last executing test programs:

11.497291366s ago: executing program 2 (id=312):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x20042, 0x101)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(r2, 0x0, 0x20000091)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x80, 0x10, 0x2, 0x1, 0x0, 0x3, 0x0})

11.426024302s ago: executing program 3 (id=313):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x80000000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1})
fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff)

11.297105144s ago: executing program 2 (id=314):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48880)
socket$kcm(0x10, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

11.080782613s ago: executing program 0 (id=315):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)

10.202815051s ago: executing program 2 (id=317):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000100000001c000c80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

10.115944929s ago: executing program 0 (id=318):
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280"], 0xd4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

9.818109486s ago: executing program 1 (id=319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", <r4=>0xffffffffffffffff})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0x80000000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1})
fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff)

9.779779009s ago: executing program 2 (id=320):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd09000085000000410000", @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r1}, 0x38)

9.730293039s ago: executing program 5 (id=321):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

9.679834032s ago: executing program 0 (id=322):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0xfffffe14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x40025b0c, &(0x7f0000000040))
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f00000002c0))
writev(r6, &(0x7f0000000200)=[{&(0x7f0000000240)='nn', 0x2}], 0x1)
creat(&(0x7f0000000140)='./file0\x00', 0x8)
dup3(r1, r6, 0x6700000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)

9.456039185s ago: executing program 2 (id=323):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)='$', 0x1}, 0x64)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1, 0x2})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r6})

9.118059683s ago: executing program 3 (id=324):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000780)=[{0x9, 0x5a00, 0x0, 0x0}], 0x1})

7.17100111s ago: executing program 1 (id=325):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$unix(r1, &(0x7f000000f180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="58d23351c2a65cf9bf0936f4fe28b873bbd9bfb8464cd78d99a902bc21268ee594bf341ccf960c65", 0x28}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000740)="a1ee458df90019ffe416a64191fbffbdb60236365313e63a160c993f817da58628b8cdab251c342abd313d51eeb22c091d60e3f82e0345753e262df0f2e9544acee7", 0x42}, {&(0x7f0000001880)="088ba2f1fe5c535000452c74e545a22dff26a195e7df46d5721a2bd9e49a2e21eb55269a886bf13d9be0f28f8504302cbccbd5bfe7881fa8f3b1eb3496439dcc58d8db4439506a07b92334ef3dcdd885c63bb8038a7df64b1e29aaedbd8e0789eb838968ac1080c55bedcf30798bcf6e84d038bf065a27ecda", 0x79}, {&(0x7f0000001900)="de306bc72c96c3aa7a5ec00ae59406c604147c7acd29424e008b90f379c832b4fe2b8d32fad81d12bf42081a3d441f3fe572643c71e1fc561f27e2c754f09f642e540cb1433c3d7b556a561e7daa6914209a4334fc1272291194908c162fd0bd2939e50aa4b3b17f4f0fedda6b2fb80c29ad03f7af80643524cbc89a1dc9dd7a51fffd82ff16a900d9a27da0", 0x8c}, {&(0x7f00000019c0)="430285be0c5cca99732febf8f47826af43e25ce7e2913711d1d41bd5a24611eae1fcda5d3f67038fd890898e9a8e4756eb2d2571804068b52db5a0458c08d7940d0b447e8fb4427324c50421e43def2e2443ecb3c8535df27aa50198f17c97b0c87ac74f084ee31653260f977618d52f2f678868f52c942cf86ce52097", 0x7d}], 0x4, 0x0, 0x0, 0x4008880}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001c00)="cd2605eae2ef43f6d0f842166bb33d3aac7f3a0f444464292b97e8e2cbfc61010ec1e08510ba0ad49bd2690a4fcdc650610c872e5fe643dc0a64e137bd", 0x3d}], 0x1, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)="0ba7719563a8e83a5e75", 0xa}, {&(0x7f0000001d40)="174d32570a64b53397b525c1025414808c8d1348ac6fa3cb5fd40746ca52e68a148317266ddb990378b23870891350420f901b1132a6e15b50b79e74bdb8176cbaf90dffa7c315a226bb72a30f07d0bc533cbf1d41108a9cf9236bbf2be19baf22175f86f71f9cc92717b178ad661bfa7e0286833a00f2590accc865a34133d2af1ca019a66ddbffe8366ad32f06cec67a3ca5609d4e185868c997bb3c9903bff31e8a9db4326ec37f6b70056366debb9676f91f14b3f93228201067efb9", 0xbe}], 0x2, 0x0, 0x0, 0x40855}}, {{0x0, 0x0, &(0x7f000000d500)=[{&(0x7f000000c200)="0920ed81a7fe131ccac2e6c1f19d07b9f7b10ad9cc638299a60b7f2006cfdf54374d7550bc6951acbd6d8ff7208ab17e822eae1eb5ff59bf83d08e68456420ca200b7b112a40afd62478dc4f57007e9b474868862f506c8fe39d70c26c3379d67c221b0f1eb09318f234ecea41886a30d796f5e2acc16ecf1ff97ea9d83afce638287fc211ce3c4b49b8ec2d331c2a9c5e979bcc07d62fee3d44b6e0a6afd5bb3cb67bb3a739d54613e14da5f0f7b1a99f91a6e1379fc45ac1425ef40137776b306cdf0076e446a0cf2b47fda0baab0551ac5b3fb91267e5b36601db2f81d6aa01bd607df817cb6d6d78181601429d0587f38e8aaa1fdd142584926dc6d1d215b1f9fee7ec9b1800c84e9ab9fbeadd558cd3e6f13a8126b778f90e649495f8dd96466ed95f978515b74c60788b1927f397dfaedfd177af06cc21abff76e28abf2a52af6993c84f0aa1c6278e2aef1c1b388c1112b7849616fc06d93394cfaeff9fe99b91216164dc4ef428e59a27286300d7d72270f6bff18c76d485c1c1dba5077bf38ea134822097e47d9922051609bb17ea254a249c52a1edf15370e827d15635660fc54a995a5c4bc04f3ce629bef4f37b8e8ff9297b2332411c45434546567d5e6e3d0ec7ccf9aa8cc9b2ccb0281d49252d1b7ee3a5b7436a6d7fbe4dcb1d28e87db87eadd5b53c572ca3dcd7326b3085d7b62b45f47464d66cd33e2b4417073b1e7c8a678f263600a2c9f1d5341c550005948bc3ae2fb2bb2c29cdc2c983b943f76ebf1be15f36903a2030f5819bd5aa91aede4398153480575ed01a2a9045a410822117786d71555cef143c442f4d5f1871f67f65eb5ff702208cae263b260eb910cba060d9e2c7cbd09c88a5b0aac267f4a4fb0be7ce152fb47a7c5fb07628938bc2a27c5f1b6df51072405ed3b599a98efbf306f0254cc3fe42d0361536281466f9fbc1cb7e3d4854ee836f1abfbb956031da7cf8cc0d2d82b6bca5e11002993e22111caf101d83a5af741ddd4b600b2fabdee6c678546403afb2e9509c0b36fb57ca2d5da4709e8aa95aab63b8f5ef54e86deb196c1dfedc789713e8e6e32c108b7258d5c10ac66485e7cbd5bde872bd41e528d1842b02d9405c05a0fb5577e9da2b93da77af5ce7d4d31375dff8fd09d6a5ce486111bfbcf7dbf63efb52a2a87a4bb0112e4a8299fcd5a11e1fd04e305f353cfdffdf1b2ec229ee3d2d344cb48af647b38619f2edfde23af92217483a3782195ae7465c60c97a1fec1e8321ff79b9b2574746a048db6d133f5f55f90b3bc86f9e0b1be4d89a326bb0821f2d71dd0695cd17b377b21b5e08c32648e098fc10f7c8a4b1d21802ee2358b550dcf7c50d287120b1a854ab1abc7db832738ffd149e928495de4481547c98d1d9013fb2cb75cb4311766a1ab86e003bc2555b98aa6b1b4ef8e087b27bb1e0c9c8ba3aee43c936d9bc5ae405378c07637573253a07958a17de4f0aaacc3e49332c2581850dded35d4dddcf8a687a4ec62871f6cd80e2d644e52f1b34a0f03c5d5cb07bb6ab5b0b9f8eb59c93294726c3d309ceee6ebf15e79b1ec0c540eda8593e4cd998ee5b73fea2a80d03f646433d32c9d7773826fa6fb242c0afc765f33c1986085619e24fea21678c554a16f496b031004212cfe7d89fa5716206fe59e36fd71b22b336e1f4670bf814de61b80f9a9023f042f1f5c41ad4046041992ed1e059ab395de9da9070826ea0a89fcd1b1d4580f2d0f4f686506522d10bcb33a54cbe36327a73b9007aa55185df2832327a67fd33b8bb9a180610b93a50cda4294f284e565975ea58974ccf0b2196719c5e28ec146a3b9543063e11a0ab199d09fdb3953756b7a5a79a84ff7fc8a989a93f5cd15f6cd35628c2508d8173b9175afc23c8c0fadd8747e36fd976e003a9324db098e8a2c4c8299d6a2d33a7112e0af0e3954046448120aeffa3a89015ab91ccfc8dbec0bfdf9f007ce96909974199b51ba4020b129daacb991794c23c44ec39235cae25614361aadd5e674c8912473959ab4cf323fd315a38a24604241d2932a036505fb036c01096cd22031b8eed5c4f1a1a38f5770eb707d1e69b3abb461a1b902d52b7d121ecd14ce9bf94be503d1cbf3aa5283c3d26984190e44a2a889f57f9ffa2197ed5e4524084f08fab515feb4503c986d34e8fb82b174314f4ed09e8255f4e211a9c2aaf4fbe2e7a4bc17955edf93ddc5c47ec5bea2b5d28d1cf7d8db1aad5e83b3b86df0554fb617a63ab7e0e9cd43717689e2d6a45f074f4d9af57bb722c152b7f286a215428c1cd71ed889fdbb2d89e8484827065c0ae75a37d151d9cd5d15b606fb9aa6fe6d949d7b64d819b9d941d2d7dcf0751e4585d690aabe824e5e25783d9e6ceb784ff9aa19cb5da08093001d116467187af724ce55007471a0c090b98501afee234ad7e5b760b3825acd3aed8691e99c3684759c1b733c7534033642a5177b6994c8f77d5cd2272a910a2a1f388782797ffb42b6e823e5fd10a8c00dce397fb478e3d2e9a5fba7aac35830ee6e0dd671fe5a99f46e183dc87f4be4aed2294196cb172e6d546b522824928b18a1f9950f75dfc956807f948beee3362acad0f2cf5f690ce1e8eb4c02c1e8fe9b6e1d764e57c2d93f5cba8b2c7586f501d785867bb13949d4402feae15e8176ec3cbf77643eb995d2b99d99d0a16471ca4c395231b7e5db87356134c74537b78f6e56f3972197083883387aced6ff3bce07d0a517a0afbb2598dd36ce3016c293af2b25dafbb2d31e852359d7cccd25a9f3c447a1899dd7c3cc9e5478d5e8d29ba98f3c28ef8df3e4a5704caf9e58c72ae555387a25baae00fdd5b36d265dedd30c4680b79d6907bb0f82ad0970b53044cd1e6e0732011fb64c72d8a53f508bd5a1485de006cac66613a960bd95d6b441f7cae006a3b7497fb95fc9d157d6ccd01f5f47ab4a76db900f1d7e3753a1a499e5b6b82108c1b4dd385c634ede62b718945ee9f104020196e7687b362469c64cd08215b5574277ef3e010ac7b4d2bbde0d5a46faad00781a72d275dfc3702b398721ab6a5bd365bd68186d3dae6728f0800adc08044502d360108bd225d8fb6ffd6eac334d394d32f0742248125865c5b0ee84f41efffd461b1494699f92dec51a514078570889f1f70f1114f546a56de21adaa3ac60f80fa52e7821d5ebaee99744263a96841b7f598d99f678e03b9ef7e5ca46bfbb813ebbbc67f1bb5bd61b6179220907870321865d232dac80c251b92426e8fe56df74c6c0e47965c01a10e75136713adea08dd6d73bbb7ac0b44ae3d167269b195364e2f5c4fde48e1961f79ab8dc6431e4286236381f317dc0dd116820382c4b889cf11e5983f79e707542140362e4e6fbb7828f034e9e5548345ab704041ff146e6077bd97a03a9719df74ef11211db6ddc85c4faaa624e98dd231c31213a1539f62d0c944c10d481f3c182ca3b711126fbbeac134dbb1464597d73acf3f6267899fd8b9097cf075a3d5b375a463d58c43d6605f5e2eb067f1b7491c58f21eceb438f80efb2897700f197344c829987f82d70d9f5bd598d7b0d308adb57d19eccaeb7d45c60f5b4ae337f9d0d6af67ad12a1bf27a98188def854687442dbbeaa59844d034effac22ab625f0c5a076d62aac032b39ca62486bc390137a15ff2eb355fe1376ca0431fba9901c5b9cd1392a413a9652fb5bc25125a8885246357becf3bb0f4fb8c461c28deb8f7f62394c01d51fd9b388e4737421cd9ff40a2dab4d0f50e34ca91542a7400f3abda7cb69610035d15d2140c07990ed4efa3b88ed6b7cea03fc4e4c16d87e93eb4d39f2eee26252905b62bed7ed1642bb73de4d72a80e5439d237b7815144eb933904467e15b6aaf843557a8ae5579792320746b573370febe5b963163ff64d2ffc1152979a535bfcbe8e19b26790fc733c50c7ac5b583dfcac1b8654fd786becbe28911ed1bd12da1c7ec95b7a6f21f4911c5af3b0fc4ea05c0a2af74309d6870f9b2645dc9ca765e53a3690200cd0f0a472117ed5cfca7b5d1fb60121f307c65e00aa1aae0ce38819efaa3fc0e39f5a631b486277e5fd92981e4731ddb29eda8169dd48ad6350de2cfc3996c37bb202787db918b0d89604431958fe845b72f4012ee8ce2913d68caeb779d99d8b11665148c11ece43f60adf31af6a32613ba61b6e7d7d15cda322132dcc0ce3f9e6c41369857b8bd370bc1443012f4d3f2a561e68b5392a3a9d5778609d0fb5bbfbefa758f59d541d32747256fefc28ec9688a443d2a482090c0a8658080be363127e4136269c8dc76fe048df62aba62913c6aead71fe9819f4514a672feabe7aec18e0b44f09a8cf48b371eb761398c5967c4ace752f2126f244933700aa02c7abac16217811896c2d87187ea13791c7311d733e0a099c46a9b038b69d210e628de32e2faf66b955d13ff90f94587330709cc56986199c83d8783aa0ac36b72449e2f84d4482d0e24385ce27be545ce97c77b2ff43e3b4c403dfcea561c4b2147efd1a005d9c2427374d56a2e965832d977cf32271fb5008ea48f63b040", 0xca7}, {0x0}], 0x2, 0x0, 0x0, 0x4040800}}], 0x5, 0x8004)

7.081502594s ago: executing program 5 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', 0x1)

6.969908095s ago: executing program 1 (id=328):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
socket$tipc(0x1e, 0x5, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000004c0)={0x0, 0x787f, 0x80, 0x4, 0x1b0}, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004084)

6.659246549s ago: executing program 4 (id=329):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48880)
socket$kcm(0x10, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

6.658270776s ago: executing program 5 (id=330):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

6.461934561s ago: executing program 1 (id=331):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00)
syz_usb_disconnect(r1)
close(r2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80080)
write$P9_RREADDIR(r3, &(0x7f0000000480)={0x49, 0x29, 0x2, {0x0, [{{0x20, 0x0, 0x1}, 0x800, 0x7, 0x7, './file0'}, {{0x10}, 0x2, 0x6, 0x7, './file0'}]}}, 0x49)

6.154996479s ago: executing program 4 (id=332):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r2, 0x4)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008014}], 0x1, 0x4814)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0, &(0x7f0000000240))

5.579070261s ago: executing program 5 (id=333):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300)='qnx6\x00', 0x2208004, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)

5.485712963s ago: executing program 4 (id=334):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
r5 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x20081)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=<r6=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0)

3.890794941s ago: executing program 5 (id=335):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd09000085000000410000", @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r1}, 0x38)

3.803826903s ago: executing program 3 (id=336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x80000000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1})
fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff)

3.766372371s ago: executing program 0 (id=337):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
r1 = gettid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r4, @ANYBLOB="080032000502000005003300f25f4e1d7b572e76c089c2592afe00b5d3cef76001bee8878b46f8"], 0x2c}}, 0x18)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
mq_notify(0xffffffffffffffff, 0x0)

3.565755251s ago: executing program 5 (id=338):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffe14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

3.30649015s ago: executing program 1 (id=339):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

1.743723051s ago: executing program 3 (id=340):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$unix(r1, &(0x7f000000f180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="58d23351c2a65cf9bf0936f4fe28b873bbd9bfb8464cd78d99a902bc21268ee594bf341ccf960c65", 0x28}, {&(0x7f00000001c0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000740)="a1ee458df90019ffe416a64191fbffbdb60236365313e63a160c993f817da58628b8cdab251c342abd313d51eeb22c091d60e3f82e0345753e262df0f2e9544acee7", 0x42}, {&(0x7f0000001880)="088ba2f1fe5c535000452c74e545a22dff26a195e7df46d5721a2bd9e49a2e21eb55269a886bf13d9be0f28f8504302cbccbd5bfe7881fa8f3b1eb3496439dcc58d8db4439506a07b92334ef3dcdd885c63bb8038a7df64b1e29aaedbd8e0789eb838968ac1080c55bedcf30798bcf6e84d038bf065a27ecda", 0x79}, {&(0x7f0000001900)="de306bc72c96c3aa7a5ec00ae59406c604147c7acd29424e008b90f379c832b4fe2b8d32fad81d12bf42081a3d441f3fe572643c71e1fc561f27e2c754f09f642e540cb1433c3d7b556a561e7daa6914209a4334fc1272291194908c162fd0bd2939e50aa4b3b17f4f0fedda6b2fb80c29ad03f7af80643524cbc89a1dc9dd7a51fffd82ff16a900d9a27da0", 0x8c}, {&(0x7f00000019c0)="430285be0c5cca99732febf8f47826af43e25ce7e2913711d1d41bd5a24611eae1fcda5d3f67038fd890898e9a8e4756eb2d2571804068b52db5a0458c08d7940d0b447e8fb4427324c50421e43def2e2443ecb3c8535df27aa50198f17c97b0c87ac74f084ee31653260f977618d52f2f678868f52c942cf86ce52097", 0x7d}], 0x4, 0x0, 0x0, 0x4008880}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001c00)="cd2605eae2ef43f6d0f842166bb33d3aac7f3a0f444464292b97e8e2cbfc61010ec1e08510ba0ad49bd2690a4fcdc650610c872e5fe643dc0a64e137bd", 0x3d}], 0x1, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)="0ba7719563a8e83a5e75", 0xa}, {&(0x7f0000001d40)="174d32570a64b53397b525c1025414808c8d1348ac6fa3cb5fd40746ca52e68a148317266ddb990378b23870891350420f901b1132a6e15b50b79e74bdb8176cbaf90dffa7c315a226bb72a30f07d0bc533cbf1d41108a9cf9236bbf2be19baf22175f86f71f9cc92717b178ad661bfa7e0286833a00f2590accc865a34133d2af1ca019a66ddbffe8366ad32f06cec67a3ca5609d4e185868c997bb3c9903bff31e8a9db4326ec37f6b70056366debb9676f91f14b3f93228201067efb9", 0xbe}], 0x2, 0x0, 0x0, 0x40855}}, {{0x0, 0x0, &(0x7f000000d500)=[{&(0x7f000000c200)="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", 0xca7}, {0x0}], 0x2, 0x0, 0x0, 0x4040800}}], 0x5, 0x8004)

1.7291032s ago: executing program 4 (id=341):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x20042, 0x101)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(r2, 0x0, 0x20000091)
r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x80, 0x10, 0x2, 0x1, 0x0, 0x3, 0x0})

1.22279311s ago: executing program 3 (id=342):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0)

1.040643254s ago: executing program 4 (id=343):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', 0x1)

1.040062766s ago: executing program 0 (id=344):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
r4 = dup2(r3, r3)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800)

661.241049ms ago: executing program 1 (id=345):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

584.603199ms ago: executing program 3 (id=346):
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
socket$kcm(0x21, 0x2, 0x2)
ptrace(0x11, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x5, 0x80000})
unshare(0x6a040000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000000c0)=0x1, 0x4)
r3 = dup(r2)
read$FUSE(r3, 0x0, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000500)=ANY=[], 0x258)
read$FUSE(r3, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r4, r4, 0x2, 0x0, 0x0, 0x9, 0x40, 0x800, 0x5503, 0x8b, 0x2, 0x9, 'syz1\x00'})
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0xe)
gettid()
pipe(&(0x7f0000000040))
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
unshare(0x24020400)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x7, 0x0, 0x7, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
unshare(0x10020f80)

513.774075ms ago: executing program 4 (id=347):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000006800)="10", 0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)
close(0x3)

418.945085ms ago: executing program 2 (id=348):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000780)=[{0x9, 0x5a00, 0x0, 0x0}], 0x1})

0s ago: executing program 0 (id=349):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x2080, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x2, 0x5, 0x9, 0x8, 0x1ff, 0x8, 0x1400000000000000}, &(0x7f00000007c0)={0x5, 0xffffffff, 0xa, 0x1, 0x58, 0x3, 0x5, 0x81}, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
openat$dlm_monitor(0xffffff9c, &(0x7f0000000140), 0x241, 0x0)
syz_emit_ethernet(0x9c, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @val={@val={0x88a8, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "795382", 0x5e, 0x21, 0x1, @empty, @mcast1, {[@routing={0x73, 0x2, 0x1, 0x40, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x5, "97c45f", 0x4, "021920"}, "e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d60653c0e5e8d"}}}}}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts.
[   79.572670][ T5600] cgroup: Unknown subsys name 'net'
[   79.665399][ T5600] cgroup: Unknown subsys name 'cpuset'
[   79.674700][ T5600] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.280150][ T5600] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.361619][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.383142][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.392030][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.400034][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.408120][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.416553][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.424778][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.426401][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.432545][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.441030][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.446786][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.454234][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.462703][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.478935][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.489429][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.534197][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.545952][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.555611][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.564270][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.571627][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.583810][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.587272][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.601546][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.609825][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.619566][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.627497][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.635990][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.645097][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.655553][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.665517][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.521452][ T4935] Bluetooth: hci0: command tx timeout
[   87.528369][ T4935] Bluetooth: hci1: command tx timeout
[   87.601441][ T4935] Bluetooth: hci2: command tx timeout
[   87.680755][ T4935] Bluetooth: hci3: command tx timeout
[   87.690748][ T4935] Bluetooth: hci4: command tx timeout
[   87.761078][ T4935] Bluetooth: hci5: command tx timeout
[   87.977854][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.985231][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.994588][ T5620] bridge_slave_0: entered allmulticast mode
[   88.003520][ T5620] bridge_slave_0: entered promiscuous mode
[   88.072870][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.080127][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.088242][ T5620] bridge_slave_1: entered allmulticast mode
[   88.095990][ T5620] bridge_slave_1: entered promiscuous mode
[   88.115796][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.123122][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.130302][ T5629] bridge_slave_0: entered allmulticast mode
[   88.138044][ T5629] bridge_slave_0: entered promiscuous mode
[   88.159805][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.167066][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.174374][ T5613] bridge_slave_0: entered allmulticast mode
[   88.181839][ T5613] bridge_slave_0: entered promiscuous mode
[   88.190094][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.197504][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.204967][ T5613] bridge_slave_1: entered allmulticast mode
[   88.212651][ T5613] bridge_slave_1: entered promiscuous mode
[   88.243863][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.251085][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.258266][ T5629] bridge_slave_1: entered allmulticast mode
[   88.266072][ T5629] bridge_slave_1: entered promiscuous mode
[   88.379140][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.408315][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.415965][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.423215][ T5614] bridge_slave_0: entered allmulticast mode
[   88.430660][ T5614] bridge_slave_0: entered promiscuous mode
[   88.453264][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.465003][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.484445][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.494015][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.501420][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.508606][ T5614] bridge_slave_1: entered allmulticast mode
[   88.516169][ T5614] bridge_slave_1: entered promiscuous mode
[   88.523291][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.530420][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.537816][ T5628] bridge_slave_0: entered allmulticast mode
[   88.547284][ T5628] bridge_slave_0: entered promiscuous mode
[   88.557702][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.592521][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.613696][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.621100][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.628272][ T5628] bridge_slave_1: entered allmulticast mode
[   88.635840][ T5628] bridge_slave_1: entered promiscuous mode
[   88.731411][ T5620] team0: Port device team_slave_0 added
[   88.737211][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.744393][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.751821][ T5630] bridge_slave_0: entered allmulticast mode
[   88.759210][ T5630] bridge_slave_0: entered promiscuous mode
[   88.782385][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.805653][ T5613] team0: Port device team_slave_0 added
[   88.814662][ T5620] team0: Port device team_slave_1 added
[   88.820644][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.827835][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.835275][ T5630] bridge_slave_1: entered allmulticast mode
[   88.843220][ T5630] bridge_slave_1: entered promiscuous mode
[   88.864728][ T5629] team0: Port device team_slave_0 added
[   88.873103][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.884950][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.896906][ T5613] team0: Port device team_slave_1 added
[   88.928153][ T5629] team0: Port device team_slave_1 added
[   88.948301][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.983571][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.040829][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.047895][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.073895][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.088075][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.111256][ T5614] team0: Port device team_slave_0 added
[   89.131094][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.138353][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.164529][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.176571][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.183711][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.209687][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.233245][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.240318][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.266448][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.280711][ T5614] team0: Port device team_slave_1 added
[   89.300955][ T5628] team0: Port device team_slave_0 added
[   89.307303][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.314477][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.340442][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.373152][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.380217][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.406235][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.431454][ T5628] team0: Port device team_slave_1 added
[   89.448388][ T5630] team0: Port device team_slave_0 added
[   89.463128][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.470099][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.496085][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.544358][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.551368][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.577365][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.590178][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.597185][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.600805][ T4935] Bluetooth: hci0: command tx timeout
[   89.623303][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.629206][ T5622] Bluetooth: hci1: command tx timeout
[   89.646587][ T5630] team0: Port device team_slave_1 added
[   89.666464][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.673518][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.680916][ T4935] Bluetooth: hci2: command tx timeout
[   89.699654][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.761773][ T4935] Bluetooth: hci3: command tx timeout
[   89.771085][ T4935] Bluetooth: hci4: command tx timeout
[   89.821946][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.829053][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.850993][ T4935] Bluetooth: hci5: command tx timeout
[   89.856205][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.885094][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.903526][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.930090][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.956244][ T5613] hsr_slave_0: entered promiscuous mode
[   89.962949][ T5613] hsr_slave_1: entered promiscuous mode
[   89.975176][ T5620] hsr_slave_0: entered promiscuous mode
[   89.981673][ T5620] hsr_slave_1: entered promiscuous mode
[   89.987840][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   89.993688][ T5620] Cannot create hsr debugfs directory
[   90.016493][ T5629] hsr_slave_0: entered promiscuous mode
[   90.023108][ T5629] hsr_slave_1: entered promiscuous mode
[   90.029224][ T5629] debugfs: 'hsr0' already exists in 'hsr'
[   90.034992][ T5629] Cannot create hsr debugfs directory
[   90.119782][ T5628] hsr_slave_0: entered promiscuous mode
[   90.126493][ T5628] hsr_slave_1: entered promiscuous mode
[   90.132988][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[   90.138730][ T5628] Cannot create hsr debugfs directory
[   90.172489][ T5614] hsr_slave_0: entered promiscuous mode
[   90.180063][ T5614] hsr_slave_1: entered promiscuous mode
[   90.186476][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   90.192349][ T5614] Cannot create hsr debugfs directory
[   90.313762][ T5630] hsr_slave_0: entered promiscuous mode
[   90.320216][ T5630] hsr_slave_1: entered promiscuous mode
[   90.326793][ T5630] debugfs: 'hsr0' already exists in 'hsr'
[   90.332870][ T5630] Cannot create hsr debugfs directory
[   90.967605][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.983151][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.991816][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.002640][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.011623][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.022731][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.031190][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.041866][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.119530][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.129554][   T10] cfg80211: failed to load regulatory.db
[   91.139236][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.149175][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.160492][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.174236][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.184886][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.193229][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.204174][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.324218][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.337856][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.352180][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.363463][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.371687][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.382263][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.390346][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.400103][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.482842][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.499772][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.507955][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.518087][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.539095][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.550173][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.567536][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.576021][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.586800][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.680709][ T4935] Bluetooth: hci0: command tx timeout
[   91.686169][ T5622] Bluetooth: hci1: command tx timeout
[   91.701596][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[   91.736215][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.753618][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.761157][ T5622] Bluetooth: hci2: command tx timeout
[   91.769547][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.791461][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.802405][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.813200][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.820747][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.841083][ T4935] Bluetooth: hci3: command tx timeout
[   91.846686][ T5622] Bluetooth: hci4: command tx timeout
[   91.861927][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.875225][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.885830][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.893041][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.916304][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.923130][ T5622] Bluetooth: hci5: command tx timeout
[   91.932795][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.952765][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   92.043561][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.050778][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.069071][ T5614] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   92.080919][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.088827][ T5614] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   92.102322][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.115003][  T809] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.122161][  T809] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.143667][ T5614] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   92.155061][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.164252][ T5614] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   92.174870][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.297877][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.361349][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.418912][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   92.466498][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.473766][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.513432][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   92.536819][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.544031][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.584184][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.591389][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.634722][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.641927][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.660132][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.754959][ T5630] 8021q: adding VLAN 0 to HW filter on device team0
[   92.796713][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.837790][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.845050][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.863451][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.895927][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.903193][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.998336][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   93.034477][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.041720][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.106950][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.114198][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.233077][ T5630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.548709][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.762946][ T5622] Bluetooth: hci1: command tx timeout
[   93.762968][ T4935] Bluetooth: hci0: command tx timeout
[   93.841409][ T5622] Bluetooth: hci2: command tx timeout
[   93.865468][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.915310][ T5629] veth0_vlan: entered promiscuous mode
[   93.930415][ T5622] Bluetooth: hci4: command tx timeout
[   93.930873][ T4935] Bluetooth: hci3: command tx timeout
[   94.002243][ T4935] Bluetooth: hci5: command tx timeout
[   94.013762][ T5629] veth1_vlan: entered promiscuous mode
[   94.199248][ T5629] veth0_macvtap: entered promiscuous mode
[   94.235534][ T5613] veth0_vlan: entered promiscuous mode
[   94.256387][ T5629] veth1_macvtap: entered promiscuous mode
[   94.284363][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.343092][ T5613] veth1_vlan: entered promiscuous mode
[   94.412808][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.489763][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.534614][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.559718][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.582836][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.602620][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.636543][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.679020][ T5613] veth0_macvtap: entered promiscuous mode
[   94.706765][ T5613] veth1_macvtap: entered promiscuous mode
[   94.760411][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.815142][ T5628] veth0_vlan: entered promiscuous mode
[   94.829277][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.877673][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.928696][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.943564][ T5628] veth1_vlan: entered promiscuous mode
[   95.031528][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.040271][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.068241][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.077882][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.106567][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.121809][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.217490][ T5630] veth0_vlan: entered promiscuous mode
[   95.227277][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.241327][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.316026][ T5630] veth1_vlan: entered promiscuous mode
[   95.362135][ T5628] veth0_macvtap: entered promiscuous mode
[   95.386967][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.408092][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.425775][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.433960][ T5628] veth1_macvtap: entered promiscuous mode
[   95.454939][ T5620] veth0_vlan: entered promiscuous mode
[   95.508340][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.530859][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.614563][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.635859][ T5620] veth1_vlan: entered promiscuous mode
[   95.645611][ T5630] veth0_macvtap: entered promiscuous mode
[   95.692621][ T5614] veth0_vlan: entered promiscuous mode
[   95.711545][ T5630] veth1_macvtap: entered promiscuous mode
[   95.735195][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.794885][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.809901][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.838082][ T5614] veth1_vlan: entered promiscuous mode
[   95.861795][   T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   95.878915][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.931703][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.952738][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.001109][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.009894][ T5620] veth0_macvtap: entered promiscuous mode
[   96.041749][ T5620] veth1_macvtap: entered promiscuous mode
[   96.049983][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.059514][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.067152][   T29] usb 3-1: config 0 has no interfaces?
[   96.089520][   T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   96.106877][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.117569][   T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   96.118154][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.132858][   T29] usb 3-1: Product: syz
[   96.138942][   T29] usb 3-1: Manufacturer: syz
[   96.145219][   T29] usb 3-1: SerialNumber: syz
[   96.172216][   T29] usb 3-1: config 0 descriptor??
[   96.217018][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.224819][ T5738] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   96.232955][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.266419][ T5614] veth0_macvtap: entered promiscuous mode
[   96.272927][ T5793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.278623][ T5614] veth1_macvtap: entered promiscuous mode
[   96.287046][ T5793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.338338][ T5793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.349307][ T5793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.377707][ T5793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.388391][ T5793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.390125][ T5857] usb 3-1: USB disconnect, device number 2
[   96.405777][ T5738] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[   96.419873][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.431989][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.444241][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.454133][ T5738] usb 1-1: Product: syz
[   96.458397][ T5738] usb 1-1: Manufacturer: syz
[   96.466578][ T5738] usb 1-1: SerialNumber: syz
[   96.489172][ T5738] usb 1-1: config 0 descriptor??
[   96.498280][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.508189][ T5793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.513081][ T5738] rndis_host 1-1:0.0: More than one union descriptor, skipping ...
[   96.536354][ T5738] rndis_host 1-1:0.0: rndis: master #0/ffff88807e316000 slave #1/0000000000000000
[   96.549938][ T5793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.551401][ T5738] cdc_acm 1-1:0.0: More than one union descriptor, skipping ...
[   96.579068][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.667516][ T5838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.677717][ T5838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.716120][ T5857] usb 1-1: USB disconnect, device number 2
[   96.740197][ T5838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.752970][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.764811][ T5838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.775466][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.824541][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.854935][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.923840][ T5793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.941038][ T5793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.325987][ T5798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.340378][ T5798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.715342][ T5793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.753089][ T5793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.108809][ T5888] loop2: detected capacity change from 0 to 7
[   99.166812][ T5888] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   99.192528][ T5888] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   99.208059][ T5888] Dev loop2: unable to read RDB block 7
[   99.221997][ T5888]  loop2: unable to read partition table
[   99.234987][ T5888] loop2: partition table beyond EOD, truncated
[   99.380786][ T5888] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   99.746671][ T4984] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   99.776622][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   99.793606][ T4984] Dev loop2: unable to read RDB block 7
[   99.813482][ T5902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19'.
[   99.833408][ T4984]  loop2: unable to read partition table
[   99.839401][ T4984] loop2: partition table beyond EOD, truncated
[   99.936589][ T5904] fuse: Bad value for 'fd'
[  100.260681][  T987] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  100.307707][ T5908] loop2: detected capacity change from 0 to 40427
[  100.310617][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  100.342825][ T5908] F2FS-fs (loop2): invalid crc value
[  100.426370][ T5908] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.438986][ T5908] F2FS-fs (loop2): Start checkpoint disabled!
[  100.456684][ T5908] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  100.465516][ T5908] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  100.654508][ T5908] syz.2.20: attempt to access beyond end of device
[  100.654508][ T5908] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  100.669081][ T5908] syz.2.20: attempt to access beyond end of device
[  100.669081][ T5908] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  100.683830][ T5908] syz.2.20: attempt to access beyond end of device
[  100.683830][ T5908] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  100.697967][ T5908] syz.2.20: attempt to access beyond end of device
[  100.697967][ T5908] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  100.711980][ T5908] syz.2.20: attempt to access beyond end of device
[  100.711980][ T5908] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  100.728418][ T5908] syz.2.20: attempt to access beyond end of device
[  100.728418][ T5908] loop2: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  100.742661][ T5908] syz.2.20: attempt to access beyond end of device
[  100.742661][ T5908] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  100.756867][ T5908] syz.2.20: attempt to access beyond end of device
[  100.756867][ T5908] loop2: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  100.771585][ T5908] syz.2.20: attempt to access beyond end of device
[  100.771585][ T5908] loop2: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  100.785600][ T5908] syz.2.20: attempt to access beyond end of device
[  100.785600][ T5908] loop2: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  100.857771][ T5918] Can't find ip_set type hash:net,por
[  100.967279][   T30] audit: type=1800 audit(1777252053.860:2): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20" name="file1" dev="loop2" ino=10 res=0 errno=0
[  101.051845][   T30] audit: type=1326 audit(1777252054.030:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  101.088998][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  101.089023][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  101.089035][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  101.089079][   T36] Call Trace:
[  101.089089][   T36]  <TASK>
[  101.089099][   T36]  dump_stack_lvl+0xe8/0x150
[  101.089129][   T36]  f2fs_stop_checkpoint+0x3c7/0x590
[  101.089171][   T36]  f2fs_write_end_io+0x1274/0x1740
[  101.089215][   T36]  __submit_merged_bio+0x256/0x6a0
[  101.089252][   T36]  __submit_merged_write_cond+0x3c9/0x4e0
[  101.089301][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  101.089343][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.089380][   T36]  f2fs_write_data_pages+0x287e/0x34f0
[  101.089408][   T36]  ? f2fs_build_free_nids+0xdc/0x1810
[  101.089477][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  101.089513][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  101.089586][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  101.089627][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.089648][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  101.089692][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.089720][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.089754][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  101.089777][   T36]  do_writepages+0x32e/0x550
[  101.089803][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.089833][   T36]  ? reacquire_held_locks+0x104/0x190
[  101.089864][   T36]  ? writeback_sb_inodes+0x463/0x19d0
[  101.089901][   T36]  __writeback_single_inode+0x133/0x10e0
[  101.089925][   T36]  ? do_raw_spin_unlock+0xf5/0x210
[  101.089959][   T36]  writeback_sb_inodes+0x979/0x19d0
[  101.089986][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  101.090043][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  101.090064][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.090132][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090160][   T36]  ? rcu_is_watching+0x15/0xb0
[  101.090190][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090221][   T36]  wb_writeback+0x445/0xb00
[  101.090245][   T36]  ? queue_io+0x201/0x470
[  101.090279][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  101.090304][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.090356][   T36]  wb_workfn+0x3f8/0xf10
[  101.090382][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090403][   T36]  ? look_up_lock_class+0x57/0x110
[  101.090453][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  101.090492][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090521][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.090556][   T36]  ? lock_acquire+0x106/0x350
[  101.090586][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  101.090625][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090661][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090696][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090730][   T36]  ? process_scheduled_works+0xa70/0x1860
[  101.090757][   T36]  ? process_scheduled_works+0xa70/0x1860
[  101.090787][   T36]  process_scheduled_works+0xb5d/0x1860
[  101.090813][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090884][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.090918][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.090947][   T36]  ? assign_work+0x3d5/0x5e0
[  101.090979][   T36]  worker_thread+0xa53/0xfc0
[  101.091007][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.091054][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.091093][   T36]  kthread+0x388/0x470
[  101.091127][   T36]  ? __pfx_worker_thread+0x10/0x10
[  101.091152][   T36]  ? __pfx_kthread+0x10/0x10
[  101.091186][   T36]  ret_from_fork+0x514/0xb70
[  101.091218][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  101.091244][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  101.091273][   T36]  ? __switch_to+0xc79/0x1410
[  101.091313][   T36]  ? __pfx_kthread+0x10/0x10
[  101.091349][   T36]  ret_from_fork_asm+0x1a/0x30
[  101.091400][   T36]  </TASK>
[  101.678173][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  101.686186][   T30] audit: type=1326 audit(1777252054.030:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  101.793329][  T987] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.820118][   T30] audit: type=1326 audit(1777252054.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  101.911302][  T987] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.930671][  T987] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.939759][  T987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.180824][   T30] audit: type=1326 audit(1777252054.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  102.278114][   T30] audit: type=1326 audit(1777252054.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  102.314579][   T30] audit: type=1326 audit(1777252054.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  102.420783][ T5931] netlink: 'syz.1.29': attribute type 3 has an invalid length.
[  102.436873][   T30] audit: type=1326 audit(1777252054.030:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  102.554805][   T30] audit: type=1326 audit(1777252054.030:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  102.585286][  T987] usb 6-1: usb_control_msg returned -32
[  102.592480][  T987] usbtmc 6-1:16.0: can't read capabilities
[  102.770879][   T30] audit: type=1326 audit(1777252054.030:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  104.087536][ T5747] usb 6-1: USB disconnect, device number 2
[  104.121524][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'.
[  104.388308][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[  104.474648][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'.
[  105.349321][ T5953] hsr_slave_1 (unregistering): left promiscuous mode
[  105.499712][ T5963] Zero length message leads to an empty skb
[  107.193064][  T987] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  107.311844][ T5996] fuse: Bad value for 'fd'
[  107.389552][ T5999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.400618][  T987] usb 3-1: Using ep0 maxpacket: 8
[  107.449264][  T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.502252][  T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  107.553098][  T987] usb 3-1: config 0 has no interface number 0
[  107.574191][  T987] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  107.609960][  T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.650754][ T5350] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  107.687766][  T987] usb 3-1: config 0 descriptor??
[  107.810637][ T5747] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.893869][ T5350] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  107.920782][  T987] usb 3-1: USB disconnect, device number 3
[  107.980792][ T5350] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  107.990796][ T5747] usb 4-1: Using ep0 maxpacket: 16
[  108.027715][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.045227][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.066179][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.098897][ T5747] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  108.108801][ T5747] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  108.118604][ T5747] usb 4-1: Manufacturer: syz
[  108.160119][ T5747] usb 4-1: config 0 descriptor??
[  108.233766][ T5350] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  108.312966][ T5350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.341697][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'.
[  108.361113][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'.
[  108.679568][ T5350] usb 2-1: usb_control_msg returned -32
[  108.745163][ T5350] usbtmc 2-1:16.0: can't read capabilities
[  109.220919][ T5350] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  109.740703][ T5350] usb 3-1: Using ep0 maxpacket: 16
[  109.749776][ T5350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  109.779995][ T5350] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  109.831645][ T5350] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  109.874231][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.917704][ T5350] usb 3-1: config 0 descriptor??
[  110.232623][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54'.
[  110.424203][  T987] usb 2-1: USB disconnect, device number 2
[  110.623391][ T5747] usb 4-1: USB disconnect, device number 2
[  111.043130][ T6034] loop1: detected capacity change from 0 to 40427
[  111.109656][ T6034] F2FS-fs (loop1): invalid crc value
[  111.187411][ T6034] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  111.198355][ T6034] F2FS-fs (loop1): Start checkpoint disabled!
[  111.213687][ T6034] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  111.222706][ T6034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  111.248387][ T6034] bio_check_eod: 176 callbacks suppressed
[  111.248409][ T6034] syz.1.59: attempt to access beyond end of device
[  111.248409][ T6034] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  111.269652][ T6034] syz.1.59: attempt to access beyond end of device
[  111.269652][ T6034] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  111.284597][ T6034] syz.1.59: attempt to access beyond end of device
[  111.284597][ T6034] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  111.298567][ T6034] syz.1.59: attempt to access beyond end of device
[  111.298567][ T6034] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  111.312644][ T6034] syz.1.59: attempt to access beyond end of device
[  111.312644][ T6034] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  111.326843][ T6034] syz.1.59: attempt to access beyond end of device
[  111.326843][ T6034] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  111.340972][ T6034] syz.1.59: attempt to access beyond end of device
[  111.340972][ T6034] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  111.355023][ T6034] syz.1.59: attempt to access beyond end of device
[  111.355023][ T6034] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  111.371684][ T6034] syz.1.59: attempt to access beyond end of device
[  111.371684][ T6034] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  111.385685][ T6034] syz.1.59: attempt to access beyond end of device
[  111.385685][ T6034] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  111.478128][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  111.478155][   T30] audit: type=1800 audit(1777252064.620:17): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.59" name="file1" dev="loop1" ino=10 res=0 errno=0
[  111.556735][ T6037] Can't find ip_set type hash:net,por
[  111.623036][   T30] audit: type=1326 audit(1777252064.620:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  111.688771][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: kworker/u8:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.688813][ T5793] Tainted: [L]=SOFTLOCKUP
[  111.688823][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  111.688844][ T5793] Workqueue: writeback wb_workfn (flush-7:1)
[  111.688904][ T5793] Call Trace:
[  111.688914][ T5793]  <TASK>
[  111.688924][ T5793]  dump_stack_lvl+0xe8/0x150
[  111.688957][ T5793]  f2fs_stop_checkpoint+0x3c7/0x590
[  111.689010][ T5793]  f2fs_write_end_io+0x1274/0x1740
[  111.689071][ T5793]  __submit_merged_bio+0x256/0x6a0
[  111.689106][ T5793]  __submit_merged_write_cond+0x3c9/0x4e0
[  111.689161][ T5793]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  111.689225][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.689269][ T5793]  f2fs_write_data_pages+0x287e/0x34f0
[  111.689299][ T5793]  ? f2fs_build_free_nids+0xdc/0x1810
[  111.689391][ T5793]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.689441][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.689471][ T5793]  ? f2fs_inode_chksum_verify+0x192/0x810
[  111.689549][ T5793]  ? __pfx_folio_mark_accessed+0x10/0x10
[  111.689592][ T5793]  ? __pfx_read_node_folio+0x10/0x10
[  111.689663][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.689693][ T5793]  ? __lock_acquire+0x6b5/0x2cf0
[  111.689751][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.689782][ T5793]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.689815][ T5793]  do_writepages+0x32e/0x550
[  111.689854][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.689889][ T5793]  ? reacquire_held_locks+0x104/0x190
[  111.689922][ T5793]  ? writeback_sb_inodes+0x463/0x19d0
[  111.689963][ T5793]  __writeback_single_inode+0x133/0x10e0
[  111.689996][ T5793]  ? do_raw_spin_unlock+0xf5/0x210
[  111.690041][ T5793]  writeback_sb_inodes+0x979/0x19d0
[  111.690069][ T5793]  ? __lock_acquire+0x6b5/0x2cf0
[  111.690123][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690167][ T5793]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  111.690194][ T5793]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.690290][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690320][ T5793]  ? rcu_is_watching+0x15/0xb0
[  111.690352][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690395][ T5793]  wb_writeback+0x445/0xb00
[  111.690430][ T5793]  ? queue_io+0x201/0x470
[  111.690471][ T5793]  ? __pfx_wb_writeback+0x10/0x10
[  111.690497][ T5793]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.690559][ T5793]  wb_workfn+0x3f8/0xf10
[  111.690597][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690627][ T5793]  ? look_up_lock_class+0x57/0x110
[  111.690683][ T5793]  ? __pfx_wb_workfn+0x10/0x10
[  111.690727][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690757][ T5793]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.690792][ T5793]  ? lock_acquire+0x106/0x350
[  111.690824][ T5793]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  111.690868][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690908][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690946][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.690980][ T5793]  ? process_scheduled_works+0xa70/0x1860
[  111.691007][ T5793]  ? process_scheduled_works+0xa70/0x1860
[  111.691037][ T5793]  process_scheduled_works+0xb5d/0x1860
[  111.691065][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.691140][ T5793]  ? __pfx_process_scheduled_works+0x10/0x10
[  111.691177][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.691207][ T5793]  ? assign_work+0x3d5/0x5e0
[  111.691242][ T5793]  worker_thread+0xa53/0xfc0
[  111.691273][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.691324][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.691368][ T5793]  kthread+0x388/0x470
[  111.691404][ T5793]  ? __pfx_worker_thread+0x10/0x10
[  111.691429][ T5793]  ? __pfx_kthread+0x10/0x10
[  111.691465][ T5793]  ret_from_fork+0x514/0xb70
[  111.691499][ T5793]  ? __pfx_ret_from_fork+0x10/0x10
[  111.691526][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.691556][ T5793]  ? __switch_to+0xc79/0x1410
[  111.691599][ T5793]  ? __pfx_kthread+0x10/0x10
[  111.691636][ T5793]  ret_from_fork_asm+0x1a/0x30
[  111.691693][ T5793]  </TASK>
[  112.174293][ T5793] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  112.271532][   T30] audit: type=1326 audit(1777252064.620:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.321042][   T30] audit: type=1326 audit(1777252064.620:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.345624][   T30] audit: type=1326 audit(1777252064.620:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.382230][   T30] audit: type=1326 audit(1777252064.620:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.408200][   T30] audit: type=1326 audit(1777252064.620:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.450624][   T30] audit: type=1326 audit(1777252064.620:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.564310][   T30] audit: type=1326 audit(1777252064.620:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.633837][   T30] audit: type=1326 audit(1777252064.620:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f033d39cdd9 code=0x7ffc0000
[  112.657503][ T6047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  113.026164][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.64'.
[  113.050711][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.64'.
[  113.848726][ T5350] usbhid 3-1:0.0: can't add hid device: -71
[  113.878036][ T5350] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  113.925918][ T5350] usb 3-1: USB disconnect, device number 4
[  113.945515][ T6046] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  113.971642][ T6046] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  114.084941][ T6046] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  114.119249][ T6046] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  114.138092][ T6046] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  114.242473][ T6046] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  114.323462][ T6046] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  114.330202][ T6046] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  114.373353][ T6046] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  114.407962][ T6076] netlink: 100 bytes leftover after parsing attributes in process `syz.2.70'.
[  114.436337][ T6046] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  114.465699][ T6046] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  114.485668][ T6046] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  114.498571][ T6046] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  114.506620][ T6046] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  114.515532][ T6046] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  114.525499][ T6046] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  114.541485][ T6046] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  114.613835][ T6046] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  114.622404][ T6080] fuse: Bad value for 'fd'
[  114.738623][ T6083] qrtr: Invalid version 164
[  114.863286][ T5747] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  115.213511][ T5350] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  116.010712][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout
[  116.160664][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout
[  116.400776][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout
[  116.481096][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout
[  116.563697][ T4935] Bluetooth: hci5: command 0x0c1a tx timeout
[  116.582510][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout
[  116.679339][ T5747] usb 2-1: Using ep0 maxpacket: 8
[  116.829146][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.845466][ T5747] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  116.854602][ T5747] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  116.872623][ T5747] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40
[  116.882275][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.890281][ T5747] usb 2-1: Product: syz
[  116.895662][ T5747] usb 2-1: Manufacturer: syz
[  116.902977][ T5747] usb 2-1: SerialNumber: syz
[  117.032411][ T5350] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  117.092577][ T5350] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.144557][ T5350] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  117.223226][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.380648][ T5747] usb 2-1: USB disconnect, device number 3
[  117.392840][ T6105] Bluetooth: MGMT ver 1.23
[  117.437786][ T6107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'.
[  117.517883][ T5350] usb 3-1: usb_control_msg returned -32
[  117.541065][ T5350] usbtmc 3-1:16.0: can't read capabilities
[  117.755241][ T6113] netlink: 100 bytes leftover after parsing attributes in process `syz.1.83'.
[  117.915926][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[  118.070627][ T5747] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  118.091333][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout
[  118.227374][ T6124] qrtr: Invalid version 164
[  118.238218][ T5747] usb 4-1: Using ep0 maxpacket: 8
[  118.250092][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.260408][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.276593][ T5747] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  118.296184][ T5747] usb 4-1: config 0 has no interface number 0
[  118.309705][ T5747] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  118.324669][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.375666][ T5747] usb 4-1: config 0 descriptor??
[  118.480580][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout
[  118.563427][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout
[  118.624037][ T5350] usb 4-1: USB disconnect, device number 3
[  118.642682][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout
[  118.643637][ T4935] Bluetooth: hci5: command 0x0c1a tx timeout
[  118.965927][ T6142] netlink: 100 bytes leftover after parsing attributes in process `syz.4.96'.
[  119.693582][ T5747] usb 3-1: USB disconnect, device number 5
[  120.190749][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout
[  120.322833][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout
[  120.578317][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout
[  120.641114][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout
[  120.721124][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout
[  120.727318][ T4935] Bluetooth: hci5: command 0x0c1a tx timeout
[  121.744828][ T6166] qrtr: Invalid version 164
[  121.817582][ T6168] No buffer was provided with the request
[  122.134487][ T6176] loop2: detected capacity change from 0 to 7
[  122.142624][ T6176] Dev loop2: unable to read RDB block 7
[  122.148294][ T6176]  loop2: AHDI p1 p2 p3
[  122.153122][ T6176] loop2: partition table partially beyond EOD, truncated
[  122.160467][ T6176] loop2: p1 start 1601398130 is beyond EOD, truncated
[  122.180708][ T6176] loop2: p2 start 1702059890 is beyond EOD, truncated
[  122.380119][ T6165] syz.0.101 (6165) used greatest stack depth: 17944 bytes left
[  122.772283][ T6189] loop2: detected capacity change from 0 to 40427
[  122.780083][ T5857] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  122.797270][ T6189] F2FS-fs (loop2): invalid crc value
[  122.865168][ T6189] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.877509][ T6189] F2FS-fs (loop2): Start checkpoint disabled!
[  122.894680][ T6189] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  122.902758][ T6189] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  122.916399][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  122.916415][   T30] audit: type=1800 audit(1777252076.300:32): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.111" name="file1" dev="loop2" ino=10 res=0 errno=0
[  122.951455][ T6195] fuse: Bad value for 'fd'
[  123.170774][ T5857] usb 4-1: device descriptor read/64, error -71
[  123.430788][ T5857] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  123.539533][ T6200] Can't find ip_set type hash:net,por
[  123.756083][   T30] audit: type=1326 audit(1777252076.610:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  123.970025][   T12] bio_check_eod: 176 callbacks suppressed
[  123.970046][   T12] kworker/u8:0: attempt to access beyond end of device
[  123.970046][   T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.994862][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  123.994908][   T12] Tainted: [L]=SOFTLOCKUP
[  123.994917][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  123.994933][   T12] Workqueue: writeback wb_workfn (flush-7:2)
[  123.994981][   T12] Call Trace:
[  123.994990][   T12]  <TASK>
[  123.995000][   T12]  dump_stack_lvl+0xe8/0x150
[  123.995031][   T12]  f2fs_stop_checkpoint+0x3c7/0x590
[  123.995080][   T12]  f2fs_write_end_io+0x1274/0x1740
[  123.995136][   T12]  __submit_merged_bio+0x256/0x6a0
[  123.995168][   T12]  __submit_merged_write_cond+0x3c9/0x4e0
[  123.995226][   T12]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  123.995281][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.995321][   T12]  f2fs_write_data_pages+0x287e/0x34f0
[  123.995351][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.995420][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.995497][   T12]  ? unwind_next_frame+0xa6/0x2550
[  123.995528][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.995564][   T12]  ? unwind_next_frame+0xa6/0x2550
[  123.995611][   T12]  ? unwind_next_frame+0xa6/0x2550
[  123.995642][   T12]  ? ret_from_fork_asm+0x1a/0x30
[  123.995673][   T12]  ? ret_from_fork_asm+0x1a/0x30
[  123.995721][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  123.995751][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.995783][   T12]  do_writepages+0x32e/0x550
[  123.995818][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.995846][   T12]  ? reacquire_held_locks+0x104/0x190
[  123.995878][   T12]  ? writeback_sb_inodes+0x463/0x19d0
[  123.995924][   T12]  __writeback_single_inode+0x133/0x10e0
[  123.995955][   T12]  ? do_raw_spin_unlock+0xf5/0x210
[  123.995997][   T12]  writeback_sb_inodes+0x979/0x19d0
[  123.996024][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  123.996083][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  123.996109][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.996190][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996219][   T12]  ? rcu_is_watching+0x15/0xb0
[  123.996251][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996290][   T12]  wb_writeback+0x445/0xb00
[  123.996324][   T12]  ? queue_io+0x201/0x470
[  123.996360][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  123.996386][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.996442][   T12]  wb_workfn+0x3f8/0xf10
[  123.996478][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996507][   T12]  ? look_up_lock_class+0x57/0x110
[  123.996557][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  123.996594][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996625][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996659][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996688][   T12]  ? do_raw_spin_unlock+0xf5/0x210
[  123.996732][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996765][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996801][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996834][   T12]  ? process_scheduled_works+0xa70/0x1860
[  123.996860][   T12]  ? process_scheduled_works+0xa70/0x1860
[  123.996888][   T12]  process_scheduled_works+0xb5d/0x1860
[  123.996920][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.996986][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  123.997020][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.997049][   T12]  ? assign_work+0x3d5/0x5e0
[  123.997081][   T12]  worker_thread+0xa53/0xfc0
[  123.997129][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.997170][   T12]  kthread+0x388/0x470
[  123.997204][   T12]  ? __pfx_worker_thread+0x10/0x10
[  123.997229][   T12]  ? __pfx_kthread+0x10/0x10
[  123.997264][   T12]  ret_from_fork+0x514/0xb70
[  123.997295][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  123.997322][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.997351][   T12]  ? __switch_to+0xc79/0x1410
[  123.997396][   T12]  ? __pfx_kthread+0x10/0x10
[  123.997431][   T12]  ret_from_fork_asm+0x1a/0x30
[  123.997483][   T12]  </TASK>
[  123.997909][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  124.010762][ T5857] usb 4-1: device descriptor read/64, error -71
[  124.330690][   T30] audit: type=1326 audit(1777252076.620:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  124.680619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  125.090578][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  125.451707][ T5857] usb usb4-port1: attempt power cycle
[  125.480697][ T5350] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  125.934218][   T30] audit: type=1326 audit(1777252076.620:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  126.211306][ T5857] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  126.225185][   T30] audit: type=1326 audit(1777252076.620:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  126.248021][   T30] audit: type=1326 audit(1777252076.620:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  126.271132][   T30] audit: type=1326 audit(1777252076.620:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  126.297813][   T30] audit: type=1326 audit(1777252076.620:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  126.329610][   T30] audit: type=1326 audit(1777252076.620:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  126.360575][   T30] audit: type=1326 audit(1777252076.630:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff82019cdd9 code=0x7ffc0000
[  126.388657][ T5857] usb 4-1: device descriptor read/8, error -71
[  126.491083][ T6216] qrtr: Invalid version 164
[  126.561217][ T5350] usb 2-1: device not accepting address 4, error -71
[  126.693267][ T4935] block nbd3: Receive control failed (result -107)
[  126.789667][ T6223] block nbd3: shutting down sockets
[  127.260245][ T6236] loop2: detected capacity change from 0 to 7
[  127.295024][ T6236] Dev loop2: unable to read RDB block 7
[  127.319025][ T6236]  loop2: AHDI p1 p2 p3
[  127.333696][ T6236] loop2: partition table partially beyond EOD, truncated
[  127.363734][ T6236] loop2: p1 start 1601398130 is beyond EOD, truncated
[  127.384280][ T6236] loop2: p2 start 1702059890 is beyond EOD, truncated
[  127.637309][ T6242] No buffer was provided with the request
[  128.084542][ T6246] loop3: detected capacity change from 0 to 40427
[  128.119388][ T6246] F2FS-fs (loop3): invalid crc value
[  128.183214][ T6246] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.194932][ T6246] F2FS-fs (loop3): Start checkpoint disabled!
[  128.308632][ T6246] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  128.316840][ T6246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  128.332305][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  128.332326][   T30] audit: type=1800 audit(1777252081.720:54): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.127" name="file1" dev="loop3" ino=10 res=0 errno=0
[  128.763014][   T30] audit: type=1326 audit(1777252082.020:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  128.937451][ T6252] Can't find ip_set type hash:net,por
[  129.191631][   T30] audit: type=1326 audit(1777252082.020:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  129.214315][   T30] audit: type=1326 audit(1777252082.020:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  129.241297][   T30] audit: type=1326 audit(1777252082.020:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  129.264710][   T30] audit: type=1326 audit(1777252082.030:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  129.287193][   T30] audit: type=1326 audit(1777252082.030:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  129.311298][   T30] audit: type=1326 audit(1777252082.030:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  129.424229][  T809] kworker/u8:6: attempt to access beyond end of device
[  129.424229][  T809] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.445986][  T809] CPU: 1 UID: 0 PID: 809 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.446024][  T809] Tainted: [L]=SOFTLOCKUP
[  129.446034][  T809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  129.446049][  T809] Workqueue: writeback wb_workfn (flush-7:3)
[  129.446099][  T809] Call Trace:
[  129.446109][  T809]  <TASK>
[  129.446119][  T809]  dump_stack_lvl+0xe8/0x150
[  129.446153][  T809]  f2fs_stop_checkpoint+0x3c7/0x590
[  129.446205][  T809]  f2fs_write_end_io+0x1274/0x1740
[  129.446267][  T809]  __submit_merged_bio+0x256/0x6a0
[  129.446305][  T809]  __submit_merged_write_cond+0x3c9/0x4e0
[  129.446362][  T809]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  129.446425][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.446468][  T809]  f2fs_write_data_pages+0x287e/0x34f0
[  129.446498][  T809]  ? f2fs_build_free_nids+0xdc/0x1810
[  129.446595][  T809]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.446647][  T809]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.446731][  T809]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.446786][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.446816][  T809]  ? __lock_acquire+0x6b5/0x2cf0
[  129.446867][  T809]  ? set_shrinker_bit+0x7c/0x350
[  129.446894][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.446938][  T809]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.446971][  T809]  do_writepages+0x32e/0x550
[  129.447009][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.447039][  T809]  ? reacquire_held_locks+0x104/0x190
[  129.447072][  T809]  ? writeback_sb_inodes+0x463/0x19d0
[  129.447113][  T809]  __writeback_single_inode+0x133/0x10e0
[  129.447146][  T809]  ? do_raw_spin_unlock+0xf5/0x210
[  129.447192][  T809]  writeback_sb_inodes+0x979/0x19d0
[  129.447220][  T809]  ? __lock_acquire+0x6b5/0x2cf0
[  129.447257][  T809]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.447323][  T809]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.447350][  T809]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.447448][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.447478][  T809]  ? rcu_is_watching+0x15/0xb0
[  129.447511][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.447554][  T809]  wb_writeback+0x445/0xb00
[  129.447590][  T809]  ? queue_io+0x201/0x470
[  129.447630][  T809]  ? __pfx_wb_writeback+0x10/0x10
[  129.447656][  T809]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.447718][  T809]  wb_workfn+0x3f8/0xf10
[  129.447755][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.447784][  T809]  ? look_up_lock_class+0x57/0x110
[  129.447840][  T809]  ? __pfx_wb_workfn+0x10/0x10
[  129.447876][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.447912][  T809]  ? lock_acquire+0x106/0x350
[  129.447944][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.447974][  T809]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.448013][  T809]  ? lock_acquire+0x106/0x350
[  129.448045][  T809]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  129.448088][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448122][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448160][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448194][  T809]  ? process_scheduled_works+0xa70/0x1860
[  129.448221][  T809]  ? process_scheduled_works+0xa70/0x1860
[  129.448252][  T809]  process_scheduled_works+0xb5d/0x1860
[  129.448280][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448355][  T809]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.448392][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448422][  T809]  ? assign_work+0x3d5/0x5e0
[  129.448457][  T809]  worker_thread+0xa53/0xfc0
[  129.448488][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448540][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448584][  T809]  kthread+0x388/0x470
[  129.448620][  T809]  ? __pfx_worker_thread+0x10/0x10
[  129.448645][  T809]  ? __pfx_kthread+0x10/0x10
[  129.448682][  T809]  ret_from_fork+0x514/0xb70
[  129.448716][  T809]  ? __pfx_ret_from_fork+0x10/0x10
[  129.448744][  T809]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.448774][  T809]  ? __switch_to+0xc79/0x1410
[  129.448818][  T809]  ? __pfx_kthread+0x10/0x10
[  129.448855][  T809]  ret_from_fork_asm+0x1a/0x30
[  129.448919][  T809]  </TASK>
[  129.449228][  T809] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  129.491287][   T30] audit: type=1326 audit(1777252082.030:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  130.189091][   T30] audit: type=1326 audit(1777252082.030:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feae319cdd9 code=0x7ffc0000
[  130.384032][ T6263] fuse: Bad value for 'fd'
[  130.410867][ T5350] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  130.491901][ T6268] qrtr: Invalid version 164
[  130.577662][ T5350] usb 3-1: device descriptor read/64, error -71
[  130.683088][ T5738] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  130.830623][ T5350] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  130.865165][ T5738] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  130.903255][ T5738] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.956634][ T5738] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  130.984051][ T5350] usb 3-1: device descriptor read/64, error -71
[  130.999881][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.113380][ T5350] usb usb3-port1: attempt power cycle
[  131.331950][ T5738] usb 5-1: usb_control_msg returned -32
[  131.362128][ T5738] usbtmc 5-1:16.0: can't read capabilities
[  131.481734][ T5350] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  131.521507][ T5350] usb 3-1: device descriptor read/8, error -71
[  131.831553][ T6286] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.454389][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  132.473996][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  132.510798][ T5350] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  132.542571][ T5350] usb 3-1: device descriptor read/8, error -71
[  132.654607][ T5350] usb usb3-port1: unable to enumerate USB device
[  132.894106][ T6295] No buffer was provided with the request
[  133.835209][ T5857] usb 5-1: USB disconnect, device number 2
[  134.621982][ T6311] qrtr: Invalid version 164
[  137.070910][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  139.860012][ T6342] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  140.528013][ T6341] fuse: Bad value for 'fd'
[  141.123752][ T6351] No buffer was provided with the request
[  142.990989][ T6360] qrtr: Invalid version 164
[  143.014538][ T5738] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  143.040832][   T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  143.300694][   T29] usb 1-1: Using ep0 maxpacket: 8
[  143.377988][   T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  143.430133][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.542356][   T29] usb 1-1: config 0 has no interface number 0
[  143.562246][ T5738] usb 3-1: device descriptor read/64, error -71
[  143.602053][   T29] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  143.749929][   T29] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  143.794283][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.189265][   T29] usb 1-1: config 0 descriptor??
[  144.255748][   T29] iowarrior 1-1:0.1: no interrupt-in endpoint found
[  144.560610][   T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  144.622883][ T5350] usb 1-1: USB disconnect, device number 3
[  144.763439][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.842894][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.882855][   T29] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  144.914161][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.957830][   T29] usb 4-1: config 0 descriptor??
[  145.320354][ T6392] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  146.020859][   T29] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  146.028346][   T29] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  146.045257][   T29] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0001/input/input6
[  146.482545][ T6400] No buffer was provided with the request
[  147.720859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  147.943926][   T29] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  147.966566][   T29] usb 4-1: USB disconnect, device number 8
[  149.485118][ T6421] 9pnet_virtio: no channels available for device syz
[  152.684581][ T6423] tipc: Failed to remove unknown binding: 66,1,1/0:496415709/496415711
[  152.751230][ T6417] fido_id[6417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  152.791307][ T5804] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  152.822066][ T6428] tipc: Failed to remove unknown binding: 66,1,1/0:496415709/496415711
[  153.011337][ T5804] usb 3-1: Using ep0 maxpacket: 8
[  153.022972][ T6433] program syz.4.183 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.052393][ T5804] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  153.119559][ T5804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.177670][ T5804] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  153.207311][ T6436] netlink: 'syz.5.184': attribute type 2 has an invalid length.
[  153.235721][ T5804] usb 3-1: config 0 has no interface number 0
[  153.241129][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.184'.
[  153.253917][ T5804] usb 3-1: config 0 has no interface number 1
[  153.288579][ T5804] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  153.364042][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.404973][ T5804] usb 3-1: config 0 descriptor??
[  153.433468][ T5804] usb 3-1: unknown number of interfaces: 2
[  153.611230][   T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  154.448401][ T5804] usb 3-1: USB disconnect, device number 12
[  154.490822][   T29] usb 4-1: Using ep0 maxpacket: 8
[  154.528418][   T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  154.564962][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.591553][   T29] usb 4-1: config 0 has no interface number 0
[  154.598117][   T29] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  154.773839][   T29] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  154.783519][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.801672][   T29] usb 4-1: config 0 descriptor??
[  154.837574][   T29] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  155.633038][   T29] usb 4-1: USB disconnect, device number 9
[  156.043011][ T5854] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  156.213813][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.248452][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  156.419473][ T5854] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  156.431034][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.459082][ T5854] usb 5-1: config 0 descriptor??
[  157.194037][ T5854] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  159.241271][ T5804] usb 5-1: USB disconnect, device number 3
[  159.380853][ T6477] fuse: Bad value for 'fd'
[  159.690649][ T5350] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  159.961412][ T5854] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  160.171558][ T5350] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  160.294966][ T5350] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  160.384270][ T5854] usb 3-1: Using ep0 maxpacket: 8
[  160.501554][ T5350] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  160.558146][ T5854] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  160.670679][ T5350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.680370][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.703472][ T5854] usb 3-1: Product: syz
[  160.718420][ T5854] usb 3-1: Manufacturer: syz
[  160.763627][ T5854] usb 3-1: SerialNumber: syz
[  160.800083][ T5854] usb 3-1: config 0 descriptor??
[  160.836299][ T5854] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  160.858206][ T5854] pctv452e: pctv452e_power_ctrl: 1
[  160.858206][ T5854] 
[  160.880381][ T5854] usb 3-1: selecting invalid altsetting 3
[  161.015461][ T5854] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  161.015461][ T5854] 
[  161.028907][ T5854] dvb-usb: bulk message failed: -22 (5/0)
[  161.052637][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  161.063286][ T5854] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  161.073566][ T5854] usb 3-1: media controller created
[  161.079949][ T5854] dvb-usb: bulk message failed: -22 (8/0)
[  161.370867][ T5350] usb 4-1: usb_control_msg returned -32
[  161.393201][ T5854] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  161.994619][ T5350] usbtmc 4-1:16.0: can't read capabilities
[  162.001106][ T5854] dvb-usb: MAC address reading failed.
[  163.020902][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.455959][ T5854] DVB: Unable to find symbol stb0899_attach()
[  163.482595][ T5854] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  164.432111][   T29] usb 4-1: USB disconnect, device number 10
[  165.510676][ T5854] rc_core: IR keymap rc-tt-1500 not found
[  165.516439][ T5854] Registered IR keymap rc-empty
[  165.526318][ T5854] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  166.129027][ T5854] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7
[  166.157291][ T5854] dvb-usb: schedule remote query interval to 100 msecs.
[  166.190849][ T5854] pctv452e: pctv452e_power_ctrl: 0
[  166.190849][ T5854] 
[  166.225087][ T5854] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  166.283868][ T5854] usb 3-1: USB disconnect, device number 13
[  166.568517][ T5854] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  167.886510][ T6532] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  167.945648][ T6532] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  168.273622][ T6532] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  168.321295][ T6532] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  168.399260][ T6532] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  168.494002][ T6532] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  169.020956][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  169.120706][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout
[  169.310964][ T5854] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  169.507297][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61
[  169.674203][ T5854] usb 1-1: can't read configurations, error -61
[  170.000993][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout
[  170.120686][ T5854] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  170.320723][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout
[  170.345741][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61
[  170.376376][ T5854] usb 1-1: can't read configurations, error -61
[  170.396685][ T5854] usb usb1-port1: attempt power cycle
[  170.410698][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout
[  170.484817][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout
[  170.570605][ T4935] Bluetooth: hci5: command 0x0c1a tx timeout
[  170.950885][ T5854] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  170.985818][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61
[  171.000639][ T5854] usb 1-1: can't read configurations, error -61
[  171.185383][ T5854] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  171.660460][ T5854] usb 1-1: unable to read config index 0 descriptor/start: -61
[  171.726105][ T5854] usb 1-1: can't read configurations, error -61
[  171.779226][ T5854] usb usb1-port1: unable to enumerate USB device
[  174.411035][ T6610] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  174.421612][ T6610] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  174.429037][ T6610] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  174.500373][ T6610] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  174.512177][ T6610] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  174.654744][ T6610] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  175.444964][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout
[  175.903502][ T6646] fuse: Unknown parameter 'group_i00000000000000000000'
[  176.149339][ T6637] syzkaller0: entered promiscuous mode
[  176.164233][ T6637] syzkaller0: entered allmulticast mode
[  176.293260][ T5739] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  176.464457][ T5739] usb 5-1: unable to read config index 0 descriptor/start: -61
[  176.481559][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout
[  176.482487][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout
[  176.503353][ T5739] usb 5-1: can't read configurations, error -61
[  176.562110][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout
[  176.562125][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout
[  176.652848][ T5739] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  176.723507][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout
[  176.827814][ T5739] usb 5-1: unable to read config index 0 descriptor/start: -61
[  176.851385][ T5739] usb 5-1: can't read configurations, error -61
[  176.876755][ T5739] usb usb5-port1: attempt power cycle
[  177.230644][ T5739] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  177.274344][ T5739] usb 5-1: unable to read config index 0 descriptor/start: -61
[  177.297155][ T5739] usb 5-1: can't read configurations, error -61
[  177.585476][ T5739] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  177.638060][ T5739] usb 5-1: unable to read config index 0 descriptor/start: -61
[  177.668100][ T5739] usb 5-1: can't read configurations, error -61
[  177.681021][ T5739] usb usb5-port1: unable to enumerate USB device
[  180.470837][ T5739] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  180.592362][   T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  180.650624][ T5739] usb 2-1: Using ep0 maxpacket: 8
[  180.658515][ T5739] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  180.669689][ T5739] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  180.680305][ T5739] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  180.690961][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.750718][   T29] usb 6-1: Using ep0 maxpacket: 8
[  180.773258][   T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  180.804242][   T29] usb 6-1: config 0 has no interface number 0
[  180.825045][   T29] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  180.846273][   T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  180.867129][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.894451][   T29] usb 6-1: config 0 descriptor??
[  180.925154][   T29] iowarrior 6-1:0.1: no interrupt-in endpoint found
[  181.127374][ T5739] usb 6-1: USB disconnect, device number 3
[  181.257175][ T6728] qnx6: unable to read the first superblock
[  183.056094][ T5739] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  183.256731][ T5739] usb 4-1: unable to read config index 0 descriptor/start: -61
[  183.297744][ T5739] usb 4-1: can't read configurations, error -61
[  183.309288][ T5804] usb 2-1: USB disconnect, device number 6
[  183.736159][ T5739] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  183.906027][ T5739] usb 4-1: unable to read config index 0 descriptor/start: -61
[  183.964948][ T5739] usb 4-1: can't read configurations, error -61
[  184.039021][ T5739] usb usb4-port1: attempt power cycle
[  184.100132][ T6774] loop5: detected capacity change from 0 to 512
[  184.307954][ T6774] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.284: inode has both inline data and extents flags
[  184.321397][ T6774] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  184.323453][ T6774] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.284: couldn't read orphan inode 15 (err -117)
[  184.332855][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  184.332951][    C0] EXT4-fs (loop5): initial error at time 1777252137: ext4_orphan_get:1397: inode 15
[  184.332993][    C0] EXT4-fs (loop5): last error at time 1777252137: ext4_orphan_get:1397: inode 15
[  184.370432][ T6774] loop5: lost filesystem error report for type 5 error -117
[  184.423318][ T6774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.100088][ T6774] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  185.110698][ T5739] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  185.185302][ T5739] usb 4-1: unable to read config index 0 descriptor/start: -61
[  185.209802][ T5739] usb 4-1: can't read configurations, error -61
[  185.374379][ T5739] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  185.726338][ T5739] usb 4-1: unable to read config index 0 descriptor/start: -61
[  185.860713][ T5739] usb 4-1: can't read configurations, error -61
[  185.886994][ T5739] usb usb4-port1: unable to enumerate USB device
[  186.207419][ T6798] overlayfs: missing 'lowerdir'
[  186.369137][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.472609][   T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  186.517870][ T6809] syz.4.297 uses obsolete (PF_INET,SOCK_PACKET)
[  186.771660][   T43] usb 1-1: Using ep0 maxpacket: 8
[  186.848983][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'.
[  187.532496][   T43] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  187.582749][   T43] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  187.627661][   T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  187.824143][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.942097][ T6823] qnx6: unable to read the first superblock
[  188.460718][   T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  188.654430][   T43] usb 2-1: unable to read config index 0 descriptor/start: -61
[  188.673407][   T43] usb 2-1: can't read configurations, error -61
[  188.820624][   T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  188.995096][   T43] usb 2-1: unable to read config index 0 descriptor/start: -61
[  189.003556][   T43] usb 2-1: can't read configurations, error -61
[  189.013026][   T43] usb usb2-port1: attempt power cycle
[  189.313618][ T6834] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  189.330874][ T6834] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  189.349735][ T6834] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  189.373355][ T6834] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  189.383973][ T6834] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  189.391597][   T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  189.414692][ T6834] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  189.435266][ T6841] loop5: detected capacity change from 0 to 512
[  189.452611][ T6841] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.308: inode has both inline data and extents flags
[  189.465773][ T6841] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  189.470600][   T43] usb 2-1: unable to read config index 0 descriptor/start: -61
[  189.487311][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  189.487334][    C1] EXT4-fs (loop5): initial error at time 1777252142: ext4_orphan_get:1397: inode 15
[  189.487364][    C1] EXT4-fs (loop5): last error at time 1777252142: ext4_orphan_get:1397: inode 15
[  189.513576][ T6841] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.308: couldn't read orphan inode 15 (err -117)
[  189.525711][ T6841] loop5: lost filesystem error report for type 5 error -117
[  189.528752][ T6841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.730865][ T6847] fuse: Bad value for 'fd'
[  189.750681][ T5350] usb 1-1: USB disconnect, device number 8
[  189.789715][   T43] usb 2-1: can't read configurations, error -61
[  189.908389][ T6853] overlayfs: missing 'lowerdir'
[  189.945845][   T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  190.209696][   T43] usb 2-1: unable to read config index 0 descriptor/start: -61
[  190.640707][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout
[  190.959855][  T987] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  190.967854][   T43] usb 2-1: can't read configurations, error -61
[  190.978108][   T43] usb usb2-port1: unable to enumerate USB device
[  190.982054][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.127679][  T987] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.138911][  T987] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.361181][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout
[  191.367732][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout
[  191.442181][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout
[  191.449451][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout
[  191.457731][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout
[  191.789777][ T6876] fuse: Bad value for 'fd'
[  191.924297][  T987] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  191.938127][  T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.523877][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  193.912290][ T5350] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  193.919847][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  193.939152][  T987] usb 5-1: usb_control_msg returned -71
[  194.024212][  T987] usbtmc 5-1:16.0: can't read capabilities
[  194.113594][ T5350] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.124344][ T5350] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.163742][ T5350] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  194.184899][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.229731][  T987] usb 5-1: USB disconnect, device number 8
[  194.394523][   T29] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  194.445838][ T5350] usb 1-1: usb_control_msg returned -32
[  194.454071][ T6894] overlayfs: missing 'lowerdir'
[  194.471239][ T5350] usbtmc 1-1:16.0: can't read capabilities
[  194.554869][   T29] usb 4-1: Using ep0 maxpacket: 8
[  194.591889][   T29] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  194.621287][   T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  194.640849][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.160697][  T987] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  195.665267][  T987] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  195.689049][  T987] usb 2-1: config 0 interface 0 has no altsetting 0
[  195.723589][  T987] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  195.766857][  T987] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  195.808840][  T987] usb 2-1: Product: syz
[  195.823030][  T987] usb 2-1: Manufacturer: syz
[  195.829073][  T987] usb 2-1: SerialNumber: syz
[  195.873071][  T987] usb 2-1: config 0 descriptor??
[  196.148639][   T29] usb 1-1: USB disconnect, device number 9
[  196.611852][ T6916] qnx6: unable to read the first superblock
[  197.448114][ T5350] usb 4-1: USB disconnect, device number 15
[  197.902032][  T987] usb 2-1: selecting invalid altsetting 0
[  197.919811][ T6925] fuse: Bad value for 'fd'
[  197.928722][ T6914] No buffer was provided with the request
[  199.555974][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  200.030611][   T29] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  200.183458][   T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.220285][   T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.273757][   T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.306594][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.626897][ T6942] overlayfs: missing 'lowerdir'
[  200.735976][   T29] usb 6-1: usb_control_msg returned -32
[  200.767092][   T29] usbtmc 6-1:16.0: can't read capabilities
[  200.824914][  T987] usb 2-1: USB disconnect, device number 11
[  201.094528][ T6955] Set syz1 is full, maxelem 14 reached
[  201.135521][ T6952] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  201.141997][ T6952] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  201.148188][ T6952] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  201.160994][ T6952] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  201.167915][ T6952] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  201.177449][ T6952] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  201.190607][   T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  201.714286][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  201.763394][   T43] usb 5-1: Using ep0 maxpacket: 32
[  201.853038][ T6960] nbd0: detected capacity change from 0 to 128
[  201.945783][ T5926] 
[  201.948148][ T5926] ======================================================
[  201.955152][ T5926] WARNING: possible circular locking dependency detected
[  201.962163][ T5926] syzkaller #0 Tainted: G             L     
[  201.968130][ T5926] ------------------------------------------------------
[  201.975136][ T5926] udevd/5926 is trying to acquire lock:
[  201.980670][ T5926] ffff888056541c68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100
[  201.989741][ T5926] 
[  201.989741][ T5926] but task is already holding lock:
[  201.997094][ T5926] ffff8880513451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  202.005729][ T5926] 
[  202.005729][ T5926] which lock already depends on the new lock.
[  202.005729][ T5926] 
[  202.016123][ T5926] 
[  202.016123][ T5926] the existing dependency chain (in reverse order) is:
[  202.025134][ T5926] 
[  202.025134][ T5926] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  202.032362][ T5926]        __mutex_lock+0x1a3/0x1550
[  202.037519][ T5926]        nbd_queue_rq+0xc6/0x1100
[  202.042551][ T5926]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  202.048892][ T5926]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  202.055759][ T5926]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  202.062288][ T5926]        blk_mq_run_hw_queue+0x348/0x4f0
[  202.067939][ T5926]        blk_mq_dispatch_list+0xd16/0xe10
[  202.073688][ T5926]        blk_mq_flush_plug_list+0x48d/0x570
[  202.079600][ T5926]        __blk_flush_plug+0x3ed/0x4d0
[  202.084998][ T5926]        __submit_bio+0x28d/0x580
[  202.090052][ T5926]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  202.096223][ T5926]        block_read_full_folio+0x7b7/0x830
[  202.102037][ T5926]        filemap_read_folio+0x137/0x3b0
[  202.107597][ T5926]        do_read_cache_folio+0x358/0x590
[  202.113251][ T5926]        read_part_sector+0xb6/0x2b0
[  202.118560][ T5926]        adfspart_check_ICS+0xb1/0x960
[  202.124038][ T5926]        bdev_disk_changed+0x817/0x1770
[  202.129597][ T5926]        blkdev_get_whole+0x380/0x510
[  202.134990][ T5926]        bdev_open+0x31e/0xd30
[  202.139768][ T5926]        blkdev_open+0x470/0x610
[  202.144708][ T5926]        do_dentry_open+0x785/0x14e0
[  202.150005][ T5926]        vfs_open+0x3b/0x340
[  202.154601][ T5926]        path_openat+0x2e08/0x3860
[  202.159723][ T5926]        do_file_open+0x23e/0x4a0
[  202.164764][ T5926]        do_sys_openat2+0x113/0x200
[  202.169974][ T5926]        __x64_sys_openat+0x138/0x170
[  202.175365][ T5926]        do_syscall_64+0x15f/0xf80
[  202.180485][ T5926]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.186910][ T5926] 
[  202.186910][ T5926] -> #5 (set->srcu){.+.+}-{0:0}:
[  202.194064][ T5926]        __synchronize_srcu+0xca/0x300
[  202.199532][ T5926]        elevator_switch+0x1e8/0x7a0
[  202.204865][ T5926]        elevator_change+0x2cc/0x450
[  202.210166][ T5926]        elevator_set_default+0x36c/0x430
[  202.215898][ T5926]        blk_register_queue+0x3e9/0x4e0
[  202.221457][ T5926]        __add_disk+0x677/0xd50
[  202.226308][ T5926]        add_disk_fwnode+0xfb/0x480
[  202.231503][ T5926]        nbd_dev_add+0x72c/0xb50
[  202.236437][ T5926]        nbd_init+0x168/0x1f0
[  202.241127][ T5926]        do_one_initcall+0x250/0x870
[  202.246416][ T5926]        do_initcall_level+0x104/0x190
[  202.251879][ T5926]        do_initcalls+0x59/0xa0
[  202.256731][ T5926]        kernel_init_freeable+0x2a6/0x3e0
[  202.262455][ T5926]        kernel_init+0x1d/0x1d0
[  202.267313][ T5926]        ret_from_fork+0x514/0xb70
[  202.272423][ T5926]        ret_from_fork_asm+0x1a/0x30
[  202.277714][ T5926] 
[  202.277714][ T5926] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  202.285544][ T5926]        __mutex_lock+0x1a3/0x1550
[  202.290659][ T5926]        elevator_change+0x1b3/0x450
[  202.295952][ T5926]        elevator_set_none+0xb5/0x140
[  202.301336][ T5926]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  202.307663][ T5926]        nbd_start_device+0x17f/0xb10
[  202.313033][ T5926]        nbd_genl_connect+0x165b/0x1cf0
[  202.318592][ T5926]        genl_family_rcv_msg_doit+0x22a/0x330
[  202.324673][ T5926]        genl_rcv_msg+0x61c/0x7a0
[  202.329707][ T5926]        netlink_rcv_skb+0x232/0x4b0
[  202.335020][ T5926]        genl_rcv+0x28/0x40
[  202.339533][ T5926]        netlink_unicast+0x75c/0x8e0
[  202.344816][ T5926]        netlink_sendmsg+0x813/0xb40
[  202.350103][ T5926]        ____sys_sendmsg+0x972/0x9f0
[  202.355390][ T5926]        ___sys_sendmsg+0x2a5/0x360
[  202.360593][ T5926]        __x64_sys_sendmsg+0x1bd/0x2a0
[  202.366058][ T5926]        do_syscall_64+0x15f/0xf80
[  202.371172][ T5926]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.377587][ T5926] 
[  202.377587][ T5926] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  202.386212][ T5926]        blk_alloc_queue+0x546/0x680
[  202.391503][ T5926]        __blk_mq_alloc_disk+0x197/0x390
[  202.397149][ T5926]        nbd_dev_add+0x499/0xb50
[  202.402083][ T5926]        nbd_init+0x168/0x1f0
[  202.406767][ T5926]        do_one_initcall+0x250/0x870
[  202.412060][ T5926]        do_initcall_level+0x104/0x190
[  202.417524][ T5926]        do_initcalls+0x59/0xa0
[  202.422375][ T5926]        kernel_init_freeable+0x2a6/0x3e0
[  202.428094][ T5926]        kernel_init+0x1d/0x1d0
[  202.432953][ T5926]        ret_from_fork+0x514/0xb70
[  202.438070][ T5926]        ret_from_fork_asm+0x1a/0x30
[  202.443362][ T5926] 
[  202.443362][ T5926] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  202.450587][ T5926]        fs_reclaim_acquire+0x71/0x100
[  202.456064][ T5926]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  202.462400][ T5926]        __alloc_skb+0x1d0/0x7d0
[  202.467338][ T5926]        tcp_stream_alloc_skb+0x3f/0x580
[  202.472994][ T5926]        tcp_sendmsg_locked+0x1345/0x5360
[  202.478727][ T5926]        tcp_sendmsg+0x2f/0x50
[  202.483505][ T5926]        sock_write_iter+0x406/0x4f0
[  202.488802][ T5926]        vfs_write+0x61d/0xb90
[  202.493575][ T5926]        ksys_write+0x150/0x270
[  202.498437][ T5926]        do_syscall_64+0x15f/0xf80
[  202.503551][ T5926]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.509967][ T5926] 
[  202.509967][ T5926] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  202.517632][ T5926]        lock_sock_nested+0x41/0x100
[  202.522932][ T5926]        inet_shutdown+0x6a/0x390
[  202.527971][ T5926]        nbd_mark_nsock_dead+0x2e9/0x560
[  202.533611][ T5926]        recv_work+0x1c2e/0x1d40
[  202.538548][ T5926]        process_scheduled_works+0xb5d/0x1860
[  202.544614][ T5926]        worker_thread+0xa53/0xfc0
[  202.549727][ T5926]        kthread+0x388/0x470
[  202.554330][ T5926]        ret_from_fork+0x514/0xb70
[  202.559445][ T5926]        ret_from_fork_asm+0x1a/0x30
[  202.564738][ T5926] 
[  202.564738][ T5926] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  202.572399][ T5926]        __lock_acquire+0x15a5/0x2cf0
[  202.577777][ T5926]        lock_acquire+0x106/0x350
[  202.582806][ T5926]        __mutex_lock+0x1a3/0x1550
[  202.587929][ T5926]        nbd_queue_rq+0x37b/0x1100
[  202.593044][ T5926]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  202.599127][ T5926]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  202.605996][ T5926]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  202.612516][ T5926]        blk_mq_run_hw_queue+0x348/0x4f0
[  202.618159][ T5926]        blk_mq_dispatch_list+0xd16/0xe10
[  202.623891][ T5926]        blk_mq_flush_plug_list+0x48d/0x570
[  202.629799][ T5926]        __blk_flush_plug+0x3ed/0x4d0
[  202.635185][ T5926]        __submit_bio+0x28d/0x580
[  202.640226][ T5926]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  202.646402][ T5926]        block_read_full_folio+0x7b7/0x830
[  202.652215][ T5926]        filemap_read_folio+0x137/0x3b0
[  202.657776][ T5926]        do_read_cache_folio+0x358/0x590
[  202.663424][ T5926]        read_part_sector+0xb6/0x2b0
[  202.668721][ T5926]        adfspart_check_ICS+0xb1/0x960
[  202.674197][ T5926]        bdev_disk_changed+0x817/0x1770
[  202.679754][ T5926]        blkdev_get_whole+0x380/0x510
[  202.685140][ T5926]        bdev_open+0x31e/0xd30
[  202.689913][ T5926]        blkdev_open+0x470/0x610
[  202.694847][ T5926]        do_dentry_open+0x785/0x14e0
[  202.700134][ T5926]        vfs_open+0x3b/0x340
[  202.704731][ T5926]        path_openat+0x2e08/0x3860
[  202.709856][ T5926]        do_file_open+0x23e/0x4a0
[  202.714897][ T5926]        do_sys_openat2+0x113/0x200
[  202.720104][ T5926]        __x64_sys_openat+0x138/0x170
[  202.725485][ T5926]        do_syscall_64+0x15f/0xf80
[  202.730603][ T5926]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.737019][ T5926] 
[  202.737019][ T5926] other info that might help us debug this:
[  202.737019][ T5926] 
[  202.747241][ T5926] Chain exists of:
[  202.747241][ T5926]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  202.747241][ T5926] 
[  202.759354][ T5926]  Possible unsafe locking scenario:
[  202.759354][ T5926] 
[  202.766801][ T5926]        CPU0                    CPU1
[  202.772164][ T5926]        ----                    ----
[  202.777522][ T5926]   lock(&cmd->lock);
[  202.781509][ T5926]                                lock(set->srcu);
[  202.787933][ T5926]                                lock(&cmd->lock);
[  202.794450][ T5926]   lock(&nsock->tx_lock);
[  202.798873][ T5926] 
[  202.798873][ T5926]  *** DEADLOCK ***
[  202.798873][ T5926] 
[  202.807011][ T5926] 3 locks held by udevd/5926:
[  202.811685][ T5926]  #0: ffff8880263e4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  202.820960][ T5926]  #1: ffff888025737e18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  202.830500][ T5926]  #2: ffff8880513451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  202.839503][ T5926] 
[  202.839503][ T5926] stack backtrace:
[  202.845391][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.845425][ T5926] Tainted: [L]=SOFTLOCKUP
[  202.845434][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  202.845449][ T5926] Call Trace:
[  202.845461][ T5926]  <TASK>
[  202.845472][ T5926]  dump_stack_lvl+0xe8/0x150
[  202.845503][ T5926]  print_circular_bug+0x2e1/0x300
[  202.845541][ T5926]  check_noncircular+0x12e/0x150
[  202.845580][ T5926]  __lock_acquire+0x15a5/0x2cf0
[  202.845612][ T5926]  ? irqentry_exit+0x218/0x730
[  202.845641][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.845671][ T5926]  ? lockdep_hardirqs_on+0x7a/0x110
[  202.845698][ T5926]  ? __pfx___schedule+0x10/0x10
[  202.845722][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.845758][ T5926]  ? nbd_queue_rq+0x37b/0x1100
[  202.845782][ T5926]  lock_acquire+0x106/0x350
[  202.845808][ T5926]  ? nbd_queue_rq+0x37b/0x1100
[  202.845836][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.845870][ T5926]  __mutex_lock+0x1a3/0x1550
[  202.845899][ T5926]  ? nbd_queue_rq+0x37b/0x1100
[  202.845922][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.845951][ T5926]  ? update_curr_dl_se+0x67d/0x1260
[  202.845990][ T5926]  ? nbd_queue_rq+0x37b/0x1100
[  202.846016][ T5926]  ? __pfx___mutex_lock+0x10/0x10
[  202.846044][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846078][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846107][ T5926]  ? trace_sched_exit_tp+0x3a/0x130
[  202.846132][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846164][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846197][ T5926]  nbd_queue_rq+0x37b/0x1100
[  202.846229][ T5926]  ? __pfx_nbd_queue_rq+0x10/0x10
[  202.846254][ T5926]  ? irqentry_exit+0x218/0x730
[  202.846281][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846310][ T5926]  ? lockdep_hardirqs_on+0x7a/0x110
[  202.846337][ T5926]  ? __pfx___schedule+0x10/0x10
[  202.846360][ T5926]  ? rcu_is_watching+0x15/0xb0
[  202.846395][ T5926]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  202.846433][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846473][ T5926]  ? sbitmap_get+0x229/0x390
[  202.846514][ T5926]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  202.846551][ T5926]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  202.846591][ T5926]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  202.846644][ T5926]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  202.846684][ T5926]  ? blk_mq_hw_queue_need_run+0x13c/0x680
[  202.846725][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846761][ T5926]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  202.846802][ T5926]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  202.846835][ T5926]  blk_mq_run_hw_queue+0x348/0x4f0
[  202.846871][ T5926]  blk_mq_dispatch_list+0xd16/0xe10
[  202.846908][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.846938][ T5926]  ? bdev_count_inflight+0x1cf/0x210
[  202.846964][ T5926]  ? blk_mq_dispatch_list+0x1b0/0xe10
[  202.847012][ T5926]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  202.847050][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.847081][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.847111][ T5926]  ? rcu_is_watching+0x15/0xb0
[  202.847143][ T5926]  blk_mq_flush_plug_list+0x48d/0x570
[  202.847180][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.847210][ T5926]  ? blk_add_rq_to_plug+0x300/0x450
[  202.847246][ T5926]  ? blk_mq_submit_bio+0x1acf/0x28e0
[  202.847284][ T5926]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  202.847328][ T5926]  __blk_flush_plug+0x3ed/0x4d0
[  202.847370][ T5926]  ? __pfx___blk_flush_plug+0x10/0x10
[  202.847413][ T5926]  __submit_bio+0x28d/0x580
[  202.847454][ T5926]  ? __pfx___submit_bio+0x10/0x10
[  202.847502][ T5926]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  202.847538][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.847571][ T5926]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  202.847610][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.847648][ T5926]  block_read_full_folio+0x7b7/0x830
[  202.847680][ T5926]  ? __pfx_blkdev_get_block+0x10/0x10
[  202.847706][ T5926]  filemap_read_folio+0x137/0x3b0
[  202.847743][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.847773][ T5926]  ? __pfx_blkdev_read_folio+0x10/0x10
[  202.847813][ T5926]  ? __pfx_filemap_read_folio+0x10/0x10
[  202.847849][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.847879][ T5926]  ? filemap_add_folio+0x356/0x530
[  202.847913][ T5926]  do_read_cache_folio+0x358/0x590
[  202.847952][ T5926]  ? __pfx_blkdev_read_folio+0x10/0x10
[  202.848001][ T5926]  read_part_sector+0xb6/0x2b0
[  202.848039][ T5926]  adfspart_check_ICS+0xb1/0x960
[  202.848077][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.848107][ T5926]  ? seq_buf_printf+0x212/0x2d0
[  202.848135][ T5926]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  202.848174][ T5926]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  202.848210][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.848249][ T5926]  bdev_disk_changed+0x817/0x1770
[  202.848298][ T5926]  ? __pfx_bdev_disk_changed+0x10/0x10
[  202.848340][ T5926]  blkdev_get_whole+0x380/0x510
[  202.848381][ T5926]  bdev_open+0x31e/0xd30
[  202.848423][ T5926]  blkdev_open+0x470/0x610
[  202.848449][ T5926]  ? __pfx_blkdev_open+0x10/0x10
[  202.848471][ T5926]  do_dentry_open+0x785/0x14e0
[  202.848507][ T5926]  vfs_open+0x3b/0x340
[  202.848533][ T5926]  ? path_openat+0x2df0/0x3860
[  202.848571][ T5926]  path_openat+0x2e08/0x3860
[  202.848614][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.848646][ T5926]  ? __pfx_stack_trace_save+0x10/0x10
[  202.848687][ T5926]  ? stack_depot_save_flags+0x33/0x810
[  202.848725][ T5926]  ? __pfx_path_openat+0x10/0x10
[  202.848759][ T5926]  ? __x64_sys_openat+0x138/0x170
[  202.848792][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.848821][ T5926]  ? __lock_acquire+0x6b5/0x2cf0
[  202.848855][ T5926]  do_file_open+0x23e/0x4a0
[  202.848895][ T5926]  ? __pfx_do_file_open+0x10/0x10
[  202.848944][ T5926]  ? _raw_spin_unlock+0x28/0x50
[  202.848966][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.849002][ T5926]  ? alloc_fd+0x64b/0x6c0
[  202.849037][ T5926]  do_sys_openat2+0x113/0x200
[  202.849066][ T5926]  ? __pfx___schedule+0x10/0x10
[  202.849091][ T5926]  ? __pfx_do_sys_openat2+0x10/0x10
[  202.849122][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.849151][ T5926]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  202.849194][ T5926]  __x64_sys_openat+0x138/0x170
[  202.849225][ T5926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.849251][ T5926]  do_syscall_64+0x15f/0xf80
[  202.849281][ T5926]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.849314][ T5926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.849339][ T5926] RIP: 0033:0x7fb1836a7407
[  202.849361][ T5926] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  202.849381][ T5926] RSP: 002b:00007ffccf6b1110 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  202.849407][ T5926] RAX: ffffffffffffffda RBX: 00007fb183e13880 RCX: 00007fb1836a7407
[  202.849426][ T5926] RDX: 00000000000a0800 RSI: 000055595f885a60 RDI: ffffffffffffff9c
[  202.849444][ T5926] RBP: 000055595f872910 R08: 0000000000000000 R09: 0000000000000000
[  202.849460][ T5926] R10: 0000000000000000 R11: 0000000000000202 R12: 000055595f887830
[  202.849476][ T5926] R13: 000055595f880190 R14: 0000000000000000 R15: 000055595f887830
[  202.849504][ T5926]  </TASK>
[  203.697769][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout
[  203.703994][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout
[  203.719420][   T29] usb 6-1: USB disconnect, device number 4
[  203.725377][ T5626] block nbd0: Receive control failed (result -32)
[  203.734721][ T4935] block nbd0: Receive control failed (result -32)
[  203.741250][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout
[  203.747256][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout
[  203.753293][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout
[  203.759287][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout
[  203.761371][   T43] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  203.767484][ T5926] block nbd0: Send control failed (result -32)
[  203.799197][ T5926] block nbd0: Request send failed, requeueing
[  203.806045][ T6091] block nbd0: Dead connection, failed to find a fallback
[  203.813123][ T6091] block nbd0: shutting down sockets
[  203.818800][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.825668][   T43] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  203.828179][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  203.849469][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.858974][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  203.867186][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.888107][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  203.896184][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.905736][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  203.913751][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.923223][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  203.935967][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.946849][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  203.956305][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.964443][   T43] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  203.965746][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  203.984161][   T24] usb 3-1: Using ep0 maxpacket: 8
[  203.989442][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  203.998541][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  204.006920][ T5926] ldm_validate_partition_table(): Disk read failed.
[  204.014092][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.024625][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  204.034433][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.045399][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read
[  204.053487][ T5926] Dev nbd0: unable to read RDB block 0
[  204.059530][ T5926]  nbd0: unable to read partition table
[  204.063852][   T43] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  204.079411][ T5926] ldm_validate_partition_table(): Disk read failed.
[  204.087615][ T5926] Dev nbd0: unable to read RDB block 0
[  204.094394][ T5926]  nbd0: unable to read partition table
[  204.108595][ T5926] ldm_validate_partition_table(): Disk read failed.
[  204.113369][   T24] usb 3-1: device descriptor read/all, error -71
[  204.118617][ T5926] Dev nbd0: unable to read RDB block 0
[  204.128123][ T5926]  nbd0: unable to read partition table
[  204.154946][ T5926] ldm_validate_partition_table(): Disk read failed.
[  204.164456][ T5926] Dev nbd0: unable to read RDB block 0
[  204.166871][   T43] usb 5-1: string descriptor 0 read error: -71
[  204.170354][ T5926]  nbd0: unable to read partition table
[  204.200631][   T43] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  204.221333][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.234382][   T43] usb 5-1: can't set config #155, error -71
[  204.250775][   T43] usb 5-1: USB disconnect, device number 9