539834][   T31]  #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1336.550318][   T31] 
[ 1336.552646][   T31] =============================================
[ 1336.552646][   T31] 
[ 1336.561389][   T31] NMI backtrace for cpu 1
[ 1336.561406][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1336.561426][   T31] Tainted: [L]=SOFTLOCKUP
[ 1336.561430][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1336.561436][   T31] Call Trace:
[ 1336.561441][   T31]  <TASK>
[ 1336.561446][   T31]  dump_stack_lvl+0xe8/0x150
[ 1336.561465][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1336.561479][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1336.561495][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1336.561510][   T31]  sys_info+0x135/0x170
[ 1336.561520][   T31]  watchdog+0xfd9/0x1030
[ 1336.561538][   T31]  ? watchdog+0x21a/0x1030
[ 1336.561555][   T31]  kthread+0x388/0x470
[ 1336.561571][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1336.561592][   T31]  ? __pfx_kthread+0x10/0x10
[ 1336.561609][   T31]  ret_from_fork+0x51e/0xb90
[ 1336.561633][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1336.561652][   T31]  ? __switch_to+0xc7d/0x1450
[ 1336.561666][   T31]  ? __pfx_kthread+0x10/0x10
[ 1336.561676][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1336.561698][   T31]  </TASK>
[ 1336.561702][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1336.677922][    C0] NMI backtrace for cpu 0
[ 1336.677941][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1336.677961][    C0] Tainted: [L]=SOFTLOCKUP
[ 1336.677967][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1336.677977][    C0] RIP: 0010:debug_smp_processor_id+0xb/0x20
[ 1336.677999][    C0] Code: f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 a0 0a 2a 8c <48> c7 c6 e0 0a 2a 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90
[ 1336.678012][    C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00000007
[ 1336.678026][    C0] RAX: 0000000000000000 RBX: ffffffff8bbb193e RCX: 0000000000000002
[ 1336.678036][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c2a0aa0
[ 1336.678046][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1336.678055][    C0] R10: ffffc90000007898 R11: ffffffff81b11670 R12: 0000000000000002
[ 1336.678066][    C0] R13: ffffffff8e9602e0 R14: 0000000000000000 R15: 0000000000000000
[ 1336.678076][    C0] FS:  0000000000000000(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000
[ 1336.678088][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1336.678099][    C0] CR2: 00005638b36fb660 CR3: 000000007a8a4000 CR4: 00000000003526f0
[ 1336.678113][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1336.678122][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1336.678132][    C0] Call Trace:
[ 1336.678138][    C0]  <IRQ>
[ 1336.678144][    C0]  rcu_is_watching+0x15/0xb0
[ 1336.678165][    C0]  ? rest_init+0x2de/0x300
[ 1336.678181][    C0]  lock_acquire+0x57/0x2e0
[ 1336.678200][    C0]  ? unwind_next_frame+0xa5/0x23c0
[ 1336.678221][    C0]  ? rest_init+0x2de/0x300
[ 1336.678236][    C0]  ? unwind_next_frame+0xa5/0x23c0
[ 1336.678252][    C0]  unwind_next_frame+0xc2/0x23c0
[ 1336.678270][    C0]  ? unwind_next_frame+0xa5/0x23c0
[ 1336.678291][    C0]  ? unwind_next_frame+0xa5/0x23c0
[ 1336.678311][    C0]  ? cpu_startup_entry+0x43/0x60
[ 1336.678333][    C0]  ? rest_init+0x2de/0x300
[ 1336.678350][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1336.678366][    C0]  arch_stack_walk+0x11b/0x150
[ 1336.678388][    C0]  ? rest_init+0x2de/0x300
[ 1336.678406][    C0]  stack_trace_save+0xa9/0x100
[ 1336.678420][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1336.678436][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1336.678456][    C0]  kasan_save_stack+0x3e/0x60
[ 1336.678471][    C0]  ? kasan_save_stack+0x3e/0x60
[ 1336.678490][    C0]  ? kasan_record_aux_stack+0xbd/0xd0
[ 1336.678509][    C0]  ? insert_work+0x3d/0x330
[ 1336.678525][    C0]  ? __queue_work+0xbe1/0x1020
[ 1336.678544][    C0]  ? call_timer_fn+0x192/0x640
[ 1336.678561][    C0]  ? __run_timer_base+0x67e/0x8b0
[ 1336.678576][    C0]  ? run_timer_softirq+0xb7/0x170
[ 1336.678591][    C0]  ? handle_softirqs+0x22a/0x870
[ 1336.678609][    C0]  ? __irq_exit_rcu+0x5f/0x150
[ 1336.678626][    C0]  ? irq_exit_rcu+0x9/0x30
[ 1336.678643][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1336.678662][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1336.678678][    C0]  ? pv_native_safe_halt+0xf/0x20
[ 1336.678697][    C0]  ? default_idle+0x9/0x20
[ 1336.678711][    C0]  ? default_idle_call+0x72/0xb0
[ 1336.678725][    C0]  ? do_idle+0x1bd/0x500
[ 1336.678743][    C0]  ? cpu_startup_entry+0x43/0x60
[ 1336.678761][    C0]  ? rest_init+0x2de/0x300
[ 1336.678791][    C0]  kasan_record_aux_stack+0xbd/0xd0
[ 1336.678809][    C0]  insert_work+0x3d/0x330
[ 1336.678827][    C0]  __queue_work+0xbe1/0x1020
[ 1336.678848][    C0]  ? __queue_work+0x1a1/0x1020
[ 1336.678867][    C0]  call_timer_fn+0x192/0x640
[ 1336.678885][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1336.678903][    C0]  ? call_timer_fn+0xd4/0x640
[ 1336.678920][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1336.678941][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[ 1336.678956][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1336.678976][    C0]  __run_timer_base+0x67e/0x8b0
[ 1336.678992][    C0]  ? ktime_get+0x45/0x200
[ 1336.679012][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1336.679031][    C0]  ? sched_clock_cpu+0x74/0x440
[ 1336.679052][    C0]  run_timer_softirq+0xb7/0x170
[ 1336.679069][    C0]  handle_softirqs+0x22a/0x870
[ 1336.679088][    C0]  ? __irq_exit_rcu+0x5f/0x150
[ 1336.679109][    C0]  __irq_exit_rcu+0x5f/0x150
[ 1336.679126][    C0]  irq_exit_rcu+0x9/0x30
[ 1336.679142][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1336.679162][    C0]  </IRQ>
[ 1336.679168][    C0]  <TASK>
[ 1336.679174][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1336.679189][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1336.679209][    C0] Code: 1e 72 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 7d 0e 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1336.679221][    C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242
[ 1336.679233][    C0] RAX: 0000000001a40107 RBX: ffffffff819ae33d RCX: 0000000080000001
[ 1336.679244][    C0] RDX: 0000000000000001 RSI: ffffffff8e0150a1 RDI: ffffffff8c2a0b00
[ 1336.679254][    C0] RBP: ffffffff8e607eb0 R08: ffff8880b843395b R09: 1ffff1101708672b
[ 1336.679265][    C0] R10: dffffc0000000000 R11: ffffed101708672c R12: ffffffff9033cab0
[ 1336.679276][    C0] R13: 1ffffffff1cd29d8 R14: 0000000000000000 R15: 0000000000000000
[ 1336.679288][    C0]  ? do_idle+0x1bd/0x500
[ 1336.679309][    C0]  default_idle+0x9/0x20
[ 1336.679323][    C0]  default_idle_call+0x72/0xb0
[ 1336.679338][    C0]  do_idle+0x1bd/0x500
[ 1336.679355][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1336.679372][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1336.679394][    C0]  cpu_startup_entry+0x43/0x60
[ 1336.679413][    C0]  rest_init+0x2de/0x300
[ 1336.679429][    C0]  start_kernel+0x385/0x3d0
[ 1336.679599][    C0]  x86_64_start_reservations+0x24/0x30
[ 1336.679674][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1336.679690][    C0]  common_startup_64+0x13e/0x147
[ 1336.679712][    C0]  </TASK>
[ 1337.249873][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1337.256747][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1337.267425][   T31] Tainted: [L]=SOFTLOCKUP
[ 1337.271732][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1337.281774][   T31] Call Trace:
[ 1337.285048][   T31]  <TASK>
[ 1337.287968][   T31]  vpanic+0x56c/0xa60
[ 1337.291959][   T31]  ? __pfx___schedule+0x10/0x10
[ 1337.296794][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1337.301282][   T31]  ? __pfx_console_unlock+0x10/0x10
[ 1337.306467][   T31]  panic+0xc5/0xd0
[ 1337.310173][   T31]  ? __pfx_panic+0x10/0x10
[ 1337.314573][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1337.319927][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1337.326064][   T31]  watchdog+0x1023/0x1030
[ 1337.330380][   T31]  ? watchdog+0x21a/0x1030
[ 1337.334795][   T31]  kthread+0x388/0x470
[ 1337.338854][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1337.343538][   T31]  ? __pfx_kthread+0x10/0x10
[ 1337.348114][   T31]  ret_from_fork+0x51e/0xb90
[ 1337.352690][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1337.357781][   T31]  ? __switch_to+0xc7d/0x1450
[ 1337.362452][   T31]  ? __pfx_kthread+0x10/0x10
[ 1337.367239][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1337.372004][   T31]  </TASK>
[ 1337.376115][   T31] Kernel Offset: disabled
[ 1337.380617][   T31] Rebooting in 86400 seconds..