last executing test programs:

18m4.451407067s ago: executing program 1 (id=175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="61050672020302040404c53851b87bd89dcc29944aea18c91f3851bda0f1a5371f772e8f14088301423e0cecdf7f7cf1fb5b56c9e6458c1e9930f3a37bfefc7973ac8d4e4b320405183d0beadc907beef83bbcd8d283b93773d72262635a9c664c"], 0x61)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
sendfile(r5, r6, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r6, 0x409, 0x8)
lseek(r6, 0x101, 0x4)
write$P9_RRENAME(r6, 0x0, 0x0)
close(0x4)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0})
syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x104661, 0x400, 0x2, 0x288}, &(0x7f0000000040), &(0x7f0000000140))

18m4.307770126s ago: executing program 1 (id=176):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setrlimit(0x2, &(0x7f0000001480)={0xb5ba, 0x3})
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24008080)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)

18m1.626750229s ago: executing program 1 (id=183):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000050000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

18m1.304471518s ago: executing program 1 (id=186):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x2, 0x69310f4c, 0x5, 0x2, 0x4, 0x3, 0x0, 0x0, 0x4}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1100) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1100)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r1, 0x0, 0x272)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17m59.636422676s ago: executing program 1 (id=193):
prlimit64(0x0, 0xe, 0x0, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f0000001140)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1, 0x6, 0xde, 0x30)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x100000c2}, 0x90)

17m59.463164933s ago: executing program 1 (id=195):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0540, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/udp6\x00')
getdents(r2, &(0x7f0000000000)=""/37, 0x25)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x2}, 0x0)
r4 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'vlan0\x00', 0x3}, 0x18)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
keyctl$clear(0x3, 0xfffffffffffffffd)

17m59.325552516s ago: executing program 32 (id=195):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0540, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/udp6\x00')
getdents(r2, &(0x7f0000000000)=""/37, 0x25)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x2}, 0x0)
r4 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'vlan0\x00', 0x3}, 0x18)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
keyctl$clear(0x3, 0xfffffffffffffffd)

10m20.224489329s ago: executing program 5 (id=1472):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xd, 0x0, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
eventfd2(0x7e, 0x80800)
ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0)

10m15.398031647s ago: executing program 5 (id=1490):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x94)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x1a1082, 0x0)
r6 = dup3(r4, r5, 0x80000)
sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x20000810)
chdir(0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00')
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000"], 0xe0}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))

10m11.153669377s ago: executing program 5 (id=1499):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
dup(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)

10m8.116962024s ago: executing program 5 (id=1510):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x84)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0xc0089364, &(0x7f0000001240))
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) (async)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8d, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x1, {0x45, 0x80}, 0xcd, 0x3}})
r6 = socket$inet6(0xa, 0x1, 0x1007)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
execveat$binfmt(r2, 0x0, &(0x7f0000000340)={[&(0x7f0000000140)='.:.])^\x00', &(0x7f00000001c0)='/dev/net/tun\x00', &(0x7f00000002c0)='/dev/net/tun\x00', &(0x7f0000000300)='autofs\x00']}, &(0x7f0000000440)={[&(0x7f0000000380)='/dev/vbi#\x00', &(0x7f00000003c0)='matchall\x00']}, 0x1000) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

10m6.823712716s ago: executing program 5 (id=1515):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpgid(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x7dc0284f})

10m6.187269776s ago: executing program 5 (id=1518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0}}, 0x48840)

10m5.383401086s ago: executing program 33 (id=1518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0}}, 0x48840)

2m32.818615434s ago: executing program 0 (id=2885):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101300)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x9e7a, 0x0, 0x5, 0x9, 0xffffffff, 0x9, 0x4, 0x3ff, 0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x480, 0x30, 0x0, 0x1, 0x4db, 0x18, 0x0, {0x1, 0x40}, {0x0, 0x20000004}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0xc, 0x3, 0x7})
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x4004804)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8c082)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "0000000000000008000000000000b60500874028161db2214e00", [0x237c3d00, 0x5]}})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000580)='./file1\x00', 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008090}, 0x4000004)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0x1a6, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x170, 0x6, 0x1, @local, @mcast2, {[@fragment={0x0, 0x0, 0x29, 0x0, 0x0, 0x6, 0x66}, @fragment={0x0, 0x0, 0x6, 0x0, 0x0, 0x18, 0x8066}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}, {"fee594a3ce865c6bde7fccf54eaecf13f964358007c07bda761773a0adc80b5b272500b9126efc694a1fc7ed64c04b6762466a38eb9aed33a5ff81910822b45e0c9c22acda3249c017f623875978689201e3d20aaeec22ddeaf4f89a73e9ac612e76bcbf73350eb55462fb746698d9d1800d7fe9375b5db1182a20835ecfb64bdb393ae3971c728f983e78f63ef85e29e873fe04ecc2ea86d71121e217be2e9611f58103e6515eb4ba30b5ceec9d59ae284e034376e62aa5f3ce42917f46a56561ec77d73f45a50400000000000000e07a21397572f695b149664df1ce0947d199eee4d455868ca0ab418e1f94fff210462a02d262e19b04a809a1a51e202bb2ae089208ecba06fd3996a8c5978ed4ea2834f8e7aa06f64255e5d2f4abffad232f4574d39b3ba4173755ac7903f1fb206513e88b96383785ab1161734b7d83bcc09233b69f09c9a2ed31eeb8"}}}}}}}, 0x0)

2m32.145182467s ago: executing program 0 (id=2887):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
utimensat(0xffffffffffffffff, &(0x7f000001b040)='./file0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'batadv_slave_1\x00'})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = syz_io_uring_setup(0x1ffc, &(0x7f00000000c0)={0x0, 0xdffd, 0x10800, 0x0, 0x2e9}, &(0x7f0000000240), &(0x7f0000000080))
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2m29.754580521s ago: executing program 0 (id=2895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
r3 = dup(r2)
ioctl$FIONREAD(r3, 0x541b, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier')
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@hyper, 0x6}, @hyper, 0x0, 0x6, 0x0, 0xb3d, 0x81, 0x4, 0x8001})
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)

2m28.65931038s ago: executing program 0 (id=2897):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4b31336}, @alu={0x7, 0x0, 0xa, 0x7, 0xa, 0x18, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xc1, &(0x7f0000000300)=""/193, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x7f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='f2fs_readpages\x00', r0, 0x0, 0x90}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000173000/0x3000)=nil, 0x3000, 0x3000008, 0x40010, r2, 0x272f3000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$int_in(r6, 0x5421, &(0x7f0000000f00)=0x7)
write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r7, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2m27.601953567s ago: executing program 0 (id=2899):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000004c0)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0))
read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYBLOB="00eede0000000000b7088000000000007b8af8ff00000000bfa200000000000007ffb7fc0604372ee103000008000000b733c19f50f2d39ffce5318e220400aaefd9e6f059e95b5a5550772c000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f00000003c0))
fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='security.apparmor\x00', &(0x7f0000000680)=""/194, 0xc2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0})

2m24.838649325s ago: executing program 0 (id=2907):
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x20)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x200, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard')
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x5, 0x5, 0x20, @empty, @mcast2, 0x8, 0x7, 0x40, 0xf741}})
socket$nl_route(0x10, 0x3, 0x0)
setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0)
alarm(0x38)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cpuset\x00', 0x80000, &(0x7f0000000280)='\x00')
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16, @ANYBLOB="49532dbd700000ffffbf6700000008100300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)

2m9.685343417s ago: executing program 34 (id=2907):
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x20)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x200, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard')
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x5, 0x5, 0x20, @empty, @mcast2, 0x8, 0x7, 0x40, 0xf741}})
socket$nl_route(0x10, 0x3, 0x0)
setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0)
alarm(0x38)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cpuset\x00', 0x80000, &(0x7f0000000280)='\x00')
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16, @ANYBLOB="49532dbd700000ffffbf6700000008100300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)

1m8.194334583s ago: executing program 3 (id=3107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001b40)={'batadv_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001b80))
keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$read(0xb, r1, &(0x7f00000010c0)=""/4096, 0x1000)

1m7.153876655s ago: executing program 3 (id=3111):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
socket$qrtr(0x2a, 0x2, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x400)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b40)={0x0, @local, @remote}, &(0x7f0000000b80)=0xc)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000c00))
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x2, 0x4, {{0xe, 0x4, 0x2, 0x32, 0x38, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x7d, [@dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x7, 0x5, "c812e1"}, {0x0, 0x4, "56fb"}, {0x0, 0x4, "4197"}]}]}}}}})

1m2.331392208s ago: executing program 3 (id=3125):
syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
open(0x0, 0x400, 0x43)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x2000, 0x8, 0x0, r3, 0x0}])
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r2, 0x6, '\x00)O', "574554cf5e322d88bcce6b582bcbdccddc24b668dc1f9317fe49a0a78993beb9a0c5106a3729cfd0dd10d3918dc84a2b22b1b718ae49fe8091272ccea9011e49c0459b065cd2165387101a251647a971c25ec38973dbfa41a0d4556f2fc5ada047d69dab57a10f3fa1e18093a186afbca0d18993b4f83b34d42fefb3f99cb7db01a6e9e85a684f52c239ef9958ed3e295ac5737cd61c37c95c306c33012cf0a51829a2556fad6719a4d199ca9ea11c2879231a842f4db372c3a9edf5137aee28470ae28503bcc9cffcf65c61038c6ca075a24619a1934d0da240cae1b6a1d1abab8f01b89deba8573a09ad5a715c68f08aabc102b720b519f69a68fc138c2dc6"}}, 0x110)

1m0.5733238s ago: executing program 3 (id=3128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0xfdef)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$KVM_CAP_VM_TYPES(r3, 0x4068aea3, &(0x7f0000000080)={0xeb, 0x0, 0x7})
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8d, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x1, {0x45, 0x80}, 0xcd, 0x3}})
ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0xd000], 0x100, 0x42})

57.89435176s ago: executing program 3 (id=3136):
mount$overlay(0x0, 0x0, 0x0, 0x2010004, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]})
socket(0x2, 0x80805, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x8, 0xfffffffd, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0xffffffff}, 0x0)
socket(0x1, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r3, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x7f, 0x1, 0xdcf, 0x5, 0xd, 0x0, 0x0, 0x0, 0x80, 0x47}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000002100)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a5bb4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb51c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d0453ff00000000000000892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x8, 0x6, 0x0, {0x3, 0x10000000000007, 0x0, 0x80000001, 0x0, 0x1, 0x256, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0xffffffffffffffff, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3ff, 0x9a}}, 0x30)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='autofs\x00', 0x3004000, 0x0)
chdir(0x0)
r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901)
mount(0x0, 0x0, 0x0, 0x2000, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

54.271644001s ago: executing program 3 (id=3146):
r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8}, 0x0)
fcntl$dupfd(r0, 0x406, r0)
r1 = io_uring_setup(0x804ba1, &(0x7f00000001c0)={0x0, 0x8270, 0x100, 0x3, 0x1a9})
write(r1, &(0x7f0000000080)="501e973d84df657b1b26821fb028e17590f228a32010b6f191bdb241185e914fbc597d4462f28db97d8f728ba7bf24556270670641dac9876ff1adcd544b4743bd0be3c84e097df2c9e7ed9e8f2d4c3001f7cd57dc906c9865044cba8c9ec7af2a7058f2f153a04a4b930d83", 0x6c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r2}, 0x18)
sync()
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240), 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r4, 0x409, 0x12)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019700)=""/102400, 0x19000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

38.625936235s ago: executing program 35 (id=3146):
r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8}, 0x0)
fcntl$dupfd(r0, 0x406, r0)
r1 = io_uring_setup(0x804ba1, &(0x7f00000001c0)={0x0, 0x8270, 0x100, 0x3, 0x1a9})
write(r1, &(0x7f0000000080)="501e973d84df657b1b26821fb028e17590f228a32010b6f191bdb241185e914fbc597d4462f28db97d8f728ba7bf24556270670641dac9876ff1adcd544b4743bd0be3c84e097df2c9e7ed9e8f2d4c3001f7cd57dc906c9865044cba8c9ec7af2a7058f2f153a04a4b930d83", 0x6c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r2}, 0x18)
sync()
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240), 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r4, 0x409, 0x12)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019700)=""/102400, 0x19000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

10.663826047s ago: executing program 6 (id=3274):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3'])

10.278754262s ago: executing program 4 (id=3276):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd", 0x4c}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

9.059981618s ago: executing program 4 (id=3278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
r3 = dup(r2)
ioctl$FIONREAD(r3, 0x541b, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier')
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)

7.519125074s ago: executing program 7 (id=3281):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000001c0)={0x8000000000000000, 0xeeef0000, 0x5, 0x0, 0x54})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="05000000720900000000000002000100", @ANYRES32=0x0, @ANYBLOB="040000000000000010000500000000002000000000000000"], 0x2c, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100))
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00', @ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000240), 0x0, &(0x7f00001a9000/0x1000)=nil, 0x4)
syz_clone(0x8800400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0)
sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0x18, 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x1, &(0x7f0000000080)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')

6.54374535s ago: executing program 7 (id=3284):
socket$nl_generic(0x10, 0x3, 0x10)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381)
r0 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x87303, 0x10100, 0x0, 0x2}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
geteuid()
mount$fuseblk(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x10001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
mount(&(0x7f0000000480)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x8000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
read(r3, &(0x7f0000000040)=""/148, 0xffffff96)

6.512905313s ago: executing program 2 (id=3285):
timer_create(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x2)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f00000292c0)=""/102400, 0x19000)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4)
sendmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0)
r2 = socket(0x1f, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000200)=@req={0xfffffff7, 0x4, 0x1a7, 0x1}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r6 = dup3(r3, r2, 0x0)
recvmmsg$unix(r6, &(0x7f0000001280), 0x0, 0x58ca02a3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)

6.181645496s ago: executing program 2 (id=3286):
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="03c800c05e5f27207c18449628945ecc89000000000000007f0faef9cc41ce54e3b377d510025bed6edc581543e5c83388c79b0305f010b4d164be852332ed0784f7b2d7718ef61fdefc9caab6ff1963000544f4a0d8142654f2ca9bbe32258212d9ab3cdd6f599580aabf8b04e05e1969fb15ae4a59753978faf9372711e41536b678657875a3347a44d16c425e631acfee2ecef8b63b7566447b0ce8a44245918969354302ea9322f9811f45f3aec3ea67c3f21cef4b23c207a7c27069eb9637728701"], 0xc4)
creat(0x0, 0x100)
clock_nanosleep(0x8, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0xf64c7356cda97477, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x2, 0x0, 0x1000, &(0x7f0000fea000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$kcm(0x10, 0x0, 0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000040)='msdos\x00', 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f0000000200), 0x0, 0xf4624093efcc92d9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
writev(r6, &(0x7f0000000480)=[{&(0x7f0000000500)="1075bd1569185aa6a18558be87bda07bd6752937c3a16469dd608c378207a1e90180e04cd0159729bf114030f5c6fc6cead96d26a97c82e52be0ecf6f934869f77377a09adea9953a36f7a7680e038a2eed6907101ca34dd980d0a0e29336bfde4f42e05ebd9b7ac4c9fed", 0x6b}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x3, 0x0, 0x400, 0xfffffffd}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)

6.028980884s ago: executing program 6 (id=3287):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0)
ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x1, 0x80, 0xffffffff, 0x6e1, 0x10, 0x0, 0xffffffff, 0x3, 0x0, 0x3, 0x0, 0xe, &(0x7f0000000000)=[0x20000000], 0x1, 0x0})

5.392590015s ago: executing program 4 (id=3288):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
utimensat(0xffffffffffffffff, &(0x7f000001b040)='./file0\x00', 0x0, 0x0)
r1 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001b80))
keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$read(0xb, r1, &(0x7f00000010c0)=""/4096, 0x1000)

4.92347402s ago: executing program 4 (id=3289):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
socket$inet_mptcp(0x2, 0x1, 0x106)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)

4.914964559s ago: executing program 2 (id=3290):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000140), 0x11c000, 0x800, 0x8, 0x2}, 0x1c)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
bind$xdp(r1, &(0x7f00000001c0), 0x10)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x34}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, <r5=>0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1f, r5, r6, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1957000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

3.719756672s ago: executing program 8 (id=3291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r4, 0x1, 0x6, @random="4a2b2204b00b"}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r6=>0x0})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r8, 0x0)
ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e4, 0x4})
sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @loopback, 0x9}, 0x1c)
sendto$inet6(r9, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r10 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_proto_private(r10, 0x89e0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

3.650671191s ago: executing program 7 (id=3292):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0))
mq_open(&(0x7f0000000080)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0x1266e3e18a63043f, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
epoll_create1(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000300), 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3.446869961s ago: executing program 7 (id=3293):
syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x2000, 0x8, 0x0, r3, 0x0}])
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r2, 0x6, '\x00)O', "574554cf5e322d88bcce6b582bcbdccddc24b668dc1f9317fe49a0a78993beb9a0c5106a3729cfd0dd10d3918dc84a2b22b1b718ae49fe8091272ccea9011e49c0459b065cd2165387101a251647a971c25ec38973dbfa41a0d4556f2fc5ada047d69dab57a10f3fa1e18093a186afbca0d18993b4f83b34d42fefb3f99cb7db01a6e9e85a684f52c239ef9958ed3e295ac5737cd61c37c95c306c33012cf0a51829a2556fad6719a4d199ca9ea11c2879231a842f4db372c3a9edf5137aee28470ae28503bcc9cffcf65c61038c6ca075a24619a1934d0da240cae1b6a1d1abab8f01b89deba8573a09ad5a715c68f08aabc102b720b519f69a68fc138c2dc6"}}, 0x110)

3.44582056s ago: executing program 6 (id=3294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c", 0x4f}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

3.379742038s ago: executing program 2 (id=3295):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0xb82d, 0x8, 0xb6, 0x8, 0xcd, 0xf, 0x1, 0x8, 0xdc, [0x0, 0x1, 0x74d, 0x80000000, 0x800, 0xe88a, 0x401, 0x4]}})
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1}]})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000800)="38c8114f", 0x4}], 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
ioctl$RTC_AIE_OFF(r6, 0x7002)

2.488066994s ago: executing program 8 (id=3296):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x80880)
ioctl$EVIOCGUNIQ(r3, 0x80404508, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), r6)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001dc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="131226bd7025100000000500"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004024)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')
openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r11 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x643}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4045)

2.420237162s ago: executing program 6 (id=3297):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x5, 0xfff1}, {0xe, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30000894}, 0x4840)

2.071563702s ago: executing program 6 (id=3298):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
socket$inet_mptcp(0x2, 0x1, 0x106)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)

1.934816026s ago: executing program 8 (id=3299):
r0 = syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
r1 = open(0x0, 0x400, 0x43)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x1, 0x5, {<r2=>0x0}, {}, 0x8000000000000000, 0xb327})
fcntl$lock(r0, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x7, r2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"003477a87d6300"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0)
io_setup(0x7d, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x2000, 0x8, 0x0, r4, 0x0}])
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, '\x00)O', "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"}}, 0x110)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c0000000400"/461], 0x258)
close(r6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000180)}, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'veth0_to_batadv\x00', @local})

1.704244941s ago: executing program 8 (id=3300):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
close(r2)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1a1)
fcntl$setlease(r5, 0x400, 0x1)
r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
unshare(0x60600)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr(0x0, 0x0, 0x0, 0x0, 0x3)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3b9600000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="0400cd004e00330020281000080211000000ffffffffffffffffffffffff760008000500ffffffffffff000887d751ba50c6cac101002d1a0800090200000000000000010005001e00000006007e010000ff000004008e00"], 0x74}}, 0x14)
prctl$PR_SET_TIMERSLACK(0x1d, 0x100000001)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.643181917s ago: executing program 4 (id=3301):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r1=>0x0})
readv(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000024140)=[0x0, <r7=>0x0, 0x0], &(0x7f0000000240), 0x4, 0x3, 0x0, 0x0, r5})
r8 = syz_open_dev$vim2m(0x0, 0xf, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012400000ffff11000300686173683a6e65742c6e65740000000094bf9f91f87ab3e8f2f99c31a0c63073b45f2b77d8f48a79407adfa805db13a5a2b41655a0f3c345cc"], 0x58}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=r7], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6)
socket(0x1d, 0x2, 0x6)
r9 = syz_usb_connect(0x6, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xc000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x20010, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.547100768s ago: executing program 7 (id=3302):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.277389052s ago: executing program 2 (id=3303):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = userfaultfd(0x80001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100})
set_mempolicy(0x2, 0x0, 0x7)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4006)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)

859.664403ms ago: executing program 2 (id=3304):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000019080)='\x00\x00', 0x2}], 0x2)

550.441052ms ago: executing program 7 (id=3305):
r0 = socket$alg(0x26, 0x5, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2180}, {0xffffffffffffffff, 0x100a}], 0x2, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x48004)
fsopen(&(0x7f0000000000)='f2fs\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

460.701997ms ago: executing program 6 (id=3306):
syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, 0x0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380), 0x0})
io_uring_setup(0x31e4, &(0x7f0000000100)={0x0, 0x5b70, 0x10, 0x1, 0x2ee, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x2})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006d4175452a3392"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0xd}, 0x50)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r6, 0x1)
io_uring_enter(r2, 0x2def, 0x0, 0x1000000, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

436.778849ms ago: executing program 8 (id=3307):
r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x8, 0x1, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x80000000}])
io_getevents(r6, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf2510000000080001006a3305d76b6f9285711de1f93e99474202423756b46af801fcf3077335b0b834ee883afba986c53d18658aa6a0e023ffd69951020ff2bcbebdbbd68729fb1e5e4e04f2a8b99363ec3ce3f78f97c8", @ANYRES32=0x0, @ANYBLOB="0600110010040000050010000f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x800)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x20}, 0x1})
io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x21, {0x6, 0x10}, 0xf0}, 0x1)

43.815183ms ago: executing program 4 (id=3308):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x8001)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast2}, 0x1, 0x4, 0x4, 0x2}}, 0x26)

0s ago: executing program 8 (id=3309):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xa0203, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000001dc0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x206, 0x5, 0x1, 0x81, 0xfb}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, 0x0, 0x0)
sendmmsg$sock(r3, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019300)=""/102400, 0x19000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240"], 0x122}}, 0x8010)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x10, 0xffffffffffffffff, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}})
syz_io_uring_setup(0x8d2, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x379}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f00000003c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x9, 0x0, @fd_index=0x1, 0xdf, 0x0})
syz_io_uring_submit(r7, r8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xf)

kernel console output (not intermixed with test programs):

sconnected.
[  977.868327][   T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  978.094276][T16789] team_slave_0: entered promiscuous mode
[  978.100214][T16789] team_slave_1: entered promiscuous mode
[  978.108491][T16789] macsec1: entered promiscuous mode
[  978.113829][T16789] team0: entered promiscuous mode
[  978.123224][T16789] macsec1: entered allmulticast mode
[  978.129112][T16789] team0: entered allmulticast mode
[  978.134638][T16789] team_slave_0: entered allmulticast mode
[  978.141112][T16789] team_slave_1: entered allmulticast mode
[  978.157106][T16789] team0: Device macsec1 is already an upper device of the team interface
[  978.518303][   T24] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  978.752666][T16789] team0: left allmulticast mode
[  978.757820][T16789] team_slave_0: left allmulticast mode
[  978.763465][T16789] team_slave_1: left allmulticast mode
[  978.769095][T16789] team0: left promiscuous mode
[  978.778020][T16789] team_slave_0: left promiscuous mode
[  978.783474][T16789] team_slave_1: left promiscuous mode
[  978.816218][   T24] usb 4-1: config 0 has no interface number 0
[  978.822352][   T24] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  978.836482][   T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  978.846423][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.854432][   T24] usb 4-1: Product: syz
[  978.858694][   T24] usb 4-1: Manufacturer: syz
[  978.863387][   T24] usb 4-1: SerialNumber: syz
[  978.880639][   T24] usb 4-1: config 0 descriptor??
[  978.926691][   T24] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  980.192260][T16803] lo speed is unknown, defaulting to 1000
[  981.185209][   T24] usb 4-1: USB disconnect, device number 69
[  982.142914][   T24] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  985.520937][T16857] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2670'.
[  985.530259][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2670'.
[  985.539683][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'.
[  985.700174][T16855] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  985.706719][T16855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  985.715485][T16855] vhci_hcd vhci_hcd.0: Device attached
[  985.831785][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2671'.
[  985.868575][T16861] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  985.876544][T16861] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  985.885892][T16861] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  985.893709][T16861] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  985.976292][   T24] usb 41-1: new low-speed USB device number 17 using vhci_hcd
[  986.131305][T16856] vhci_hcd: connection closed
[  986.176061][   T13] vhci_hcd: stop threads
[  986.185058][   T13] vhci_hcd: release socket
[  986.226017][   T13] vhci_hcd: disconnect device
[  986.335332][T16868] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  986.343238][T16868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  986.351991][T16868] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  986.361584][T16868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  987.055365][T16874] fuse: Bad value for 'fd'
[  987.092841][T16872] fuseblk: Bad value for 'fd'
[  987.166045][ T5886] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  987.174068][T16873] Invalid source name
[  987.577916][ T5886] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  987.589644][ T5886] usb 7-1: config 0 has no interface number 0
[  987.650716][ T5886] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  987.684676][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.708519][ T5886] usb 7-1: config 0 descriptor??
[  987.725488][ T5886] usb 7-1: selecting invalid altsetting 1
[  987.734779][ T5886] dvb_ttusb_budget: ttusb_init_controller: error
[  987.744963][ T5886] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  987.839751][ T5886] DVB: Unable to find symbol cx22700_attach()
[  987.946789][ T5886] DVB: Unable to find symbol tda10046_attach()
[  987.962119][ T5886] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  987.973593][ T5886] usb 7-1: USB disconnect, device number 21
[  987.998712][   T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  988.260555][   T10] usb 1-1: Using ep0 maxpacket: 32
[  988.996790][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  989.016560][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  989.028261][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  989.037772][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.048546][   T10] usb 1-1: config 0 descriptor??
[  989.222862][T16900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  989.232322][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  989.232333][   T30] audit: type=1326 audit(1762582920.932:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  989.302529][   T30] audit: type=1326 audit(1762582920.932:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  989.651396][   T30] audit: type=1326 audit(1762582920.932:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  989.682532][   T30] audit: type=1326 audit(1762582920.932:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  989.707536][   T10] savu 0003:1E7D:2D5A.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  989.745467][   T30] audit: type=1326 audit(1762582920.932:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  989.896570][   T30] audit: type=1326 audit(1762582920.932:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  989.924883][ T5894] usb 1-1: USB disconnect, device number 73
[  990.132622][   T30] audit: type=1326 audit(1762582920.932:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  990.157321][T16905] fido_id[16905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  990.230203][   T30] audit: type=1326 audit(1762582920.932:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  990.255056][   T30] audit: type=1326 audit(1762582921.002:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  990.290667][   T30] audit: type=1326 audit(1762582921.002:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808758f6c9 code=0x7ffc0000
[  990.616197][ T5894] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  991.198807][T16920] orangefs_mount: mount request failed with -4
[  991.218118][T16915] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  991.224665][T16915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  991.234046][T16915] vhci_hcd vhci_hcd.0: Device attached
[  991.266033][   T24] vhci_hcd: vhci_device speed not set
[  991.350386][T16924] fuse: Unknown parameter '00000000000000000005'
[  991.552514][ T5872] usb 39-1: new low-speed USB device number 15 using vhci_hcd
[  991.571177][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  991.598166][ T5894] usb 5-1: config 0 has no interface number 0
[  991.608208][T16930] lo speed is unknown, defaulting to 1000
[  991.616919][ T5894] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  991.632749][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.702013][ T5894] usb 5-1: config 0 descriptor??
[  992.069928][ T5894] usb 5-1: selecting invalid altsetting 1
[  992.090297][ T5894] dvb_ttusb_budget: ttusb_init_controller: error
[  992.108146][ T5894] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  992.420973][ T5894] DVB: Unable to find symbol cx22700_attach()
[  992.548415][ T5894] DVB: Unable to find symbol tda10046_attach()
[  992.557832][ T5894] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  992.737882][ T5894] usb 5-1: USB disconnect, device number 55
[  992.756598][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  992.791120][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  993.195737][T16916] vhci_hcd: connection reset by peer
[  993.223799][   T12] vhci_hcd: stop threads
[  993.315265][   T12] vhci_hcd: release socket
[  993.544964][   T12] vhci_hcd: disconnect device
[  993.734043][T16955] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  993.741959][T16955] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  993.750827][T16955] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  993.758746][T16955] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  994.478866][T16962] fuse: Bad value for 'fd'
[  994.502565][T16962] fuseblk: Bad value for 'fd'
[  994.606365][ T1204] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  994.718924][T16969] Invalid source name
[  994.869753][ T1204] usb 5-1: Using ep0 maxpacket: 32
[  995.023015][ T1204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  995.067372][ T1204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  995.093324][ T1204] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  995.120234][ T1204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.177706][ T1204] usb 5-1: config 0 descriptor??
[  995.609194][T16975] fuse: Unknown parameter 'fd00000000000000000005'
[  995.621777][ T1204] savu 0003:1E7D:2D5A.002A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  995.869733][T16191] usb 5-1: USB disconnect, device number 56
[  997.046066][ T5872] vhci_hcd: vhci_device speed not set
[  998.486212][T13550] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 240 seconds
[  998.497141][T13550] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 240 seconds
[  998.511052][T16993] team_slave_0: entered promiscuous mode
[  998.516855][T16993] team_slave_1: entered promiscuous mode
[  998.524076][T16993] macsec1: entered promiscuous mode
[  998.536584][T16993] team0: entered promiscuous mode
[  998.555682][T13550] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 240 seconds
[  998.579443][T16993] macsec1: entered allmulticast mode
[  998.585413][T16993] team0: entered allmulticast mode
[  998.590964][T16993] team_slave_0: entered allmulticast mode
[  998.597213][T16993] team_slave_1: entered allmulticast mode
[  998.631028][T17002] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  998.639082][T17002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  998.648253][T17002] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  998.656222][T17002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  998.755969][T13550] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 240 seconds
[  999.391103][T16993] team0: Device macsec1 is already an upper device of the team interface
[  999.464684][T16993] team0: left allmulticast mode
[  999.486223][T16993] team_slave_0: left allmulticast mode
[  999.492273][T16993] team_slave_1: left allmulticast mode
[  999.803152][T17011] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  999.811129][T17011] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  999.826655][T17011] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  999.835497][T16993] team0: left promiscuous mode
[  999.932029][T17011] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1000.006078][T16994] Bluetooth: hci4: command 0x0406 tx timeout
[ 1000.323845][T16993] team_slave_0: left promiscuous mode
[ 1000.329331][T16993] team_slave_1: left promiscuous mode
[ 1000.739457][T17023] fuse: Unknown parameter 'fd00000000000000000005'
[ 1000.805436][T17026] fuse: Bad value for 'fd'
[ 1000.824628][T17026] fuseblk: Bad value for 'fd'
[ 1000.895999][ T5886] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1000.922080][T17028] Invalid source name
[ 1001.076205][ T5886] usb 3-1: Using ep0 maxpacket: 32
[ 1001.090313][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1001.106659][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1001.116637][ T5886] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1001.125777][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.139503][ T5886] usb 3-1: config 0 descriptor??
[ 1001.367807][T17034] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1001.377470][T17034] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1001.386505][T17034] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1001.394287][T17034] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1001.662370][ T5886] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1001.919593][T16191] usb 3-1: USB disconnect, device number 67
[ 1004.487514][T17066] fuse: Unknown parameter 'fd00000000000000000005'
[ 1004.530122][T17068] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1004.538037][T17068] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1004.548422][T17068] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1004.556328][T17068] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1005.416539][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'.
[ 1005.446037][T17080] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1005.453846][T17080] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1005.462716][T17080] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1005.472390][T17080] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1005.693409][ T1204] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1005.866006][ T1204] usb 1-1: Using ep0 maxpacket: 32
[ 1006.195624][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.263744][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.274114][ T1204] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1006.283519][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.314917][ T1204] usb 1-1: config 0 descriptor??
[ 1006.416038][ T5894] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1006.495996][   T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1006.589202][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.601718][ T5894] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1006.601748][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.642101][ T5894] usb 7-1: config 0 descriptor??
[ 1006.651712][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1006.689429][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.689478][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.689555][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1006.689576][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.687122][   T10] usb 3-1: config 0 descriptor??
[ 1007.704431][ T1204] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[ 1007.986923][   T30] audit: type=1326 audit(1762582939.672:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1007.987001][   T30] audit: type=1326 audit(1762582939.672:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1007.987043][   T30] audit: type=1326 audit(1762582939.672:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1007.987116][   T30] audit: type=1326 audit(1762582939.692:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1007.987454][   T30] audit: type=1326 audit(1762582939.702:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1007.987703][   T30] audit: type=1326 audit(1762582939.702:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1007.993248][T17100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1007.993491][   T30] audit: type=1326 audit(1762582939.702:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1007.993568][   T30] audit: type=1326 audit(1762582939.702:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1008.000852][   T30] audit: type=1326 audit(1762582939.712:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1008.001099][   T30] audit: type=1326 audit(1762582939.712:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17091 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2498f6c9 code=0x7ffc0000
[ 1008.129975][ T5894] logitech-djreceiver 0003:046D:C71F.002D: item fetching failed at offset 5/7
[ 1008.130515][ T5894] logitech-djreceiver 0003:046D:C71F.002D: logi_dj_probe: parse failed
[ 1008.130574][ T5894] logitech-djreceiver 0003:046D:C71F.002D: probe with driver logitech-djreceiver failed with error -22
[ 1008.179876][   T10] savu 0003:1E7D:2D5A.002E: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1008.584836][ T1204] usb 1-1: USB disconnect, device number 74
[ 1009.066940][   T10] usb 7-1: USB disconnect, device number 22
[ 1009.077411][T16191] usb 3-1: USB disconnect, device number 68
[ 1009.963147][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2740'.
[ 1010.047089][T17123] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1010.054962][T17123] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1010.064626][T17123] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1010.072591][T17123] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1013.646270][ T5894] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1013.958427][ T5894] usb 3-1: Using ep0 maxpacket: 32
[ 1014.035309][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1014.049287][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1014.060384][ T5894] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1014.074763][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.089808][ T5894] usb 3-1: config 0 descriptor??
[ 1014.152739][T17170] fuse: Bad value for 'fd'
[ 1014.180990][T17170] fuseblk: Bad value for 'fd'
[ 1014.253561][T17171] Invalid source name
[ 1014.520074][ T5894] savu 0003:1E7D:2D5A.002F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1015.053008][ T5894] usb 3-1: USB disconnect, device number 69
[ 1015.080646][T17177] fido_id[17177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1017.536122][ T5886] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1017.576549][T17219] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1017.583097][T17219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1017.697483][ T5886] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1017.716290][ T5886] usb 4-1: config 0 has no interface number 0
[ 1017.722727][ T5886] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1017.779328][ T5886] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1017.791266][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.793312][T17219] vhci_hcd vhci_hcd.0: Device attached
[ 1017.815940][ T5886] usb 4-1: Product: syz
[ 1017.856890][ T5886] usb 4-1: Manufacturer: syz
[ 1017.931999][ T5886] usb 4-1: SerialNumber: syz
[ 1017.952616][ T5886] usb 4-1: config 0 descriptor??
[ 1017.964376][ T5886] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1018.035984][ T1204] usb 37-1: new low-speed USB device number 18 using vhci_hcd
[ 1018.055982][T16191] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 1018.956964][T16191] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1019.112553][T16191] usb 5-1: config 0 has no interface number 0
[ 1019.128181][T16191] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1019.562317][T16191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.589413][T16191] usb 5-1: config 0 descriptor??
[ 1019.601896][T16191] usb 5-1: selecting invalid altsetting 1
[ 1019.609030][T16191] dvb_ttusb_budget: ttusb_init_controller: error
[ 1019.615391][T16191] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1020.255977][T17220] vhci_hcd: connection reset by peer
[ 1020.265807][ T3017] vhci_hcd: stop threads
[ 1020.283924][ T3017] vhci_hcd: release socket
[ 1020.290235][ T3017] vhci_hcd: disconnect device
[ 1020.412840][T16191] DVB: Unable to find symbol cx22700_attach()
[ 1020.555953][T16191] DVB: Unable to find symbol tda10046_attach()
[ 1020.609366][   T10] usb 4-1: USB disconnect, device number 70
[ 1020.622444][T16191] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1020.649007][   T10] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1020.710824][T16191] usb 5-1: USB disconnect, device number 57
[ 1021.116001][ T5963] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[ 1021.211982][   T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1021.412807][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1021.413528][ T5963] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1021.689366][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1021.701026][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1021.710952][ T5963] usb 1-1: config 0 has no interface number 0
[ 1021.722449][ T5963] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1021.722469][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1021.742683][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.751426][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.820308][ T5963] usb 1-1: config 0 descriptor??
[ 1021.832769][   T10] usb 4-1: config 0 descriptor??
[ 1021.839468][ T5963] usb 1-1: selecting invalid altsetting 1
[ 1021.848052][ T5963] dvb_ttusb_budget: ttusb_init_controller: error
[ 1021.857807][ T5963] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1021.978750][ T5963] DVB: Unable to find symbol cx22700_attach()
[ 1022.495275][   T10] savu 0003:1E7D:2D5A.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[ 1022.593450][T17269] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1022.601997][T17269] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1022.611817][T17269] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1022.619782][T17269] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1022.655697][ T5963] DVB: Unable to find symbol tda10046_attach()
[ 1022.665483][ T5963] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1022.717082][ T5963] usb 1-1: USB disconnect, device number 75
[ 1022.761224][   T10] usb 4-1: USB disconnect, device number 71
[ 1023.160645][T17275] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1023.168604][T17275] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1023.176062][ T1204] vhci_hcd: vhci_device speed not set
[ 1023.182555][T17275] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1023.192572][T17275] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1023.279109][T17271] fido_id[17271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1023.423776][T17281] team_slave_0: entered promiscuous mode
[ 1023.429509][T17281] team_slave_1: entered promiscuous mode
[ 1023.435999][T17281] macsec1: entered promiscuous mode
[ 1023.441272][T17281] team0: entered promiscuous mode
[ 1023.450270][T17281] macsec1: entered allmulticast mode
[ 1023.455627][T17281] team0: entered allmulticast mode
[ 1023.460838][T17281] team_slave_0: entered allmulticast mode
[ 1023.466631][T17281] team_slave_1: entered allmulticast mode
[ 1023.480365][T17281] team0: Device macsec1 is already an upper device of the team interface
[ 1023.520171][T17281] team0: left allmulticast mode
[ 1023.525225][T17281] team_slave_0: left allmulticast mode
[ 1023.530905][T17281] team_slave_1: left allmulticast mode
[ 1023.536678][T17281] team0: left promiscuous mode
[ 1023.545174][T17281] team_slave_0: left promiscuous mode
[ 1023.550657][T17281] team_slave_1: left promiscuous mode
[ 1024.146197][ T5894] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1024.356354][T17288] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1024.366636][T17288] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1024.377746][T17288] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1024.387564][T17288] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1024.499804][ T5894] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 1024.601238][ T5894] usb 1-1: config 0 has no interface number 0
[ 1024.737266][ T5894] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1025.261082][ T5894] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1025.346065][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.358238][ T5894] usb 1-1: Product: syz
[ 1025.372852][ T5894] usb 1-1: Manufacturer: syz
[ 1025.398663][ T5894] usb 1-1: SerialNumber: syz
[ 1025.405870][ T5894] usb 1-1: config 0 descriptor??
[ 1025.478898][ T5894] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[ 1027.448414][ T5963] usb 1-1: USB disconnect, device number 76
[ 1027.491088][ T5963] yurex 1-1:0.50: USB YUREX #0 now disconnected
[ 1028.699546][ T6094] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 270 seconds
[ 1028.710267][ T6094] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 270 seconds
[ 1028.736041][ T6094] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 270 seconds
[ 1028.869262][T17324] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1028.877217][T17324] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1028.886766][T17324] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1028.894534][T17324] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1029.093196][ T6094] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 270 seconds
[ 1030.441911][ T5828] Bluetooth: hci3: SCO packet for unknown connection handle 200
[ 1031.271586][T17336] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[ 1031.285725][T17336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1031.369768][T17351] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2792'.
[ 1031.381045][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2792'.
[ 1031.390141][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2792'.
[ 1031.937155][T17336] vhci_hcd vhci_hcd.0: Device attached
[ 1032.032415][T17348] vhci_hcd: connection closed
[ 1032.032718][ T3017] vhci_hcd: stop threads
[ 1032.093568][ T3017] vhci_hcd: release socket
[ 1032.111746][ T3017] vhci_hcd: disconnect device
[ 1032.160774][ T5886] vhci_hcd: vhci_device speed not set
[ 1032.216442][ T5963] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1032.461970][ T5963] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1032.472244][ T5963] usb 4-1: config 0 has no interface number 0
[ 1032.490672][ T5963] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1032.521756][ T5963] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1032.542271][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.565685][ T5963] usb 4-1: Product: syz
[ 1032.575781][ T5963] usb 4-1: Manufacturer: syz
[ 1032.581302][ T5963] usb 4-1: SerialNumber: syz
[ 1032.610603][ T5963] usb 4-1: config 0 descriptor??
[ 1032.722315][ T5963] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1033.229150][T17372] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1033.358073][T17372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1033.368770][T17372] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1033.811048][T17372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1034.980249][T16191] usb 4-1: USB disconnect, device number 72
[ 1035.038589][T17384] fuse: Bad value for 'fd'
[ 1035.116998][T16191] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1035.131502][T17384] fuseblk: Bad value for 'fd'
[ 1035.612011][T17387] Invalid source name
[ 1036.601180][T17407] lo speed is unknown, defaulting to 1000
[ 1037.432237][T17413] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1037.440272][T17413] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1037.449454][T17413] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1037.457522][T17413] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1039.287375][ T5894] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1039.617625][ T5894] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1039.625823][ T5894] usb 4-1: config 0 has no interface number 0
[ 1039.643571][T17438] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1040.070191][ T5894] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1040.088183][ T5894] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1040.105970][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.113997][ T5894] usb 4-1: Product: syz
[ 1040.125206][ T5894] usb 4-1: Manufacturer: syz
[ 1040.420147][ T5894] usb 4-1: SerialNumber: syz
[ 1040.455772][ T5894] usb 4-1: config 0 descriptor??
[ 1040.470135][ T5894] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1040.596992][T17446] lo speed is unknown, defaulting to 1000
[ 1042.340970][ T5894] usb 4-1: USB disconnect, device number 73
[ 1042.374396][ T5894] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1043.581263][T17498] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[ 1043.587815][T17498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1043.595712][T17498] vhci_hcd vhci_hcd.0: Device attached
[ 1044.115308][T17494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2836'.
[ 1044.124581][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2836'.
[ 1044.133608][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'.
[ 1044.174657][T17500] lo speed is unknown, defaulting to 1000
[ 1044.280407][ T5894] usb 41-1: new low-speed USB device number 18 using vhci_hcd
[ 1044.544473][T17499] usbip_core: unknown command
[ 1044.555106][T17499] vhci_hcd: unknown pdu 184549376
[ 1044.571300][T17499] usbip_core: unknown command
[ 1044.622247][ T9775] vhci_hcd: stop threads
[ 1044.645974][ T9775] vhci_hcd: release socket
[ 1044.677781][ T9775] vhci_hcd: disconnect device
[ 1045.296684][ T5886] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1045.506908][ T5886] usb 7-1: Using ep0 maxpacket: 32
[ 1045.516124][ T5963] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1045.586632][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1045.685416][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1045.705671][ T5886] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1045.719201][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1045.831524][ T5886] usb 7-1: config 0 descriptor??
[ 1045.850500][ T5963] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1046.231334][ T5963] usb 4-1: config 0 has no interface number 0
[ 1046.262907][ T5963] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1046.354915][ T5963] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1046.374507][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.404906][ T5963] usb 4-1: Product: syz
[ 1046.412971][ T5963] usb 4-1: Manufacturer: syz
[ 1046.425101][ T5963] usb 4-1: SerialNumber: syz
[ 1046.437024][ T5963] usb 4-1: config 0 descriptor??
[ 1046.441519][ T5963] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1046.916715][ T5886] savu 0003:1E7D:2D5A.0031: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[ 1047.069365][ T5886] usb 7-1: USB disconnect, device number 23
[ 1047.543804][T17540] fido_id[17540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1047.984420][T17551] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1047.992512][T17551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1048.001560][T17551] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1048.009559][T17551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1048.496448][T17554] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1048.564545][T17554] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1048.565368][T16191] usb 4-1: USB disconnect, device number 74
[ 1048.576158][T17554] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1048.588492][T17554] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1048.656607][T16191] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1049.594627][ T5894] vhci_hcd: vhci_device speed not set
[ 1049.916024][T17567] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1049.923828][T17567] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1049.932717][T17567] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1049.940616][T17567] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1050.477171][ T5963] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1051.263956][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1051.290234][ T5963] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1051.319068][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.356785][ T5963] usb 3-1: config 0 descriptor??
[ 1051.997196][ T5894] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1052.147191][ T5963] usbhid 3-1:0.0: can't add hid device: -71
[ 1052.153185][ T5963] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1052.211633][ T5963] usb 3-1: USB disconnect, device number 70
[ 1052.284548][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1052.312525][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1052.323343][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.340520][ T5894] usb 1-1: config 0 descriptor??
[ 1053.986640][ T5894] usbhid 1-1:0.0: can't add hid device: -71
[ 1053.998049][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1054.015633][ T5894] usb 1-1: USB disconnect, device number 77
[ 1054.237055][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.243468][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.714797][T17627] team_slave_0: entered promiscuous mode
[ 1055.720529][T17627] team_slave_1: entered promiscuous mode
[ 1055.726653][T17627] macsec1: entered promiscuous mode
[ 1055.731909][T17627] team0: entered promiscuous mode
[ 1055.740113][T17627] macsec1: entered allmulticast mode
[ 1055.745452][T17627] team0: entered allmulticast mode
[ 1055.751197][T17627] team_slave_0: entered allmulticast mode
[ 1055.757493][T17627] team_slave_1: entered allmulticast mode
[ 1055.768643][T17627] team0: Device macsec1 is already an upper device of the team interface
[ 1055.913619][T17627] team0: left allmulticast mode
[ 1055.919304][T17627] team_slave_0: left allmulticast mode
[ 1055.925630][T17627] team_slave_1: left allmulticast mode
[ 1055.931568][T17627] team0: left promiscuous mode
[ 1055.941808][T17627] team_slave_0: left promiscuous mode
[ 1055.947264][T17627] team_slave_1: left promiscuous mode
[ 1057.448976][T17640] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[ 1057.455521][T17640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1057.478009][T17640] vhci_hcd vhci_hcd.0: Device attached
[ 1057.863902][T17645] vhci_hcd: connection closed
[ 1057.864275][   T12] vhci_hcd: stop threads
[ 1057.878944][   T12] vhci_hcd: release socket
[ 1057.888338][T17544] usb 33-1: new low-speed USB device number 18 using vhci_hcd
[ 1057.906800][   T12] vhci_hcd: disconnect device
[ 1057.975993][ T5886] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1058.180319][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1058.258935][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1058.286731][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.330370][ T5886] usb 4-1: config 0 descriptor??
[ 1058.605984][T16191] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1058.777294][T16191] usb 3-1: Using ep0 maxpacket: 32
[ 1058.788265][T16191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1058.814545][T16191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1058.854267][T16191] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1059.038165][ T5886] usbhid 4-1:0.0: can't add hid device: -71
[ 1059.047353][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1059.290985][ T6094] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 300 seconds
[ 1059.302174][ T6094] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 300 seconds
[ 1059.313325][ T6094] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 300 seconds
[ 1059.324420][ T6094] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 300 seconds
[ 1059.522973][T16191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.922549][ T5886] usb 4-1: USB disconnect, device number 75
[ 1059.967276][T16191] usb 3-1: config 0 descriptor??
[ 1060.156040][ T5894] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1060.569689][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1060.595733][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1060.615119][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.640694][T16191] savu 0003:1E7D:2D5A.0032: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1060.664154][ T5894] usb 5-1: config 0 descriptor??
[ 1061.009832][ T5886] usb 3-1: USB disconnect, device number 71
[ 1061.368709][ T5894] usbhid 5-1:0.0: can't add hid device: -71
[ 1061.382288][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1061.497543][ T5894] usb 5-1: USB disconnect, device number 58
[ 1063.091407][T17544] vhci_hcd: vhci_device speed not set
[ 1063.263049][T17704] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1063.271081][T17704] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1063.280899][T17704] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1063.288760][T17704] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1063.856035][ T5963] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1063.935383][T17231] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[ 1064.268055][ T5963] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[ 1064.301019][ T5963] usb 7-1: config 0 has no interface number 0
[ 1064.315311][ T5963] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1064.335137][ T5963] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1064.344935][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1064.354504][ T5963] usb 7-1: Product: syz
[ 1064.359482][ T5963] usb 7-1: Manufacturer: syz
[ 1064.364164][ T5963] usb 7-1: SerialNumber: syz
[ 1064.384077][ T5963] usb 7-1: config 0 descriptor??
[ 1064.412260][ T5963] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[ 1064.558268][T17231] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1065.014733][T17231] usb 3-1: config 0 has no interface number 0
[ 1065.034204][T17231] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1065.059999][T17231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.088744][T17231] usb 3-1: config 0 descriptor??
[ 1065.327190][T17231] usb 3-1: selecting invalid altsetting 1
[ 1065.333112][T17231] dvb_ttusb_budget: ttusb_init_controller: error
[ 1065.369273][T17231] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1066.933720][T17231] DVB: Unable to find symbol cx22700_attach()
[ 1066.943100][ T5963] usb 7-1: USB disconnect, device number 24
[ 1066.981755][ T5963] yurex 7-1:0.50: USB YUREX #0 now disconnected
[ 1067.456612][T17231] DVB: Unable to find symbol tda10046_attach()
[ 1067.475834][T17231] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1067.504274][T17231] usb 3-1: USB disconnect, device number 72
[ 1067.576216][T17544] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1067.947812][T17544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1067.957770][T17544] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1067.986015][T17544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.017256][T17544] usb 4-1: config 0 descriptor??
[ 1068.036183][T17231] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1068.275993][T17231] usb 3-1: Using ep0 maxpacket: 32
[ 1068.296219][T17231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1068.307835][T17231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1068.326030][T17231] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1068.911189][T17231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.925518][T17231] usb 3-1: config 0 descriptor??
[ 1069.139308][T17544] usbhid 4-1:0.0: can't add hid device: -71
[ 1069.156152][T17544] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1069.173883][T17544] usb 4-1: USB disconnect, device number 76
[ 1069.589913][T17231] savu 0003:1E7D:2D5A.0033: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1069.739681][T17544] usb 3-1: USB disconnect, device number 73
[ 1070.035027][T17231] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[ 1070.207415][T17231] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1070.215637][T17231] usb 5-1: config 0 has no interface number 0
[ 1070.222549][T17231] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1070.232624][T17231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.256364][T17773] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[ 1070.262897][T17773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1070.623422][T17231] usb 5-1: config 0 descriptor??
[ 1070.631977][T17231] usb 5-1: selecting invalid altsetting 1
[ 1070.638207][T17773] vhci_hcd vhci_hcd.0: Device attached
[ 1070.656204][T17231] dvb_ttusb_budget: ttusb_init_controller: error
[ 1070.662534][T17231] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1070.982184][ T5963] usb 45-1: new low-speed USB device number 6 using vhci_hcd
[ 1070.984781][T17785] lo speed is unknown, defaulting to 1000
[ 1071.000473][T17779] vhci_hcd: connection closed
[ 1071.006170][   T50] vhci_hcd: stop threads
[ 1071.016458][   T50] vhci_hcd: release socket
[ 1071.021302][   T50] vhci_hcd: disconnect device
[ 1071.151576][T17231] DVB: Unable to find symbol cx22700_attach()
[ 1071.297543][T17231] DVB: Unable to find symbol tda10046_attach()
[ 1071.323501][T17231] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1071.358905][T17231] usb 5-1: USB disconnect, device number 59
[ 1073.756053][ T5894] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[ 1074.186918][ T5894] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1074.201560][ T5894] usb 4-1: config 0 has no interface number 0
[ 1074.208025][ T5894] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1074.217335][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.229374][ T5894] usb 4-1: config 0 descriptor??
[ 1074.245138][ T5894] usb 4-1: selecting invalid altsetting 1
[ 1074.271650][ T5894] dvb_ttusb_budget: ttusb_init_controller: error
[ 1074.284184][ T5894] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1074.446009][ T5894] DVB: Unable to find symbol cx22700_attach()
[ 1074.504945][ T5894] DVB: Unable to find symbol tda10046_attach()
[ 1074.536329][ T5894] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1074.983562][ T5894] usb 4-1: USB disconnect, device number 77
[ 1075.201389][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1075.201408][   T30] audit: type=1400 audit(1762583006.912:1421): avc:  denied  { getopt } for  pid=17837 comm="syz.6.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1075.232453][   T30] audit: type=1400 audit(1762583006.942:1422): avc:  denied  { bind } for  pid=17837 comm="syz.6.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1075.498925][T17842] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1076.156007][ T5963] vhci_hcd: vhci_device speed not set
[ 1076.756122][T17231] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1076.799734][T17859] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1076.807803][T17859] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1076.816956][T17859] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1076.824769][T17859] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1076.896209][T17231] usb 3-1: device descriptor read/64, error -71
[ 1077.236364][T17231] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1077.286454][T17868] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1077.299868][T17868] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1077.308857][T17868] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1077.316848][T17868] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1077.367474][T17231] usb 3-1: device descriptor read/64, error -71
[ 1077.597431][T17231] usb usb3-port1: attempt power cycle
[ 1077.996100][T17231] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1078.136215][T17231] usb 3-1: device descriptor read/8, error -71
[ 1078.395965][T17231] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1078.438244][T17231] usb 3-1: device descriptor read/8, error -71
[ 1078.588623][T17231] usb usb3-port1: unable to enumerate USB device
[ 1079.284668][T17881] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1079.316071][T17881] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1079.351441][   T30] audit: type=1400 audit(1762583011.062:1423): avc:  denied  { create } for  pid=17880 comm="syz.6.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1079.399940][T16994] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1079.434016][T16994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1079.441144][   T30] audit: type=1400 audit(1762583011.122:1424): avc:  denied  { sys_admin } for  pid=17880 comm="syz.6.2941" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 1079.471707][T16994] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1079.495241][T16994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1079.500684][T17881] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1079.510104][T16994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1079.558712][T17884] lo speed is unknown, defaulting to 1000
[ 1080.078845][ T2989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.188406][T17895] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[ 1081.356694][T17907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2947'.
[ 1081.426272][ T2989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1081.606153][ T5828] Bluetooth: hci5: command tx timeout
[ 1082.272154][ T2989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.033430][ T2989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1083.083785][T17884] chnl_net:caif_netlink_parms(): no params data found
[ 1083.772288][T17884] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.803805][T17884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.813133][T17884] bridge_slave_0: entered allmulticast mode
[ 1083.822577][T17884] bridge_slave_0: entered promiscuous mode
[ 1083.896154][T17884] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.905613][T17884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.924790][T17884] bridge_slave_1: entered allmulticast mode
[ 1083.954627][T17884] bridge_slave_1: entered promiscuous mode
[ 1084.071198][T17884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.125407][T17884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.200101][T16994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1084.223813][T16994] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1084.232640][T16994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1084.240723][T16994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1084.249928][T16994] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1084.257479][T16994] Bluetooth: hci5: command tx timeout
[ 1084.324712][T17952] input: syz0 as /devices/virtual/input/input48
[ 1084.897077][ T2989] bridge_slave_1: left allmulticast mode
[ 1084.902770][ T2989] bridge_slave_1: left promiscuous mode
[ 1084.965333][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.978735][T17970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'.
[ 1086.030753][ T2989] bridge_slave_0: left allmulticast mode
[ 1086.054532][ T2989] bridge_slave_0: left promiscuous mode
[ 1086.070181][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.137356][T17977] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1086.336251][ T5828] Bluetooth: hci1: command tx timeout
[ 1086.340358][T17950] Bluetooth: hci5: command tx timeout
[ 1087.942154][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1087.975815][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1087.993418][ T2989] bond0 (unregistering): Released all slaves
[ 1088.469583][ T5828] Bluetooth: hci5: command tx timeout
[ 1088.475208][T17950] Bluetooth: hci1: command tx timeout
[ 1088.718485][ T2989] bond1 (unregistering): (slave dummy0): Releasing active interface
[ 1088.800122][ T2989] bond1 (unregistering): Released all slaves
[ 1089.219268][T18014] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1089.227225][T18014] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1089.249224][T18014] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1089.251006][ T2989] bond2 (unregistering): Released all slaves
[ 1089.257842][T18014] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1089.285120][T17884] team0: Port device team_slave_0 added
[ 1089.300355][T17884] team0: Port device team_slave_1 added
[ 1089.428815][ T6094] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 330 seconds
[ 1089.443328][ T6094] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 330 seconds
[ 1089.456235][ T6094] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 330 seconds
[ 1089.462091][T17945] lo speed is unknown, defaulting to 1000
[ 1089.467958][ T6094] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 330 seconds
[ 1089.681815][T17884] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1089.695906][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1089.731047][T17884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1089.743453][T17950] Bluetooth: hci4: SCO packet for unknown connection handle 200
[ 1089.748675][T17884] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1089.764798][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1089.796520][T17884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1090.493778][T17950] Bluetooth: hci1: command tx timeout
[ 1091.473490][T17884] hsr_slave_0: entered promiscuous mode
[ 1091.496767][T17884] hsr_slave_1: entered promiscuous mode
[ 1091.518164][T17884] debugfs: 'hsr0' already exists in 'hsr'
[ 1091.541652][T17884] Cannot create hsr debugfs directory
[ 1091.557285][ T2989] hsr_slave_0: left promiscuous mode
[ 1091.612838][ T2989] hsr_slave_1: left promiscuous mode
[ 1091.631250][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1091.640091][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1091.667453][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1091.678306][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1091.712066][ T2989] veth1_macvtap: left promiscuous mode
[ 1091.724232][ T2989] veth0_macvtap: left promiscuous mode
[ 1091.731633][ T2989] veth1_vlan: left promiscuous mode
[ 1091.737469][ T2989] veth0_vlan: left promiscuous mode
[ 1092.637011][T17950] Bluetooth: hci1: command tx timeout
[ 1092.674902][ T2989] pim6reg (unregistering): left allmulticast mode
[ 1093.953687][T18073] netlink: 'syz.2.2979': attribute type 2 has an invalid length.
[ 1094.646607][T18079] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1094.673178][T18079] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1094.692987][T18079] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1094.716915][T18079] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1094.927660][T17945] chnl_net:caif_netlink_parms(): no params data found
[ 1095.008373][   T30] audit: type=1400 audit(1762583026.672:1425): avc:  denied  { mounton } for  pid=18084 comm="syz.6.2981" path="/281/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1095.031164][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1095.042200][   T30] audit: type=1400 audit(1762583026.672:1426): avc:  denied  { getattr } for  pid=18084 comm="syz.6.2981" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1095.075256][   T30] audit: type=1400 audit(1762583026.682:1427): avc:  denied  { ioctl } for  pid=18084 comm="syz.6.2981" path="socket:[60191]" dev="sockfs" ino=60191 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1095.132367][   T30] audit: type=1400 audit(1762583026.842:1428): avc:  denied  { unmount } for  pid=12067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1096.851904][ T2989] IPVS: stop unused estimator thread 0...
[ 1097.655435][T17945] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1097.694464][T17945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1097.727180][T17945] bridge_slave_0: entered allmulticast mode
[ 1097.775575][T17945] bridge_slave_0: entered promiscuous mode
[ 1097.851955][   T30] audit: type=1400 audit(1762583029.562:1429): avc:  denied  { name_connect } for  pid=18127 comm="syz.2.2991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1097.991928][T17945] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.046505][T17945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.084387][T17945] bridge_slave_1: entered allmulticast mode
[ 1098.115534][T17945] bridge_slave_1: entered promiscuous mode
[ 1099.359515][T17945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1099.730903][T17945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1100.355942][T17945] team0: Port device team_slave_0 added
[ 1100.509121][T17945] team0: Port device team_slave_1 added
[ 1100.650320][T17950] Bluetooth: hci4: SCO packet for unknown connection handle 200
[ 1101.210935][T17945] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1101.228040][T17945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1101.255703][T17945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1101.282238][T17945] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1101.290554][T17945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1101.316420][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1101.353534][T17945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1101.439563][T17884] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1101.528939][T18182] fuse: Bad value for 'fd'
[ 1101.577170][T17884] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1101.634043][T17884] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1101.786037][   T24] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[ 1101.844239][T17884] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1101.978606][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1101.988219][   T24] usb 3-1: config 0 has no interface number 0
[ 1101.994340][   T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1102.015568][T17945] hsr_slave_0: entered promiscuous mode
[ 1102.030471][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.067176][   T24] usb 3-1: config 0 descriptor??
[ 1102.067334][T17945] hsr_slave_1: entered promiscuous mode
[ 1102.091763][   T24] usb 3-1: selecting invalid altsetting 1
[ 1102.118527][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[ 1102.124878][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1102.312898][   T24] DVB: Unable to find symbol cx22700_attach()
[ 1102.428454][   T24] DVB: Unable to find symbol tda10046_attach()
[ 1102.442787][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1102.472502][   T24] usb 3-1: USB disconnect, device number 78
[ 1102.884259][T18205] syz.6.3002 (18205): drop_caches: 2
[ 1102.898631][T18205] syz.6.3002 (18205): drop_caches: 2
[ 1103.667923][T18210] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1103.677611][T18210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1103.695674][T18210] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1103.703604][T18210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1104.138835][T17884] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1104.478456][T18219] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1104.509701][T18219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1104.524944][T18219] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1104.538211][T18219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1104.552082][T17884] 8021q: adding VLAN 0 to HW filter on device team0
[ 1104.604810][T17945] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1105.421786][T17945] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1105.676971][T17945] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1105.728529][T17945] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1105.755172][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.762328][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1105.775378][T18236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3009'.
[ 1105.807385][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.814587][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1105.833634][   T30] audit: type=1400 audit(1762583037.532:1430): avc:  denied  { map } for  pid=18237 comm="syz.2.3010" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1105.857832][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1105.926453][ T5963] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1106.098266][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1106.783957][ T5963] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1106.797717][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.808726][ T5963] usb 5-1: config 0 descriptor??
[ 1107.209186][T17945] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1107.255756][T17945] 8021q: adding VLAN 0 to HW filter on device team0
[ 1107.273127][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1107.280303][ T9775] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1107.365681][ T5963] usbhid 5-1:0.0: can't add hid device: -71
[ 1107.374426][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1107.381518][ T7496] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1107.414579][ T5963] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1107.459006][ T5963] usb 5-1: USB disconnect, device number 60
[ 1107.475404][T17884] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1107.653397][T17884] veth0_vlan: entered promiscuous mode
[ 1107.711513][T17884] veth1_vlan: entered promiscuous mode
[ 1107.827674][T18283] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1107.834224][T18283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1107.873025][T17884] veth0_macvtap: entered promiscuous mode
[ 1107.898927][T17884] veth1_macvtap: entered promiscuous mode
[ 1107.927064][T18283] vhci_hcd vhci_hcd.0: Device attached
[ 1108.003033][T17884] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1108.098772][T17884] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1108.153215][   T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.196444][   T24] usb 37-1: new low-speed USB device number 19 using vhci_hcd
[ 1108.228485][   T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.228625][   T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.228918][   T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.852618][T17945] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1109.417545][T18285] vhci_hcd: connection reset by peer
[ 1109.460032][ T9775] vhci_hcd: stop threads
[ 1109.464324][ T9775] vhci_hcd: release socket
[ 1109.488316][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.506621][ T9775] vhci_hcd: disconnect device
[ 1109.515910][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1109.629325][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.672223][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.428246][T17945] veth0_vlan: entered promiscuous mode
[ 1111.797434][T17945] veth1_vlan: entered promiscuous mode
[ 1111.968893][T17945] veth0_macvtap: entered promiscuous mode
[ 1112.017472][T17945] veth1_macvtap: entered promiscuous mode
[ 1112.071961][T17945] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1112.118854][T17945] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1112.163757][   T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.227324][   T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.267821][   T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.365130][   T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.630704][ T7496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1112.682552][ T7496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.212294][ T9775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.225355][ T9775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.276425][   T24] vhci_hcd: vhci_device speed not set
[ 1113.646149][ T1204] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1113.887865][ T1204] usb 4-1: Using ep0 maxpacket: 32
[ 1113.918316][ T1204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1114.008467][ T1204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1114.071860][ T1204] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1114.081260][ T1204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.322281][ T1204] usb 4-1: config 0 descriptor??
[ 1115.096532][ T1204] savu 0003:1E7D:2D5A.0034: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[ 1115.226035][ T1204] usb 4-1: USB disconnect, device number 78
[ 1115.250124][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1115.282380][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1115.293489][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1115.301433][T10545] bond0: (slave syz_tun): Releasing backup interface
[ 1115.332449][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1115.343070][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1115.488795][T18394] fido_id[18394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1115.610962][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.644544][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.477499][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'.
[ 1116.491544][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.142532][T18420] veth0_vlan: entered allmulticast mode
[ 1117.200677][T18411] team_slave_0: entered promiscuous mode
[ 1117.206407][T18411] team_slave_1: entered promiscuous mode
[ 1117.244004][T18411] macsec1: entered promiscuous mode
[ 1117.249884][T18411] team0: entered promiscuous mode
[ 1117.256463][T18411] macsec1: entered allmulticast mode
[ 1117.261817][T18411] team0: entered allmulticast mode
[ 1117.267058][T18411] team_slave_0: entered allmulticast mode
[ 1117.272858][T18411] team_slave_1: entered allmulticast mode
[ 1117.283063][T18411] team0: Device macsec1 is already an upper device of the team interface
[ 1117.298667][T18411] team0: left allmulticast mode
[ 1117.303736][T18411] team_slave_0: left allmulticast mode
[ 1117.312481][T18411] team_slave_1: left allmulticast mode
[ 1117.318649][T18411] team0: left promiscuous mode
[ 1117.325276][T18411] team_slave_0: left promiscuous mode
[ 1117.330723][T18411] team_slave_1: left promiscuous mode
[ 1117.367566][T17950] Bluetooth: hci0: command tx timeout
[ 1117.568096][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.842265][T18432] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1117.850365][T18432] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1117.859236][T18432] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1117.867141][T18432] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1118.695505][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.234839][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.346710][T17231] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[ 1119.447956][T17950] Bluetooth: hci0: command tx timeout
[ 1119.450879][ T6094] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 360 seconds
[ 1119.465899][ T1204] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1119.479347][ T6094] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 360 seconds
[ 1119.491701][ T6094] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 360 seconds
[ 1119.502802][ T6094] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 360 seconds
[ 1119.518982][T18395] chnl_net:caif_netlink_parms(): no params data found
[ 1119.534439][T18449] FAULT_INJECTION: forcing a failure.
[ 1119.534439][T18449] name failslab, interval 1, probability 0, space 0, times 0
[ 1119.552805][T17231] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[ 1119.566896][T17231] usb 7-1: config 0 has no interface number 0
[ 1119.580618][T17231] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1119.591109][T18449] CPU: 1 UID: 0 PID: 18449 Comm: syz.7.3042 Not tainted syzkaller #0 PREEMPT(full) 
[ 1119.591131][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1119.591142][T18449] Call Trace:
[ 1119.591148][T18449]  <TASK>
[ 1119.591155][T18449]  dump_stack_lvl+0x16c/0x1f0
[ 1119.591188][T18449]  should_fail_ex+0x512/0x640
[ 1119.591209][T18449]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 1119.591239][T18449]  should_failslab+0xc2/0x120
[ 1119.591260][T18449]  kmem_cache_alloc_noprof+0x75/0x6e0
[ 1119.591286][T18449]  ? vm_area_dup+0x27/0x8d0
[ 1119.591315][T18449]  ? vm_area_dup+0x27/0x8d0
[ 1119.591336][T18449]  vm_area_dup+0x27/0x8d0
[ 1119.591368][T18449]  __split_vma+0x18e/0x1070
[ 1119.591397][T18449]  ? __pfx___split_vma+0x10/0x10
[ 1119.591419][T18449]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1119.591461][T18449]  vms_gather_munmap_vmas+0x1cb/0x1340
[ 1119.591486][T18449]  ? __irq_work_queue_local+0x1d7/0x580
[ 1119.591515][T18449]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1119.591540][T18449]  ? _kstrtoull+0x145/0x200
[ 1119.591570][T18449]  ? irq_work_queue+0xce/0x100
[ 1119.591593][T18449]  ? bpf_send_signal_common+0x3a9/0x540
[ 1119.591618][T18449]  do_vmi_align_munmap+0x286/0x7e0
[ 1119.591647][T18449]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[ 1119.591711][T18449]  do_vmi_munmap+0x204/0x3e0
[ 1119.591739][T18449]  __vm_munmap+0x196/0x380
[ 1119.591767][T18449]  ? __pfx___vm_munmap+0x10/0x10
[ 1119.591804][T18449]  ? __pfx_ksys_write+0x10/0x10
[ 1119.591827][T18449]  __x64_sys_munmap+0x59/0x80
[ 1119.591848][T18449]  do_syscall_64+0xcd/0xfa0
[ 1119.591866][T18449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1119.591884][T18449] RIP: 0033:0x7f2914f8f6c9
[ 1119.591898][T18449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1119.591915][T18449] RSP: 002b:00007f2915db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[ 1119.591932][T18449] RAX: ffffffffffffffda RBX: 00007f29151e5fa0 RCX: 00007f2914f8f6c9
[ 1119.591944][T18449] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000
[ 1119.591955][T18449] RBP: 00007f2915db4090 R08: 0000000000000000 R09: 0000000000000000
[ 1119.591965][T18449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1119.591975][T18449] R13: 00007f29151e6038 R14: 00007f29151e5fa0 R15: 00007ffe6c6da938
[ 1119.592001][T18449]  </TASK>
[ 1119.974037][T17231] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1119.985875][T17231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.993894][T17231] usb 7-1: Product: syz
[ 1119.998450][T17231] usb 7-1: Manufacturer: syz
[ 1120.003087][T17231] usb 7-1: SerialNumber: syz
[ 1120.009748][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1120.019571][ T1204] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1120.028638][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.061101][T17231] usb 7-1: config 0 descriptor??
[ 1120.074092][ T1204] usb 3-1: config 0 descriptor??
[ 1120.855513][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3039'.
[ 1120.957155][T17231] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected
[ 1120.997187][T17231] keyspan 7-1:0.133: unsupported endpoint type 0
[ 1121.008636][T17231] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81
[ 1121.016785][T17231] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1
[ 1121.024704][T17231] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2
[ 1121.034135][T17231] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1121.051839][T17231] usb 7-1: USB disconnect, device number 25
[ 1121.398999][ T1204] usbhid 3-1:0.0: can't add hid device: -71
[ 1121.407246][T17231] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1121.419103][ T1204] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1121.429862][T17231] keyspan 7-1:0.133: device disconnected
[ 1121.449340][ T1204] usb 3-1: USB disconnect, device number 79
[ 1121.534184][T17950] Bluetooth: hci0: command tx timeout
[ 1122.033725][   T50] bond0 (unregistering): Released all slaves
[ 1122.221444][   T50] bond1 (unregistering): Released all slaves
[ 1122.659419][   T50] bond2 (unregistering): Released all slaves
[ 1122.673030][T18457] team_slave_0: entered promiscuous mode
[ 1122.678863][T18457] team_slave_1: entered promiscuous mode
[ 1122.687876][T18457] macsec1: entered promiscuous mode
[ 1122.693214][T18457] team0: entered promiscuous mode
[ 1122.700963][T18457] macsec1: entered allmulticast mode
[ 1122.707162][T18457] team0: entered allmulticast mode
[ 1122.716600][T18457] team_slave_0: entered allmulticast mode
[ 1122.726100][T18457] team_slave_1: entered allmulticast mode
[ 1122.733065][T18457] team0: Device macsec1 is already an upper device of the team interface
[ 1122.753139][T18457] team0: left allmulticast mode
[ 1122.762811][T18457] team_slave_0: left allmulticast mode
[ 1122.772992][T18457] team_slave_1: left allmulticast mode
[ 1122.778789][T18457] team0: left promiscuous mode
[ 1122.784130][T18457] team_slave_0: left promiscuous mode
[ 1122.789618][T18457] team_slave_1: left promiscuous mode
[ 1122.809954][T18395] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1122.817958][T18395] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1122.835415][T18395] bridge_slave_0: entered allmulticast mode
[ 1122.920345][T18395] bridge_slave_0: entered promiscuous mode
[ 1122.948390][T18395] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1122.955494][T18395] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1122.980114][T18395] bridge_slave_1: entered allmulticast mode
[ 1122.981467][T17950] Bluetooth: hci2: SCO packet for unknown connection handle 200
[ 1122.992356][T18395] bridge_slave_1: entered promiscuous mode
[ 1123.655934][T17950] Bluetooth: hci0: command tx timeout
[ 1123.785932][   T30] audit: type=1400 audit(1762583055.402:1431): avc:  denied  { read } for  pid=18510 comm="syz.2.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1123.934363][T18395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1123.952110][T18395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1123.979746][T18395] team0: Port device team_slave_0 added
[ 1124.000066][   T50] hsr_slave_0: left promiscuous mode
[ 1124.006917][   T50] hsr_slave_1: left promiscuous mode
[ 1124.021159][   T50] veth1_macvtap: left promiscuous mode
[ 1124.037415][   T50] veth0_macvtap: left promiscuous mode
[ 1124.049737][   T50] veth1_vlan: left promiscuous mode
[ 1124.065137][   T50] veth0_vlan: left promiscuous mode
[ 1126.053365][T18548] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1126.061294][T18548] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1126.070414][T18548] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1126.078300][T18548] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1126.853896][   T30] audit: type=1400 audit(1762583058.562:1432): avc:  denied  { remount } for  pid=18553 comm="syz.2.3061" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1127.030635][T18570] fuse: Bad value for 'fd'
[ 1127.093506][T18573] Invalid source name
[ 1127.458126][T18395] team0: Port device team_slave_1 added
[ 1127.483190][T18559] team_slave_0: entered promiscuous mode
[ 1127.488947][T18559] team_slave_1: entered promiscuous mode
[ 1127.495676][T18559] macsec1: entered promiscuous mode
[ 1127.502281][T18559] team0: entered promiscuous mode
[ 1127.533591][T18559] macsec1: entered allmulticast mode
[ 1127.544330][T18559] team0: entered allmulticast mode
[ 1127.551268][T18559] team_slave_0: entered allmulticast mode
[ 1127.557344][T18559] team_slave_1: entered allmulticast mode
[ 1127.627565][T18559] team0: Device macsec1 is already an upper device of the team interface
[ 1127.658335][T18559] team0: left allmulticast mode
[ 1127.673419][T18559] team_slave_0: left allmulticast mode
[ 1127.682400][T18559] team_slave_1: left allmulticast mode
[ 1127.697312][T18559] team0: left promiscuous mode
[ 1127.705151][T18559] team_slave_0: left promiscuous mode
[ 1127.710613][T18559] team_slave_1: left promiscuous mode
[ 1128.019029][T18395] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1128.048837][T18395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1128.159708][T18395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1128.182857][T18586] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1128.185281][T18395] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1128.239740][T18586] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1128.254108][T18586] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1128.262518][T18586] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1128.510765][T18395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1128.536680][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1128.622535][T18395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1129.223864][T18395] hsr_slave_0: entered promiscuous mode
[ 1129.243176][T18395] hsr_slave_1: entered promiscuous mode
[ 1129.262576][T18395] debugfs: 'hsr0' already exists in 'hsr'
[ 1129.750440][T18395] Cannot create hsr debugfs directory
[ 1129.868711][T18608] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1129.875257][T18608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1129.886205][T18608] vhci_hcd vhci_hcd.0: Device attached
[ 1130.216079][T17231] usb 37-1: new low-speed USB device number 20 using vhci_hcd
[ 1130.455949][T18618] vhci_hcd: connection reset by peer
[ 1130.475905][ T2989] vhci_hcd: stop threads
[ 1130.963832][   T50] IPVS: stop unused estimator thread 0...
[ 1130.970524][ T2989] vhci_hcd: release socket
[ 1131.035740][ T2989] vhci_hcd: disconnect device
[ 1132.091396][T18639] team_slave_0: entered promiscuous mode
[ 1132.097141][T18639] team_slave_1: entered promiscuous mode
[ 1132.120721][T18639] macsec1: entered promiscuous mode
[ 1132.139767][T18639] team0: entered promiscuous mode
[ 1132.159254][T18639] macsec1: entered allmulticast mode
[ 1132.171488][T18639] team0: entered allmulticast mode
[ 1132.185748][T18639] team_slave_0: entered allmulticast mode
[ 1132.188195][T18654] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1132.191749][T18639] team_slave_1: entered allmulticast mode
[ 1132.199383][T18654] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1132.199502][T18654] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1132.199518][T18654] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[ 1132.230930][T18639] team0: Device macsec1 is already an upper device of the team interface
[ 1132.295180][T18639] team0: left allmulticast mode
[ 1132.301981][T18639] team_slave_0: left allmulticast mode
[ 1132.348061][T18639] team_slave_1: left allmulticast mode
[ 1132.360645][T18639] team0: left promiscuous mode
[ 1132.600140][T18639] team_slave_0: left promiscuous mode
[ 1132.605604][T18639] team_slave_1: left promiscuous mode
[ 1135.009685][T18395] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1135.167777][T18395] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1135.215047][T18395] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1135.331507][T18395] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1135.356199][T17231] vhci_hcd: vhci_device speed not set
[ 1135.640310][T18708] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[ 1135.646863][T18708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1135.655782][T18708] vhci_hcd vhci_hcd.0: Device attached
[ 1135.871953][T18395] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1135.917902][T18395] 8021q: adding VLAN 0 to HW filter on device team0
[ 1135.935159][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1135.942349][ T9775] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1135.951410][T17544] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[ 1135.979150][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1135.986306][ T9775] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1135.997869][T18718] fuse: Bad value for 'fd'
[ 1136.110513][T18722] Invalid source name
[ 1136.453679][T18712] vhci_hcd: connection reset by peer
[ 1136.479783][ T9775] vhci_hcd: stop threads
[ 1136.484087][ T9775] vhci_hcd: release socket
[ 1136.510682][ T9775] vhci_hcd: disconnect device
[ 1136.857444][T18395] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1137.544240][T18395] veth0_vlan: entered promiscuous mode
[ 1137.563938][T18749] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1137.580464][T18749] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1137.608877][T18749] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1137.622072][T18395] veth1_vlan: entered promiscuous mode
[ 1137.656684][T18749] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[ 1137.771979][T18395] veth0_macvtap: entered promiscuous mode
[ 1138.125177][T18395] veth1_macvtap: entered promiscuous mode
[ 1138.213444][T18395] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1138.382809][T18395] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1138.445076][ T9771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.763648][ T9771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.845414][ T9771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.884206][ T9771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.253220][ T7496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.788345][ T7496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.827005][ T9771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1140.608031][ T9771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1140.815933][ T5894] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1140.986046][ T5894] usb 3-1: device descriptor read/64, error -71
[ 1141.046088][T17544] vhci_hcd: vhci_device speed not set
[ 1141.255903][ T5894] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1141.406362][ T5894] usb 3-1: device descriptor read/64, error -71
[ 1141.526905][ T5894] usb usb3-port1: attempt power cycle
[ 1141.595902][ T1204] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1141.809586][ T1204] usb 8-1: Using ep0 maxpacket: 8
[ 1141.832320][ T1204] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1141.851408][ T1204] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1141.862122][ T1204] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1141.874503][ T1204] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1141.894484][ T1204] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1141.921699][ T1204] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1141.935893][ T5894] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1141.936532][ T1204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.007219][ T5894] usb 3-1: device descriptor read/8, error -71
[ 1142.096044][ T5948] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1142.797467][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1142.990749][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1143.879983][ T5948] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[ 1143.900712][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.165741][ T5948] usb 7-1: config 0 descriptor??
[ 1144.175987][ T1204] usb 8-1: usb_control_msg returned -71
[ 1144.223061][ T1204] usbtmc 8-1:16.0: can't read capabilities
[ 1144.325009][ T1204] usb 8-1: USB disconnect, device number 2
[ 1144.751904][ T5948] hid_parser_main: 21 callbacks suppressed
[ 1144.751917][ T5948] lenovo 0003:17EF:60EE.0035: unknown main item tag 0x0
[ 1144.842444][ T5948] lenovo 0003:17EF:60EE.0035: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0
[ 1145.315971][T18849] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1145.323792][T18849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1145.333331][T18849] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1145.341216][T18849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1145.623367][T18853] veth1_to_bond: entered promiscuous mode
[ 1145.736601][T18853] veth1_to_bond: left promiscuous mode
[ 1145.746096][T18856] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3109'.
[ 1146.116040][ T1204] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1146.435901][ T1204] usb 4-1: Using ep0 maxpacket: 32
[ 1146.483925][ T1204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1146.525742][ T1204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1146.561281][ T1204] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1146.611969][ T1204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1147.376686][ T1204] usb 4-1: config 0 descriptor??
[ 1147.435500][   T24] usb 7-1: USB disconnect, device number 26
[ 1147.910846][ T1204] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[ 1148.835779][ T5948] usb 4-1: USB disconnect, device number 79
[ 1149.361486][   T30] audit: type=1400 audit(1762583081.072:1433): avc:  denied  { read write } for  pid=18909 comm="syz.7.3120" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1149.433902][   T30] audit: type=1400 audit(1762583081.072:1434): avc:  denied  { open } for  pid=18909 comm="syz.7.3120" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1149.526638][ T6094] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 390 seconds
[ 1149.537563][ T6094] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 390 seconds
[ 1149.549943][ T6094] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 390 seconds
[ 1149.561068][ T6094] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 390 seconds
[ 1150.364105][   T30] audit: type=1400 audit(1762583082.072:1435): avc:  denied  { create } for  pid=18909 comm="syz.7.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1150.406317][T18917] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1150.411054][T18920] netlink: 'syz.7.3120': attribute type 21 has an invalid length.
[ 1150.431435][T18920] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3120'.
[ 1150.442239][T18920] netlink: 'syz.7.3120': attribute type 4 has an invalid length.
[ 1150.451291][T18920] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3120'.
[ 1152.234669][T18945] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1152.242608][T18945] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1152.252867][T18945] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1152.260825][T18945] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1152.458226][T18947] syzkaller1: entered promiscuous mode
[ 1152.503766][T18947] syzkaller1: entered allmulticast mode
[ 1153.925958][T17950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1153.934746][T17950] Bluetooth: hci0: Injecting HCI hardware error event
[ 1153.943670][ T5828] Bluetooth: hci0: hardware error 0x00
[ 1156.118837][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1156.343986][T18988] FAULT_INJECTION: forcing a failure.
[ 1156.343986][T18988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1156.426376][T18988] CPU: 0 UID: 0 PID: 18988 Comm: syz.6.3137 Not tainted syzkaller #0 PREEMPT(full) 
[ 1156.426394][T18988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1156.426401][T18988] Call Trace:
[ 1156.426405][T18988]  <TASK>
[ 1156.426410][T18988]  dump_stack_lvl+0x16c/0x1f0
[ 1156.426431][T18988]  should_fail_ex+0x512/0x640
[ 1156.426446][T18988]  _copy_from_user+0x2e/0xd0
[ 1156.426460][T18988]  copy_msghdr_from_user+0x98/0x160
[ 1156.426477][T18988]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1156.426497][T18988]  ___sys_sendmsg+0xfe/0x1d0
[ 1156.426511][T18988]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1156.426524][T18988]  ? __lock_acquire+0x622/0x1c90
[ 1156.426557][T18988]  __sys_sendmsg+0x16d/0x220
[ 1156.426571][T18988]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1156.426593][T18988]  do_syscall_64+0xcd/0xfa0
[ 1156.426604][T18988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.426615][T18988] RIP: 0033:0x7f4a7858f6c9
[ 1156.426624][T18988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1156.426635][T18988] RSP: 002b:00007f4a793ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1156.426646][T18988] RAX: ffffffffffffffda RBX: 00007f4a787e5fa0 RCX: 00007f4a7858f6c9
[ 1156.426653][T18988] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000010
[ 1156.426659][T18988] RBP: 00007f4a793ec090 R08: 0000000000000000 R09: 0000000000000000
[ 1156.426665][T18988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1156.426672][T18988] R13: 00007f4a787e6038 R14: 00007f4a787e5fa0 R15: 00007ffc87accd58
[ 1156.426686][T18988]  </TASK>
[ 1156.653848][T18989] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1156.663665][T18989] cramfs: wrong magic
[ 1156.669299][T18989] No control pipe specified
[ 1157.008828][   T30] audit: type=1400 audit(1762583088.382:1436): avc:  denied  { mounton } for  pid=18978 comm="syz.3.3136" path="/23/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[ 1157.074054][T18984] lo speed is unknown, defaulting to 1000
[ 1157.089628][T18984] lo speed is unknown, defaulting to 1000
[ 1157.096248][T18984] lo speed is unknown, defaulting to 1000
[ 1157.114037][T18984] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1158.240395][T18984] lo speed is unknown, defaulting to 1000
[ 1158.481427][T18984] lo speed is unknown, defaulting to 1000
[ 1158.542060][T18984] lo speed is unknown, defaulting to 1000
[ 1158.560571][T18984] lo speed is unknown, defaulting to 1000
[ 1158.576821][T18984] lo speed is unknown, defaulting to 1000
[ 1158.607533][   T30] audit: type=1400 audit(1762583090.322:1437): avc:  denied  { unmount } for  pid=17884 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1158.628790][T18984] lo speed is unknown, defaulting to 1000
[ 1158.635205][T18984] lo speed is unknown, defaulting to 1000
[ 1159.393491][   T30] audit: type=1400 audit(1762583091.102:1438): avc:  denied  { read } for  pid=19026 comm="syz.7.3148" path="socket:[65722]" dev="sockfs" ino=65722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1159.735910][ T5948] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1160.079095][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1160.175973][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1160.205219][ T5948] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1160.222988][ T5948] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1160.263791][ T5948] usb 5-1: Manufacturer: syz
[ 1160.287004][ T5948] usb 5-1: config 0 descriptor??
[ 1161.375730][   T30] audit: type=1400 audit(1762583093.082:1439): avc:  denied  { create } for  pid=19049 comm="syz.6.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1161.461663][   T30] audit: type=1400 audit(1762583093.122:1440): avc:  denied  { ioctl } for  pid=19049 comm="syz.6.3155" path="socket:[66648]" dev="sockfs" ino=66648 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1162.482072][T19062] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1162.490216][T19062] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1162.499767][T19062] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1162.507703][T19062] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1162.807451][T19064] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3158'.
[ 1163.580670][T19074] fuse: Bad value for 'fd'
[ 1163.976385][T19077] Invalid source name
[ 1164.817372][ T5948] usbhid 5-1:0.0: can't add hid device: -71
[ 1164.849740][ T5948] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1165.013036][ T5948] usb 5-1: USB disconnect, device number 61
[ 1165.048246][ T1204] IPVS: starting estimator thread 0...
[ 1165.107705][T19097] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002
[ 1165.166000][T19093] IPVS: using max 43 ests per chain, 103200 per kthread
[ 1165.291913][   T30] audit: type=1400 audit(1762583097.002:1441): avc:  denied  { write } for  pid=19088 comm="syz.4.3165" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[ 1168.433176][T19138] FAULT_INJECTION: forcing a failure.
[ 1168.433176][T19138] name failslab, interval 1, probability 0, space 0, times 0
[ 1168.480346][T19138] CPU: 0 UID: 0 PID: 19138 Comm: syz.6.3177 Not tainted syzkaller #0 PREEMPT(full) 
[ 1168.480373][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1168.480384][T19138] Call Trace:
[ 1168.480391][T19138]  <TASK>
[ 1168.480398][T19138]  dump_stack_lvl+0x16c/0x1f0
[ 1168.480428][T19138]  should_fail_ex+0x512/0x640
[ 1168.480449][T19138]  ? __kmalloc_noprof+0xca/0x880
[ 1168.480475][T19138]  should_failslab+0xc2/0x120
[ 1168.480494][T19138]  __kmalloc_noprof+0xdd/0x880
[ 1168.480517][T19138]  ? video_usercopy+0x1a0/0x1720
[ 1168.480547][T19138]  ? video_usercopy+0x1a0/0x1720
[ 1168.480570][T19138]  ? do_vfs_ioctl+0x128/0x14f0
[ 1168.480591][T19138]  video_usercopy+0x1a0/0x1720
[ 1168.480616][T19138]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1168.480641][T19138]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1168.480662][T19138]  ? __pfx_video_usercopy+0x10/0x10
[ 1168.480704][T19138]  v4l2_ioctl+0x1bd/0x250
[ 1168.480728][T19138]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1168.480754][T19138]  __x64_sys_ioctl+0x18e/0x210
[ 1168.480779][T19138]  do_syscall_64+0xcd/0xfa0
[ 1168.480797][T19138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.480815][T19138] RIP: 0033:0x7f4a7858f6c9
[ 1168.480829][T19138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1168.480845][T19138] RSP: 002b:00007f4a793ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1168.480862][T19138] RAX: ffffffffffffffda RBX: 00007f4a787e5fa0 RCX: 00007f4a7858f6c9
[ 1168.480873][T19138] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003
[ 1168.480884][T19138] RBP: 00007f4a793ec090 R08: 0000000000000000 R09: 0000000000000000
[ 1168.480894][T19138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1168.480905][T19138] R13: 00007f4a787e6038 R14: 00007f4a787e5fa0 R15: 00007ffc87accd58
[ 1168.480929][T19138]  </TASK>
[ 1169.939108][T19139] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1171.362717][T19174] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1171.370772][T19174] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1171.380603][T19174] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1171.388525][T19174] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[ 1171.855005][T19183] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3183'.
[ 1172.019172][T19186] team_slave_0: entered promiscuous mode
[ 1172.024868][T19186] team_slave_1: entered promiscuous mode
[ 1172.030965][T19186] macsec1: entered promiscuous mode
[ 1172.036227][T19186] team0: entered promiscuous mode
[ 1172.042730][T19186] macsec1: entered allmulticast mode
[ 1172.048089][T19186] team0: entered allmulticast mode
[ 1172.053207][T19186] team_slave_0: entered allmulticast mode
[ 1172.059558][T19186] team_slave_1: entered allmulticast mode
[ 1172.068283][T19186] team0: Device macsec1 is already an upper device of the team interface
[ 1172.921682][T19186] team0: left allmulticast mode
[ 1172.927050][T19186] team_slave_0: left allmulticast mode
[ 1172.932501][T19186] team_slave_1: left allmulticast mode
[ 1172.938182][T19186] team0: left promiscuous mode
[ 1172.943180][T19186] team_slave_0: left promiscuous mode
[ 1172.948739][T19186] team_slave_1: left promiscuous mode
[ 1173.104206][   T30] audit: type=1400 audit(1762583104.812:1442): avc:  denied  { write } for  pid=19190 comm="syz.4.3186" name="file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1173.213801][   T30] audit: type=1400 audit(1762583104.812:1443): avc:  denied  { open } for  pid=19190 comm="syz.4.3186" path="/21/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1173.271446][T19195] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1173.385196][   T30] audit: type=1400 audit(1762583104.822:1444): avc:  denied  { ioctl } for  pid=19190 comm="syz.4.3186" path="/21/file0" dev="tmpfs" ino=125 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1173.829367][T19202] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1173.835932][T19202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1174.087102][T19202] vhci_hcd vhci_hcd.0: Device attached
[ 1174.273807][T19203] vhci_hcd: connection closed
[ 1174.274014][   T13] vhci_hcd: stop threads
[ 1174.330274][   T13] vhci_hcd: release socket
[ 1174.335911][   T24] usb 41-1: new low-speed USB device number 19 using vhci_hcd
[ 1174.359725][   T13] vhci_hcd: disconnect device
[ 1174.395946][   T24] usb 41-1: enqueue for inactive port 0
[ 1174.525906][   T24] vhci_hcd: vhci_device speed not set
[ 1174.812659][ T5828] Bluetooth: hci2: SCO packet for unknown connection handle 200
[ 1175.774184][T17950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1175.793042][T17950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1175.807874][T17950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1175.815405][T17950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1175.822916][T17950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1175.843367][T19237] lo speed is unknown, defaulting to 1000
[ 1176.334070][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3198'.
[ 1176.591353][T19237] chnl_net:caif_netlink_parms(): no params data found
[ 1176.606018][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3198'.
[ 1177.053030][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.198069][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.263372][T19237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.287352][T19237] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.326134][T19237] bridge_slave_0: entered allmulticast mode
[ 1177.341996][T19237] bridge_slave_0: entered promiscuous mode
[ 1177.351929][T19237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.360948][T19237] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.412701][T19237] bridge_slave_1: entered allmulticast mode
[ 1177.766041][T19237] bridge_slave_1: entered promiscuous mode
[ 1177.936741][T17950] Bluetooth: hci6: command tx timeout
[ 1178.278821][T19237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1178.290526][T19237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1178.345883][   T30] audit: type=1400 audit(1762583110.042:1445): avc:  denied  { connect } for  pid=19287 comm="syz.6.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1178.498562][T19237] team0: Port device team_slave_0 added
[ 1178.553650][T19237] team0: Port device team_slave_1 added
[ 1178.794837][T19237] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1178.825639][T19237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1178.851609][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1178.872161][T19237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1178.942629][T19237] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1178.953491][T19237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1178.985959][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1179.068917][T19237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1179.435893][T17544] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1179.469058][T19237] hsr_slave_0: entered promiscuous mode
[ 1179.495575][T19237] hsr_slave_1: entered promiscuous mode
[ 1179.506988][T19237] debugfs: 'hsr0' already exists in 'hsr'
[ 1179.524692][T19237] Cannot create hsr debugfs directory
[ 1179.586038][T17544] usb 7-1: Using ep0 maxpacket: 32
[ 1179.595613][T17544] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1179.606914][ T6094] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 420 seconds
[ 1179.618587][ T6094] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 420 seconds
[ 1179.629735][ T6094] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 420 seconds
[ 1179.640783][ T6094] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 420 seconds
[ 1179.680218][T17544] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1179.712064][T17544] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1179.734156][T17544] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.758132][T17544] usb 7-1: config 0 descriptor??
[ 1179.785881][   T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1179.948876][   T24] usb 8-1: Using ep0 maxpacket: 8
[ 1179.978168][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1179.989985][T19237] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1180.020117][T17950] Bluetooth: hci6: command tx timeout
[ 1180.027707][   T24] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1180.236510][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1180.287416][T19237] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1180.303571][   T24] usb 8-1: config 0 descriptor??
[ 1180.309322][T19237] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1180.337046][   T24] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1180.355997][T17544] savu 0003:1E7D:2D5A.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[ 1180.371711][T19237] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1180.525254][ T5948] usb 7-1: USB disconnect, device number 27
[ 1180.654089][T19237] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1180.712346][T19237] 8021q: adding VLAN 0 to HW filter on device team0
[ 1180.742994][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1180.750253][ T9775] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1180.826261][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1180.833428][ T9775] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1181.772707][T19237] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1181.996719][T19348] lo speed is unknown, defaulting to 1000
[ 1182.085991][T17950] Bluetooth: hci6: command tx timeout
[ 1182.126098][   T24] gspca_vc032x: reg_w err -110
[ 1182.130979][   T24] vc032x 8-1:0.0: probe with driver vc032x failed with error -110
[ 1182.887091][T19237] veth0_vlan: entered promiscuous mode
[ 1182.972994][T19237] veth1_vlan: entered promiscuous mode
[ 1182.992824][T19237] veth0_macvtap: entered promiscuous mode
[ 1183.002296][T19237] veth1_macvtap: entered promiscuous mode
[ 1183.011364][ T5872] usb 8-1: USB disconnect, device number 3
[ 1183.021062][T19237] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1183.060855][T19237] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1183.086860][ T9771] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.111433][ T9771] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.167658][ T9771] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.190551][ T9771] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.232061][ T9771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1183.251791][ T9771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.856412][T19363] fuse: Bad value for 'fd'
[ 1183.906368][ T9771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1183.918140][ T9771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.919059][T19365] Invalid source name
[ 1184.215957][T17950] Bluetooth: hci6: command tx timeout
[ 1185.439404][T19380] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1185.439535][T19380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1185.439829][T19380] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1185.439861][T19380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1186.156358][T19384] team_slave_0: entered promiscuous mode
[ 1186.156446][T19384] team_slave_1: entered promiscuous mode
[ 1186.156622][T19384] macsec1: entered promiscuous mode
[ 1186.156642][T19384] team0: entered promiscuous mode
[ 1186.158121][T19384] macsec1: entered allmulticast mode
[ 1186.158144][T19384] team0: entered allmulticast mode
[ 1186.158178][T19384] team_slave_0: entered allmulticast mode
[ 1186.158201][T19384] team_slave_1: entered allmulticast mode
[ 1186.161278][T19384] team0: Device macsec1 is already an upper device of the team interface
[ 1187.140261][T19384] team0: left allmulticast mode
[ 1187.224102][T19384] team_slave_0: left allmulticast mode
[ 1187.224120][T19384] team_slave_1: left allmulticast mode
[ 1187.224137][T19384] team0: left promiscuous mode
[ 1187.224402][T19384] team_slave_0: left promiscuous mode
[ 1187.224428][T19384] team_slave_1: left promiscuous mode
[ 1187.776125][ T5872] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1187.975984][ T5872] usb 7-1: Using ep0 maxpacket: 32
[ 1187.995013][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1188.006629][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1189.207145][ T5872] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1189.238172][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1189.302282][ T5872] usb 7-1: config 0 descriptor??
[ 1189.338772][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'.
[ 1189.831247][ T5872] savu 0003:1E7D:2D5A.0038: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[ 1189.977912][T19431] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1189.985827][T19431] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 1189.997709][T19431] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1190.005491][T19431] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[ 1190.238055][T17544] usb 7-1: USB disconnect, device number 28
[ 1190.268543][T19432] fido_id[19432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1191.448773][T19449] team_slave_0: entered promiscuous mode
[ 1191.454474][T19449] team_slave_1: entered promiscuous mode
[ 1191.460369][T19449] macsec1: entered promiscuous mode
[ 1191.465615][T19449] team0: entered promiscuous mode
[ 1191.472229][T19449] macsec1: entered allmulticast mode
[ 1191.477659][T19449] team0: entered allmulticast mode
[ 1191.482955][T19449] team_slave_0: entered allmulticast mode
[ 1191.488826][T19449] team_slave_1: entered allmulticast mode
[ 1191.498319][T19449] team0: Device macsec1 is already an upper device of the team interface
[ 1192.654999][T19449] team0: left allmulticast mode
[ 1192.685982][T19449] team_slave_0: left allmulticast mode
[ 1192.691478][T19449] team_slave_1: left allmulticast mode
[ 1192.711006][T19449] team0: left promiscuous mode
[ 1192.818257][T19449] team_slave_0: left promiscuous mode
[ 1192.823669][T19449] team_slave_1: left promiscuous mode
[ 1194.597014][T19475] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1194.684695][T19475] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1194.700436][   T30] audit: type=1400 audit(1762583126.402:1446): avc:  denied  { connect } for  pid=19478 comm="syz.8.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1194.725212][T19475] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1194.733326][T19475] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[ 1194.921741][T19487] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3254'.
[ 1194.957815][T19487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3254'.
[ 1198.413306][T19521] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1198.421518][T19521] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1198.431259][T19521] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1198.439237][T19521] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1198.985499][T19529] team_slave_0: entered promiscuous mode
[ 1198.991266][T19529] team_slave_1: entered promiscuous mode
[ 1198.997384][T19529] macsec1: entered promiscuous mode
[ 1199.002661][T19529] team0: entered promiscuous mode
[ 1199.011217][T19529] macsec1: entered allmulticast mode
[ 1199.016664][T19529] team0: entered allmulticast mode
[ 1199.021840][T19529] team_slave_0: entered allmulticast mode
[ 1199.027694][T19529] team_slave_1: entered allmulticast mode
[ 1199.038197][T19529] team0: Device macsec1 is already an upper device of the team interface
[ 1200.102997][T19529] team0: left allmulticast mode
[ 1200.143703][T19529] team_slave_0: left allmulticast mode
[ 1200.158825][T19529] team_slave_1: left allmulticast mode
[ 1200.174590][T19529] team0: left promiscuous mode
[ 1200.189394][T19529] team_slave_0: left promiscuous mode
[ 1200.194832][T19529] team_slave_1: left promiscuous mode
[ 1200.261395][T19536] FAULT_INJECTION: forcing a failure.
[ 1200.261395][T19536] name failslab, interval 1, probability 0, space 0, times 0
[ 1200.428351][T19536] CPU: 0 UID: 0 PID: 19536 Comm: syz.8.3265 Not tainted syzkaller #0 PREEMPT(full) 
[ 1200.428377][T19536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1200.428386][T19536] Call Trace:
[ 1200.428392][T19536]  <TASK>
[ 1200.428398][T19536]  dump_stack_lvl+0x16c/0x1f0
[ 1200.428431][T19536]  should_fail_ex+0x512/0x640
[ 1200.428452][T19536]  ? fs_reclaim_acquire+0xae/0x150
[ 1200.428474][T19536]  should_failslab+0xc2/0x120
[ 1200.428495][T19536]  __kmalloc_noprof+0xdd/0x880
[ 1200.428521][T19536]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1200.428548][T19536]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1200.428568][T19536]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1200.428592][T19536]  ? tomoyo_profile+0x47/0x60
[ 1200.428616][T19536]  tomoyo_path_number_perm+0x245/0x580
[ 1200.428641][T19536]  ? tomoyo_path_number_perm+0x237/0x580
[ 1200.428668][T19536]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1200.428696][T19536]  ? find_held_lock+0x2b/0x80
[ 1200.428740][T19536]  ? find_held_lock+0x2b/0x80
[ 1200.428759][T19536]  ? hook_file_ioctl_common+0x145/0x410
[ 1200.428785][T19536]  ? __fget_files+0x20e/0x3c0
[ 1200.428808][T19536]  security_file_ioctl+0x9b/0x240
[ 1200.428830][T19536]  __x64_sys_ioctl+0xb7/0x210
[ 1200.428856][T19536]  do_syscall_64+0xcd/0xfa0
[ 1200.428873][T19536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1200.428890][T19536] RIP: 0033:0x7f777ff8f6c9
[ 1200.428905][T19536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1200.428921][T19536] RSP: 002b:00007f777e1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1200.428938][T19536] RAX: ffffffffffffffda RBX: 00007f77801e6090 RCX: 00007f777ff8f6c9
[ 1200.428950][T19536] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[ 1200.428960][T19536] RBP: 00007f777e1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1200.428970][T19536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1200.428981][T19536] R13: 00007f77801e6128 R14: 00007f77801e6090 R15: 00007ffdcf01f1e8
[ 1200.429005][T19536]  </TASK>
[ 1200.429303][T19536] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1203.485316][T19589] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1203.493251][T19589] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1203.502750][T19589] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1203.511206][T19589] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[ 1204.043525][T19595] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1204.084382][T19595] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1204.094559][T19595] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1204.105181][T19595] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1205.278995][ T5828] Bluetooth: hci5: command 0x0406 tx timeout
[ 1205.624395][   T30] audit: type=1400 audit(1762583137.332:1447): avc:  denied  { ioctl } for  pid=19611 comm="syz.7.3281" path="socket:[68355]" dev="sockfs" ino=68355 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1205.726025][T19618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3282'.
[ 1206.254031][T19623] fuse: Bad value for 'fd'
[ 1206.341180][T19625] Invalid source name
[ 1206.765607][T17950] Bluetooth: hci4: SCO packet for unknown connection handle 200
[ 1206.821820][T19631] fuse: Bad value for 'fd'
[ 1207.226845][T19634] Invalid source name
[ 1208.324754][T19648] team_slave_0: entered promiscuous mode
[ 1208.330480][T19648] team_slave_1: entered promiscuous mode
[ 1208.336431][T19648] macsec1: entered promiscuous mode
[ 1208.341651][T19648] team0: entered promiscuous mode
[ 1208.348356][T19648] macsec1: entered allmulticast mode
[ 1208.353658][T19648] team0: entered allmulticast mode
[ 1208.359028][T19648] team_slave_0: entered allmulticast mode
[ 1208.364983][T19648] team_slave_1: entered allmulticast mode
[ 1208.374227][T19648] team0: Device macsec1 is already an upper device of the team interface
[ 1209.363834][T19648] team0: left allmulticast mode
[ 1209.369052][T19648] team_slave_0: left allmulticast mode
[ 1209.377463][T19648] team_slave_1: left allmulticast mode
[ 1209.386089][T19648] team0: left promiscuous mode
[ 1209.393528][T19648] team_slave_0: left promiscuous mode
[ 1209.398980][T19648] team_slave_1: left promiscuous mode
[ 1209.436050][T19652] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3291'.
[ 1209.455447][T19652] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3291'.
[ 1209.543689][   T30] audit: type=1400 audit(1762583141.252:1448): avc:  denied  { connect } for  pid=19651 comm="syz.8.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1209.583952][T19652] batadv_slave_1: entered promiscuous mode
[ 1209.601689][   T30] audit: type=1400 audit(1762583141.252:1449): avc:  denied  { write } for  pid=19651 comm="syz.8.3291" laddr=::1 lport=13934 faddr=::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1209.634141][T19652] batman_adv: batadv0: Adding interface: macsec1
[ 1209.728481][ T6094] block nbd0: Possible stuck request ffff8880260e5080: control (read@0,1024B). Runtime 450 seconds
[ 1209.739633][ T6094] block nbd0: Possible stuck request ffff8880260e5240: control (read@1024,1024B). Runtime 450 seconds
[ 1209.750892][ T6094] block nbd0: Possible stuck request ffff8880260e5400: control (read@2048,1024B). Runtime 450 seconds
[ 1209.763391][ T6094] block nbd0: Possible stuck request ffff8880260e55c0: control (read@3072,1024B). Runtime 450 seconds
[ 1209.777238][T19652] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1209.803005][   T30] audit: type=1400 audit(1762583141.272:1450): avc:  denied  { ioctl } for  pid=19651 comm="syz.8.3291" path="socket:[68517]" dev="sockfs" ino=68517 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1210.315858][T19652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1210.337973][ T5828] Bluetooth: hci1: command 0x0406 tx timeout
[ 1210.363582][T19652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1210.392724][T19652] batman_adv: batadv0: Interface activated: macsec1
[ 1210.633318][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3297'.
[ 1210.684610][T19670] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3296'.
[ 1212.505977][   T24] usb 3-1: new low-speed USB device number 84 using dummy_hcd
[ 1212.586345][T19701] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3307'.
[ 1212.677697][   T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1212.708402][   T24] usb 3-1: config 0 has no interface number 0
[ 1212.746053][   T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1212.801782][   T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1212.886913][   T31] INFO: task syz.0.2907:17754 blocked for more than 143 seconds.
[ 1212.905101][   T31]       Not tainted syzkaller #0
[ 1212.920289][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1212.967816][   T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1213.278131][   T31] task:syz.0.2907      state:D stack:27912 pid:17754 tgid:17751 ppid:5817   task_flags:0x400140 flags:0x00080002
[ 1213.302666][   T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1213.318869][T19712] random: crng reseeded on system resumption
[ 1213.450389][   T31] Call Trace:
[ 1213.458237][   T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1213.478107][   T31]  <TASK>
[ 1213.484482][   T31]  __schedule+0x1190/0x5de0
[ 1213.501609][   T31]  ? __lock_acquire+0x622/0x1c90
[ 1213.527988][   T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1213.541969][   T31]  ? __pfx___schedule+0x10/0x10
[ 1213.805528][   T31]  ? find_held_lock+0x2b/0x80
[ 1213.821985][   T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1213.837431][   T31]  ? schedule+0x2d7/0x3a0
[ 1213.873338][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.899028][   T31]  ? bdev_open+0xa2/0xe40
[ 1213.903410][   T31]  schedule+0xe7/0x3a0
[ 1213.916764][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1213.922279][   T31]  __mutex_lock+0x818/0x1060
[ 1213.925524][   T24] usb 3-1: config 0 descriptor??
[ 1213.937220][   T31]  ? bdev_open+0xa2/0xe40
[ 1213.943533][T19695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1213.962907][T19695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1213.970159][   T31]  ? irqentry_exit+0x3b/0x90
[ 1213.988545][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1214.013160][   T31]  ? disk_block_events+0x21/0x140
[ 1214.018725][   T31]  ? __sanitizer_cov_trace_pc+0x56/0x70
[ 1214.025328][   T31]  ? bdev_open+0xa2/0xe40
[ 1214.030748][   T31]  bdev_open+0xa2/0xe40
[ 1214.035105][   T31]  ? iput+0x35/0x40
[ 1214.035346][   T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1214.039217][   T31]  bdev_file_open_by_dev+0x182/0x210
[ 1214.052706][   T31]  setup_bdev_super+0x39b/0x730
[ 1214.061797][   T31]  nilfs_get_tree+0x59e/0x10f0
[ 1214.069090][   T31]  ? __pfx_nilfs_get_tree+0x10/0x10
[ 1214.074394][   T31]  ? cap_capable+0xb3/0x250
[ 1214.084804][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1214.093054][   T31]  ? security_capable+0x7e/0x260
[ 1214.098299][   T31]  vfs_get_tree+0x8e/0x340
[ 1214.102877][   T31]  path_mount+0x7b9/0x23a0
[ 1214.107583][   T31]  ? __pfx_path_mount+0x10/0x10
[ 1214.112516][   T31]  ? putname+0x154/0x1a0
[ 1214.118215][   T31]  ? putname+0x154/0x1a0
[ 1214.122506][   T31]  ? putname+0x154/0x1a0
[ 1214.128518][   T31]  ? __x64_sys_mount+0x293/0x310
[ 1214.135911][   T31]  __x64_sys_mount+0x293/0x310
[ 1214.140801][   T31]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1214.146321][   T31]  do_syscall_64+0xcd/0xfa0
[ 1214.150930][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1214.157081][   T31] RIP: 0033:0x7f956d98f6c9
[ 1214.164767][   T31] RSP: 002b:00007f956bbb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1214.174402][   T31] RAX: ffffffffffffffda RBX: 00007f956dbe6180 RCX: 00007f956d98f6c9
[ 1214.184154][   T31] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000200000000000
[ 1214.196580][   T31] RBP: 00007f956da11f91 R08: 0000200000000100 R09: 0000000000000000
[ 1214.205935][   T31] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000000
[ 1214.219473][   T31] R13: 00007f956dbe6218 R14: 00007f956dbe6180 R15: 00007fffc3fdccb8
[ 1214.228354][ T5948] usb 3-1: USB disconnect, device number 84
[ 1214.238897][ T5948] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1214.251060][   T31]  </TASK>
[ 1214.254164][   T31] 
[ 1214.254164][   T31] Showing all locks held in the system:
[ 1214.263985][   T31] 1 lock held by khungtaskd/31:
[ 1214.270052][   T31]  #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1214.284629][   T31] 2 locks held by kworker/u8:6/2989:
[ 1214.291820][   T31]  #0: ffff888146eaf148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1214.307411][   T31]  #1: ffffc9000be77d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1214.319025][   T31] 2 locks held by getty/5572:
[ 1214.323707][   T31]  #0: ffff888031c1b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1214.334280][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1214.344560][   T31] 3 locks held by kworker/0:7/5948:
[ 1214.349912][   T31]  #0: ffff8881446ecd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1214.361065][   T31]  #1: ffffc9000536fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1214.373707][   T31]  #2: ffff88802913f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[ 1214.382677][   T31] 1 lock held by udevd/14111:
[ 1214.387419][   T31]  #0: ffff888143362358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1214.396850][   T31] 2 locks held by syz.0.2907/17754:
[ 1214.402056][   T31]  #0: ffff88805eb100e0 (&type->s_umount_key#66/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60
[ 1214.412685][   T31]  #1: ffff888143362358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[ 1214.422043][   T31] 2 locks held by kworker/u8:8/18015:
[ 1214.427506][   T31]  #0: ffff888146eaf148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1214.438180][   T31]  #1: ffffc9000b957d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1214.449760][   T31] 
[ 1214.452080][   T31] =============================================
[ 1214.452080][   T31] 
[ 1214.460762][   T31] NMI backtrace for cpu 1
[ 1214.460778][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1214.460798][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1214.460809][   T31] Call Trace:
[ 1214.460815][   T31]  <TASK>
[ 1214.460823][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1214.460856][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1214.460879][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1214.460906][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1214.460929][   T31]  watchdog+0xf3f/0x1170
[ 1214.460956][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1214.460978][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1214.460998][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1214.461025][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1214.461052][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1214.461074][   T31]  kthread+0x3c5/0x780
[ 1214.461091][   T31]  ? __pfx_kthread+0x10/0x10
[ 1214.461108][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1214.461130][   T31]  ? __pfx_kthread+0x10/0x10
[ 1214.461148][   T31]  ret_from_fork+0x675/0x7d0
[ 1214.461163][   T31]  ? __pfx_kthread+0x10/0x10
[ 1214.461179][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1214.461216][   T31]  </TASK>
[ 1214.461222][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1214.586780][    C0] NMI backtrace for cpu 0
[ 1214.586794][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1214.586811][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1214.586819][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1214.586844][    C0] Code: c7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 76 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1214.586858][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1214.586872][    C0] RAX: 00000000071ec883 RBX: 0000000000000000 RCX: ffffffff8b60b2a9
[ 1214.586881][    C0] RDX: 0000000000000000 RSI: ffffffff8da2b6dd RDI: ffffffff8bf07040
[ 1214.586891][    C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655
[ 1214.586900][    C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000
[ 1214.586909][    C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000
[ 1214.586918][    C0] FS:  0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000
[ 1214.586933][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1214.586942][    C0] CR2: 0000001b3150bfa0 CR3: 000000006124b000 CR4: 00000000003526f0
[ 1214.586952][    C0] Call Trace:
[ 1214.586958][    C0]  <TASK>
[ 1214.586963][    C0]  default_idle+0x13/0x20
[ 1214.586979][    C0]  default_idle_call+0x6c/0xb0
[ 1214.586993][    C0]  do_idle+0x38d/0x500
[ 1214.587017][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1214.587033][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[ 1214.587050][    C0]  cpu_startup_entry+0x4f/0x60
[ 1214.587067][    C0]  rest_init+0x16b/0x2b0
[ 1214.587082][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1214.587101][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1214.587121][    C0]  start_kernel+0x3f6/0x4e0
[ 1214.587140][    C0]  x86_64_start_reservations+0x18/0x30
[ 1214.587158][    C0]  x86_64_start_kernel+0x130/0x190
[ 1214.587175][    C0]  common_startup_64+0x13e/0x148
[ 1214.587195][    C0]  </TASK>
[ 1214.785148][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1217.921500][ T5185] udevd[5185]: worker [14111] /devices/virtual/block/nbd0 timeout; kill it
[ 1217.930407][ T5185] udevd[5185]: seq 19218 '/devices/virtual/block/nbd0' killed