last executing test programs:

3m9.62115964s ago: executing program 3 (id=1291):
r0 = syz_io_uring_setup(0x315b, &(0x7f0000000700)={0x0, 0xc7ca, 0x42, 0xfffffffc, 0x7a}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000bc0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}]}, 0x5, 0x2}, 0x1)

3m9.453148054s ago: executing program 3 (id=1295):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
add_key(0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffe)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0x5, 0x9, 0x8, 0x5, 0x3, "d88657bb424f1dfa2d15f2063fc6748bfa1b11"})
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000240)=ANY=[], 0x0, 0x257, &(0x7f0000000280)="$eJzsmL9v00AUx793TpyEQAULAwsDlQCh5oezdOlQJCQmhNTya4KImqokbVBiJGwJoYqFBTYGJBYG/gGGSnTqwMY/UAQDICGBRAYGli6H7ocdJ3ZTJ4x9n+Hy9fO7u/fend8QEARxaPn+7e/X5xfnl8GAo5hFwdh/WgBjWvOY/5dXDy+8XLj0+t3ntx82Zh5vh3bL/MopQsQmMKA4Zv8cgJ1FC0+inaLZewKfMGselsGl/iX1NXCcN/YbYKgYfQcc1412wXDL6Psx3ZH+lcq9tbZbudtpr0hRk0NdDo4cGsY1H8bX32RYUSYbQlhgsfh7ftBqtttuNyZy5p0ftGTq3TSfSURU2BTysNFf5CpW7Myo+skq3nz2dFOawtrUdP0UdXDUzXoNMCwZ+zwKYW10SWL5nzJJCSErMJq/ybbZ5mHce++VLzLkX9Ri4c//1GhI2NDixNx064TVHn11PGEZL7gqy8g6+bB+PT+QKuuC1nRXR4kc0n1YeIJ2dKCTbVGW069kzeJFCcD0hwv4hZQI8wnLpFloYelZJ/vbH5M+P5KzCkMVE+zgLVj2+1PMfleReleTx7TfOiUELT5VxQ4IbHdL9w/xhuEsBv0jF+sfVW/9QbXnB3Nr681Vd9XdcJxGoRx1PLdWVe0o2fiiflhS/elIbP18equEzW08anpet65Hm9kowfO6jnp2Yp/N0lbn920zzcNlAGcG2w4+FisZlq19uPKVnueSTijvEyFBEARBEARBEARBEARBEMQ4ToOpf0Elu8eAkrGLYZyryvovAAD//+kRPuQ=")
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='trusted.overlay.redirect\x00', 0x0, 0x0)

3m9.405203035s ago: executing program 3 (id=1296):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x68000080)

3m9.294496957s ago: executing program 3 (id=1297):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3008000, &(0x7f0000000180), 0x1, 0x506, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004f00)={0x2020}, 0x2020)

3m9.005368685s ago: executing program 3 (id=1301):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
rseq(&(0x7f0000000b00), 0x20, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000400)={0x0, 0x3}, 0x10, 0x0)

3m8.373220711s ago: executing program 3 (id=1315):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'pimreg\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000400)={0x11, 0x3, r1}, 0x14)

3m8.351978752s ago: executing program 32 (id=1315):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'pimreg\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000400)={0x11, 0x3, r1}, 0x14)

2m43.010318206s ago: executing program 4 (id=1391):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000200)='[)\x00', 0x0, 0xffffffffffffffff)
connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
setpriority(0x0, r1, 0x5)
keyctl$session_to_parent(0x12)

2m42.488100049s ago: executing program 5 (id=1324):
add_key(&(0x7f0000001300)='asymmetric\x00', 0x0, &(0x7f0000001380)="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", 0x1d8, 0xfffffffffffffffc)

2m42.373218882s ago: executing program 5 (id=1393):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x800714, &(0x7f00000001c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000d80), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000e00), 0x80002c1, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000e80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000f00), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000f40)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='memory.events\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000fc0)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x40de})

2m41.986986582s ago: executing program 4 (id=1394):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)

2m40.88807894s ago: executing program 2 (id=1395):
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @mcast2, 0x10}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0x1c010)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x10000000, 0x1c6a8b68, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40), 0x0, 0x1})
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x9048ef, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='usbip', 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1, 0x0)
mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000c80)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000dc0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000e80)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
symlinkat(&(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000001140)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')

2m40.86949698s ago: executing program 5 (id=1396):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001140)={0x0, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="460a00000000000079108600000000009503000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000700), 0x35c, 0x0)
pread64(r0, 0x0, 0x2a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0xf9)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32, @ANYBLOB="03000000190000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000640), 0x0}, 0x20)
write(r1, &(0x7f0000000680)='27', 0x2)
r3 = socket(0x2, 0x2, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x4000045}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000300)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x19}, @void, @val={0xc, 0x99, {0x0, 0x28}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x4040080)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f00000001c0)={0x80})
fchown(0xffffffffffffffff, 0x0, 0xee01)

2m40.838676511s ago: executing program 2 (id=1397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0)

2m40.713512364s ago: executing program 5 (id=1398):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4)

2m40.594190897s ago: executing program 4 (id=1400):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x802, 0x165)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r3, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x0, 0x811, r0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000005c0)=0x84)
write(r0, &(0x7f0000000140)='100', 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rxrpc/calls\x00', 0x0, 0x0)
io_setup(0xb, &(0x7f0000000180))
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000240)={0x44, {"0dbad96fff010000ebff002084800100", "03000000f97700", "a7c947420000000000000000ff4a70f3"}, 0x1, 0x5})

2m40.48021364s ago: executing program 4 (id=1403):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000001f170000000000000000000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000001000)=""/145, 0x0, 0x91, 0x1}, 0x28)
syz_mount_image$squashfs(&(0x7f0000001140), &(0x7f0000001180)='./file1\x00', 0x200000, &(0x7f00000011c0)=ANY=[], 0x1, 0x184, &(0x7f0000001340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x140, 0x8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x22852, r0, 0xffffc000)
mremap(&(0x7f00000db000/0x3000)=nil, 0x3000, 0xc000, 0x3, &(0x7f000003e000/0xc000)=nil)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)

2m40.47895578s ago: executing program 2 (id=1405):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYBLOB=',\x00'])
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r5 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x0, 0x39c, 0x0, r1})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44)
recvmsg$inet_nvme(r2, &(0x7f0000001c40)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/62, 0x3e}, {&(0x7f0000001880)=""/87, 0x57}, {&(0x7f0000001900)=""/131, 0x83}, {&(0x7f00000019c0)=""/251, 0xfb}, {&(0x7f0000001ac0)=""/51, 0x33}], 0x6, &(0x7f00000005c0)=""/172, 0xac}, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\b', 0x1}], 0x1}, 0x4048043)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x7, 0x33b, 0x8, 0x3, 0xd06, 0x9, 0x40, {0x0, @in6={{0xa, 0x4e22, 0x8000, @private0, 0x8}}, 0x6, 0x8, 0x7, 0x9, 0x80000000}}, &(0x7f0000000400)=0xb0)

2m39.764578328s ago: executing program 4 (id=1406):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x800714, &(0x7f00000001c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000d80), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000e00), 0x80002c1, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000e80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000f00), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000f40)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='memory.events\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000fc0)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x40de})

2m38.862699131s ago: executing program 2 (id=1408):
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000008c0)={0x10000000, 0x1c6a8b68, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40), 0x0, 0x1})
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x9048ef, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff)
symlinkat(&(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000000c80)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000dc0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')

2m38.715020655s ago: executing program 2 (id=1410):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)

2m38.554787509s ago: executing program 4 (id=1412):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42035, 0xad85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x827fd}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000004)

2m37.831855348s ago: executing program 2 (id=1413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x802, 0x165)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'rose0\x00', 0x112})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x6e, 0x2}]})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000005c0)=0x84)
write(r0, &(0x7f0000000140)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
mount(0x0, &(0x7f0000000300)='./proc\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rxrpc/calls\x00', 0x0, 0x0)
io_setup(0xb, &(0x7f0000000180))
r4 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x0, 0xa900)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x44, {"0dbad96fff010000ebff002084800100", "03000000f97700", "a7c947420000000000000000ff4a70f3"}, 0x1, 0x5})

2m25.101945041s ago: executing program 33 (id=1398):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4)

2m23.158611861s ago: executing program 34 (id=1412):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42035, 0xad85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x827fd}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000004)

2m22.457758778s ago: executing program 35 (id=1413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x802, 0x165)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'rose0\x00', 0x112})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x6e, 0x2}]})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000005c0)=0x84)
write(r0, &(0x7f0000000140)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
mount(0x0, &(0x7f0000000300)='./proc\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rxrpc/calls\x00', 0x0, 0x0)
io_setup(0xb, &(0x7f0000000180))
r4 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x0, 0xa900)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x44, {"0dbad96fff010000ebff002084800100", "03000000f97700", "a7c947420000000000000000ff4a70f3"}, 0x1, 0x5})

8.042239226s ago: executing program 1 (id=2155):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000700), 0x35c, 0x0)
pread64(r0, 0x0, 0x2a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0xf9)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000640), 0x0}, 0x20)
write(r1, &(0x7f0000000680)='27', 0x2)
socket(0x2, 0x2, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0)

8.010074027s ago: executing program 1 (id=2158):
socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000b80)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000c40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000d40), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000f80), 0x10106, 0x2, 0x0)
getcwd(0x0, 0x0)
setfsgid(0xee00)
read$FUSE(0xffffffffffffffff, &(0x7f0000001100)={0x2020}, 0x2020)
prctl$PR_GET_THP_DISABLE(0x2a)

7.018046742s ago: executing program 1 (id=2161):
timer_create(0x1, &(0x7f0000006080)={0x0, 0x21, 0x4}, &(0x7f00000060c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55bf, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000005bc0)='./file1\x00', 0x1c3b41, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000005c00)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000005c40)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000005cc0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005d00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000005d40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000005dc0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000005e00), 0x4000087, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000005e40)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000005e80)={0x0, 0x0, 0x9, 0x800800})

5.559086929s ago: executing program 7 (id=2166):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)

5.407451403s ago: executing program 6 (id=2167):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00')
preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0)
openat(r5, &(0x7f0000000140)='unbind\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='di', 0x2)

4.979826984s ago: executing program 1 (id=2168):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000700), 0x35c, 0x0)
pread64(r0, 0x0, 0x2a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0xf9)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32, @ANYBLOB="03000000190000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000640), 0x0}, 0x20)
write(r1, &(0x7f0000000680)='27', 0x2)
socket(0x2, 0x2, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0)

4.495213746s ago: executing program 6 (id=2170):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x3, 0x9, 0xa, 0x20, 0x5}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0xfffffff9, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000031c0)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000003200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000003240)=0x7)
socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000032c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000003340), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000003380), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000033c0)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newsa={0x164, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x4}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x48}, [@tfcpad={0x8, 0x16, 0x2}, @algo_aead={0x6a, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xf0, 0x80, "f51441a200eb3e570000000047cf97b2db664faeecc6e029a619a3ad3164"}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

4.476703016s ago: executing program 1 (id=2171):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="150000001000000008"], 0x50)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000540)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r3, &(0x7f0000000640)='1', 0x1)

4.010544799s ago: executing program 7 (id=2172):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)="b8", 0x1)

3.860418562s ago: executing program 8 (id=2174):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000016c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000017c0)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001880), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000018c0)=0x6)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3.596590969s ago: executing program 6 (id=2176):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4)
io_setup(0x20fe, &(0x7f00000001c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1d3942, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0xfffffffffffffffe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x200000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80)

3.353590655s ago: executing program 7 (id=2177):
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000140)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x2e800, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x400000, 0xf4240, 0x0, 0x0, 0x1}]})
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x72a, 0x0, 0x0)
epoll_create1(0x80000)

2.905560737s ago: executing program 1 (id=2178):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000340), 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syz_tun\x00', <r6=>0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[], [], 0x2c})
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)

2.905411677s ago: executing program 8 (id=2179):
r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
fchdir(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x80000, 0x0)
getdents64(r5, 0x0, 0x0)

2.413307419s ago: executing program 7 (id=2180):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)

2.251775033s ago: executing program 6 (id=2182):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)

1.694428837s ago: executing program 8 (id=2184):
syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x559e, &(0x7f0000009f00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./nfsd\x00', &(0x7f00000002c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000003c0)='tcp 2', 0x5)

1.468660233s ago: executing program 7 (id=2185):
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="041606aaaaaa"], 0x9)

1.415099185s ago: executing program 8 (id=2186):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x532}}, {@shortname_mixed}, {@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0xfffffff9, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000031c0)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000003200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000003240)=0x7)
socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000032c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000003340), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000003380), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000033c0)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newsa={0x164, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x4}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x48}, [@tfcpad={0x8, 0x16, 0x2}, @algo_aead={0x6a, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xf0, 0x80, "f51441a200eb3e570000000047cf97b2db664faeecc6e029a619a3ad3164"}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.304126597s ago: executing program 6 (id=2187):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100)
setxattr$trusted_overlay_opaque(&(0x7f0000000dc0)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000cc0)="1a000000020000", 0x7)
socket$kcm(0x2b, 0x1, 0x0)
io_uring_setup(0x664b, &(0x7f0000001240))
syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x0, &(0x7f0000001340), 0x1, 0x50f, &(0x7f0000001380)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=")
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001940)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001a40), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000001a80), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
sendmsg$NFT_BATCH(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB="030000000100030003"], 0xa)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000d40)={0x3, [0x7, 0xd, 0x7]}, &(0x7f0000000d80)=0xa)

1.303134957s ago: executing program 0 (id=2188):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

1.261747488s ago: executing program 0 (id=2189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
setreuid(0x0, 0x0)

1.116816492s ago: executing program 0 (id=2190):
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000140)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x2e800, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x400000, 0xf4240, 0x0, 0x0, 0x1}]})
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x72a, 0x0, 0x0)
epoll_create1(0x80000)

211.152275ms ago: executing program 0 (id=2191):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socket(0x840000000002, 0x3, 0xfa)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "89b7c2c987f30893", "7b330806715654309f475671397544b5", "b6862124", "27fff8fef8b22086"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x408, &(0x7f0000000380)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nodelalloc}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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")
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 'id1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40)

159.283976ms ago: executing program 0 (id=2192):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4)
io_setup(0x20fe, &(0x7f00000001c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1d3942, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0xfffffffffffffffe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x200000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80)

128.829257ms ago: executing program 8 (id=2193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r3, &(0x7f0000000240)='100000', 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r4, &(0x7f0000000300)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000380)='0', 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000003c0)={0x0, 'syz_tun\x00', {0x4}, 0xa})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0)

73.468159ms ago: executing program 7 (id=2194):
r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
fchdir(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x80000, 0x0)
getdents64(r5, 0x0, 0x0)

53.042469ms ago: executing program 8 (id=2195):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./nfsd\x00', &(0x7f00000002c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000003c0)='tcp 2', 0x5)
write(0xffffffffffffffff, 0x0, 0x0)

18.25387ms ago: executing program 0 (id=2196):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)

0s ago: executing program 6 (id=2197):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)

kernel console output (not intermixed with test programs):

kets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.876383][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.012097][ T4339] Bluetooth: hci2: command 0x0409 tx timeout
[  182.013601][ T4339] Bluetooth: hci5: command 0x041b tx timeout
[  182.127924][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.129525][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.134514][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.263776][ T8467] device hsr_slave_0 entered promiscuous mode
[  182.283093][ T8467] device hsr_slave_1 entered promiscuous mode
[  182.322328][ T8467] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.323796][ T8467] Cannot create hsr debugfs directory
[  182.337686][ T8443] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  182.349784][ T1516] usb 1-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  182.351438][ T1516] usb 1-1: found format II with max.bitrate = 512, frame size=4095
[  182.353385][ T1516] usb 1-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  182.354943][ T1516] usb 1-1: found format II with max.bitrate = 512, frame size=4095
[  182.358219][ T1516] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  182.369235][ T1516] usb 1-1: USB disconnect, device number 10
[  182.521016][ T8443] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  182.577825][ T8443] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  182.979269][ T8443] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  183.151288][ T8134] udevd[8134]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.213605][ T8414] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  183.260111][ T8443] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.296792][ T8414] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  183.366976][ T8414] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  183.371914][ T4335] Bluetooth: hci6: command 0x041b tx timeout
[  183.379085][ T8549] loop0: detected capacity change from 0 to 512
[  183.440237][ T8549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  183.464647][ T8414] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  183.524671][ T8467] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  183.538250][ T8467] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  183.937021][ T8467] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  183.954672][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'.
[  183.983618][ T8467] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  184.014524][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  184.016631][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  184.020036][ T8443] 8021q: adding VLAN 0 to HW filter on device team0
[  184.075965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  184.077792][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  184.079335][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.080564][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.084371][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  184.087824][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  184.089704][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  184.091331][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.092782][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.102135][ T4339] Bluetooth: hci5: command 0x040f tx timeout
[  184.102261][ T4335] Bluetooth: hci2: command 0x041b tx timeout
[  184.117307][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  184.143148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  184.157486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  184.160658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  184.163163][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  184.376722][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  184.448122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  184.450265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  184.475960][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.479107][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  184.480905][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  184.484588][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  184.490384][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  184.559931][ T8414] 8021q: adding VLAN 0 to HW filter on device team0
[  184.570506][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  184.572386][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  184.573911][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  184.575464][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  184.576935][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.578150][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.579587][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  184.586389][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  184.587942][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.589198][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.590726][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  184.602722][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  184.604573][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  184.606192][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  184.608360][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  184.610098][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  184.611656][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  184.618236][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  184.619984][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  184.621561][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  184.624157][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  184.626169][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  184.639277][ T8595] loop0: detected capacity change from 0 to 128
[  184.663316][ T8595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  184.919272][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  184.927667][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  184.963961][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.031999][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  185.034159][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  185.039894][ T8467] 8021q: adding VLAN 0 to HW filter on device team0
[  185.073899][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  185.076336][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  185.082538][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.083790][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.085365][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  185.155106][ T4991] device hsr_slave_0 left promiscuous mode
[  185.186611][ T4991] device hsr_slave_1 left promiscuous mode
[  185.242024][ T4991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.243538][ T4991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.245733][ T4991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.246855][ T4991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.248295][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.306568][ T4991] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.452509][ T4991] device veth1_macvtap left promiscuous mode
[  185.455050][ T4991] device veth0_macvtap left promiscuous mode
[  185.456177][ T4991] device veth1_vlan left promiscuous mode
[  185.457278][ T4991] device veth0_vlan left promiscuous mode
[  185.465281][ T4339] Bluetooth: hci6: command 0x040f tx timeout
[  185.541962][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  185.745109][ T8642] loop0: detected capacity change from 0 to 512
[  185.775506][ T8642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  185.959538][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'.
[  186.174306][ T4335] Bluetooth: hci2: command 0x040f tx timeout
[  186.175452][ T4335] Bluetooth: hci5: command 0x0419 tx timeout
[  186.620578][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  187.372314][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  187.373942][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  187.531928][ T4339] Bluetooth: hci6: command 0x0419 tx timeout
[  188.013199][ T8659] FAULT_INJECTION: forcing a failure.
[  188.013199][ T8659] name failslab, interval 1, probability 0, space 0, times 0
[  188.015701][ T8659] CPU: 1 PID: 8659 Comm: syz.0.1487 Not tainted syzkaller #0
[  188.017001][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  188.018830][ T8659] Call trace:
[  188.019429][ T8659]  dump_backtrace+0x1c4/0x1f0
[  188.020243][ T8659]  show_stack+0x2c/0x3c
[  188.020965][ T8659]  __dump_stack+0x30/0x40
[  188.021759][ T8659]  dump_stack_lvl+0xf4/0x15c
[  188.022669][ T8659]  dump_stack+0x1c/0x5c
[  188.023455][ T8659]  should_fail_ex+0x3cc/0x524
[  188.024336][ T8659]  __should_failslab+0xc0/0x11c
[  188.025269][ T8659]  should_failslab+0x10/0x28
[  188.026125][ T8659]  __kmem_cache_alloc_node+0x7c/0x318
[  188.027082][ T8659]  kmalloc_trace+0x48/0x94
[  188.027841][ T8659]  vidtv_psi_short_event_desc_init+0xf0/0x558
[  188.028906][ T8659]  vidtv_psi_desc_clone+0x2f0/0x808
[  188.029810][ T8659]  vidtv_channel_si_init+0x738/0x124c
[  188.030761][ T8659]  vidtv_mux_init+0x3ac/0x1554
[  188.031652][ T8659]  vidtv_start_feed+0x2e0/0x49c
[  188.032505][ T8659]  dmx_section_feed_start_filtering+0x328/0x464
[  188.033621][ T8659]  dvb_dmxdev_filter_start+0xafc/0xf10
[  188.034560][ T8659]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  188.035472][ T8659]  dvb_demux_do_ioctl+0x410/0x4d8
[  188.036387][ T8659]  dvb_usercopy+0x248/0x45c
[  188.037207][ T8659]  dvb_demux_ioctl+0x3c/0x54
[  188.038054][ T8659]  __arm64_sys_ioctl+0x14c/0x1c8
[  188.038900][ T8659]  invoke_syscall+0x98/0x290
[  188.039729][ T8659]  el0_svc_common+0x13c/0x258
[  188.040556][ T8659]  do_el0_svc+0x5c/0x134
[  188.041339][ T8659]  el0_svc+0x58/0x12c
[  188.042094][ T8659]  el0t_64_sync_handler+0x84/0xf0
[  188.043010][ T8659]  el0t_64_sync+0x18c/0x190
[  188.054399][ T4991] team0 (unregistering): Port device team_slave_1 removed
[  188.214904][ T4991] team0 (unregistering): Port device team_slave_0 removed
[  188.252237][ T4335] Bluetooth: hci2: command 0x0419 tx timeout
[  188.279279][ T8663] loop0: detected capacity change from 0 to 128
[  188.318811][ T8663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  188.392365][ T4991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.593389][ T4991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.031190][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  190.393506][ T4991] bond0 (unregistering): Released all slaves
[  190.635003][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  190.637505][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  190.639829][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.641234][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.647879][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  190.649922][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.651702][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.654949][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.656790][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.659374][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.661325][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.676537][ T4340] infiniband syz1: ib_query_port failed (-19)
[  190.700786][ T8443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.708963][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.710862][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.712931][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.714306][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.719947][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.731579][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.737976][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.750072][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.751647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.785445][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.940060][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.942889][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.944351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.988506][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.990374][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.034968][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.036763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.038531][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.040090][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.047388][ T8443] device veth0_vlan entered promiscuous mode
[  191.074595][ T8443] device veth1_vlan entered promiscuous mode
[  191.113799][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.115908][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.117457][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.121022][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.133260][ T8443] device veth0_macvtap entered promiscuous mode
[  191.136224][ T8443] device veth1_macvtap entered promiscuous mode
[  191.464126][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.465951][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  191.467640][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.469519][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.472598][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.475907][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.477953][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.479988][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.481721][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.484342][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.486176][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.488023][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.494128][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.496889][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.498914][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.500960][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.512200][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.514126][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.516062][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.517880][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.526235][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.534492][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.545227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.547430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.549460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.551361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.563767][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.565651][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.569493][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.571161][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.578642][ T8443] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.580437][ T8443] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.584345][ T8443] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.591177][ T8443] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.605922][ T8414] device veth0_vlan entered promiscuous mode
[  191.613015][ T8414] device veth1_vlan entered promiscuous mode
[  191.679183][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.680893][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.702112][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.703983][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.705984][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.708052][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.715721][ T8414] device veth0_macvtap entered promiscuous mode
[  191.751586][ T8414] device veth1_macvtap entered promiscuous mode
[  191.801585][ T7789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.803222][ T7789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.819062][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.821176][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  191.825538][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  191.827450][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.829257][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.831322][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.837249][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.839934][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.841724][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.846935][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.848935][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.851031][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.856524][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.859096][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.861229][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.867609][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.869527][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.876294][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.879379][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.881389][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.883563][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.885487][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.887389][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.889247][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.891010][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.896667][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.898676][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.900787][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.904058][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.909855][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.911752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.914102][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.916020][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.918366][ T8467] device veth0_vlan entered promiscuous mode
[  191.922042][ T8414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.925539][ T8414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.927197][ T8414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.928791][ T8414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.935786][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.937282][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.166620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  192.173433][ T8467] device veth1_vlan entered promiscuous mode
[  192.549815][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.592925][ T6766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.594567][ T6766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.598274][ T8467] device veth0_macvtap entered promiscuous mode
[  192.599890][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  192.602740][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  192.606837][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.610888][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.622870][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.626315][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.704772][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.717378][ T8467] device veth1_macvtap entered promiscuous mode
[  192.730005][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  192.742353][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.747977][ T8758] loop7: detected capacity change from 0 to 16
[  192.751390][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.761542][ T8758] erofs: (device loop7): mounted with root inode @ nid 36.
[  192.775617][ T8758] syz.7.1458: attempt to access beyond end of device
[  192.775617][ T8758] loop7: rw=524288, sector=16, nr_sectors = 32 limit=16
[  192.788665][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  192.812551][ T8758] syz.7.1458: attempt to access beyond end of device
[  192.812551][ T8758] loop7: rw=524288, sector=8, nr_sectors = 32 limit=16
[  192.833350][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.852023][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.853731][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.858361][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.860265][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.871925][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.873694][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.875435][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.877196][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.878916][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.880722][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.901980][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.903718][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.910019][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.915459][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.917283][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.924611][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.926455][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.928004][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.929590][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.931160][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.966945][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.968676][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.970343][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.984012][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.985638][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.987152][ T8467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.989059][ T8467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.004298][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.071226][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.077142][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.079111][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  193.084619][ T8467] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.089194][ T8467] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.090766][ T8467] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.096078][ T8467] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.184627][ T8775] loop6: detected capacity change from 0 to 128
[  193.267374][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.269859][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.278166][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  193.728299][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.742215][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'.
[  193.748818][ T5766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.751540][ T5766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.763709][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.873373][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.928103][ T8797] loop8: detected capacity change from 0 to 512
[  193.959374][ T8797] EXT4-fs (loop8): Test dummy encryption mode enabled
[  193.994435][ T8797] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.1461: inode has both inline data and extents flags
[  193.997227][ T8797] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.1461: couldn't read orphan inode 15 (err -117)
[  194.003225][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.060271][ T8797] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  194.188702][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.879226][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201'
[  194.881028][ T4339] CPU: 0 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0
[  194.882306][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  194.884046][ T4339] Workqueue: hci6 hci_rx_work
[  194.884912][ T4339] Call trace:
[  194.885518][ T4339]  dump_backtrace+0x1c4/0x1f0
[  194.886371][ T4339]  show_stack+0x2c/0x3c
[  194.887138][ T4339]  __dump_stack+0x30/0x40
[  194.887910][ T4339]  dump_stack_lvl+0xf4/0x15c
[  194.888768][ T4339]  dump_stack+0x1c/0x5c
[  194.889501][ T4339]  sysfs_create_dir_ns+0x244/0x264
[  194.890462][ T4339]  kobject_add_internal+0x5a8/0xb18
[  194.891364][ T4339]  kobject_add+0x144/0x20c
[  194.892182][ T4339]  device_add+0x3dc/0xe4c
[  194.893006][ T4339]  hci_conn_add_sysfs+0xb8/0x1bc
[  194.893926][ T4339]  le_conn_complete_evt+0xd08/0x12c8
[  194.894896][ T4339]  hci_le_conn_complete_evt+0x114/0x3b8
[  194.896087][ T4339]  hci_le_meta_evt+0x2c0/0x4a8
[  194.896983][ T4339]  hci_event_packet+0x64c/0xe60
[  194.897907][ T4339]  hci_rx_work+0x310/0xa70
[  194.898834][ T4339]  process_one_work+0x7e4/0x13bc
[  194.899875][ T4339]  worker_thread+0x8cc/0xfe8
[  194.900835][ T4339]  kthread+0x254/0x2e0
[  194.901602][ T4339]  ret_from_fork+0x10/0x20
[  194.904400][ T4339] kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  194.906616][ T4339] Bluetooth: hci6: failed to register connection device
[  195.194034][ T8467] EXT4-fs (loop8): unmounting filesystem.
[  195.898367][ T8849] loop6: detected capacity change from 0 to 2048
[  195.908687][ T8849] UDF-fs: bad mount option "џџџџџџ" or missing value
[  196.325838][ T8868] loop0: detected capacity change from 0 to 128
[  197.025490][ T8896] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  197.365777][ T8902] loop7: detected capacity change from 0 to 512
[  197.434192][ T8902] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  197.638709][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1517'.
[  198.836134][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  199.251307][ T8956] loop0: detected capacity change from 0 to 128
[  199.309169][ T8956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  199.320234][ T8961] FAULT_INJECTION: forcing a failure.
[  199.320234][ T8961] name failslab, interval 1, probability 0, space 0, times 0
[  199.340776][ T8961] CPU: 0 PID: 8961 Comm: syz.6.1526 Not tainted syzkaller #0
[  199.342172][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  199.343951][ T8961] Call trace:
[  199.344555][ T8961]  dump_backtrace+0x1c4/0x1f0
[  199.345354][ T8961]  show_stack+0x2c/0x3c
[  199.346074][ T8961]  __dump_stack+0x30/0x40
[  199.346874][ T8961]  dump_stack_lvl+0xf4/0x15c
[  199.347723][ T8961]  dump_stack+0x1c/0x5c
[  199.348477][ T8961]  should_fail_ex+0x3cc/0x524
[  199.349323][ T8961]  __should_failslab+0xc0/0x11c
[  199.350239][ T8961]  should_failslab+0x10/0x28
[  199.351049][ T8961]  __kmem_cache_alloc_node+0x7c/0x318
[  199.352017][ T8961]  __kmalloc_node_track_caller+0xb8/0x174
[  199.353081][ T8961]  kstrdup+0x68/0xb0
[  199.353824][ T8961]  vidtv_psi_service_desc_init+0x1ac/0x46c
[  199.354904][ T8961]  vidtv_psi_desc_clone+0x148/0x808
[  199.355778][ T8961]  vidtv_channel_si_init+0x474/0x124c
[  199.356704][ T8961]  vidtv_mux_init+0x3ac/0x1554
[  199.357568][ T8961]  vidtv_start_feed+0x2e0/0x49c
[  199.358415][ T8961]  dmx_section_feed_start_filtering+0x328/0x464
[  199.359634][ T8961]  dvb_dmxdev_filter_start+0xafc/0xf10
[  199.360582][ T8961]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  199.361513][ T8961]  dvb_demux_do_ioctl+0x410/0x4d8
[  199.362471][ T8961]  dvb_usercopy+0x248/0x45c
[  199.363312][ T8961]  dvb_demux_ioctl+0x3c/0x54
[  199.364122][ T8961]  __arm64_sys_ioctl+0x14c/0x1c8
[  199.365048][ T8961]  invoke_syscall+0x98/0x290
[  199.365914][ T8961]  el0_svc_common+0x13c/0x258
[  199.366838][ T8961]  do_el0_svc+0x5c/0x134
[  199.367591][ T8961]  el0_svc+0x58/0x12c
[  199.368330][ T8961]  el0t_64_sync_handler+0x84/0xf0
[  199.369197][ T8961]  el0t_64_sync+0x18c/0x190
[  199.387399][ T8948] loop8: detected capacity change from 0 to 32768
[  200.176069][ T8977] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1529'.
[  200.266554][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  200.286243][ T8994] loop7: detected capacity change from 0 to 512
[  200.623405][ T8994] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  200.886590][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1534'.
[  200.929250][ T9008] device syzkaller1 entered promiscuous mode
[  201.138296][ T4339] Bluetooth: hci6: command 0x0406 tx timeout
[  201.698540][ T9045] device syzkaller0 entered promiscuous mode
[  201.904963][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  202.683128][ T9085] loop7: detected capacity change from 0 to 128
[  202.698804][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1543'.
[  202.739640][ T9085] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  202.937358][    T9] device hsr_slave_0 left promiscuous mode
[  202.983688][    T9] device hsr_slave_1 left promiscuous mode
[  203.063020][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.066652][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.070608][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.073785][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.079947][    T9] device bridge_slave_1 left promiscuous mode
[  203.083736][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.138727][    T9] device bridge_slave_0 left promiscuous mode
[  203.140340][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.190073][    T9] device hsr_slave_0 left promiscuous mode
[  203.233984][    T9] device hsr_slave_1 left promiscuous mode
[  203.302133][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.303712][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.317234][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.318694][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.333060][    T9] device bridge_slave_1 left promiscuous mode
[  203.335521][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.382908][    T9] device bridge_slave_0 left promiscuous mode
[  203.384249][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.394313][ T9117] loop8: detected capacity change from 0 to 32768
[  203.508527][ T9134] loop6: detected capacity change from 0 to 16
[  203.526847][ T9134] erofs: (device loop6): mounted with root inode @ nid 36.
[  203.529494][ T9134] syz.6.1557: attempt to access beyond end of device
[  203.529494][ T9134] loop6: rw=524288, sector=16, nr_sectors = 32 limit=16
[  203.531867][ T9134] syz.6.1557: attempt to access beyond end of device
[  203.531867][ T9134] loop6: rw=524288, sector=8, nr_sectors = 32 limit=16
[  203.982186][    T9] device veth1_macvtap left promiscuous mode
[  203.984067][    T9] device veth0_macvtap left promiscuous mode
[  203.998875][    T9] device veth1_vlan left promiscuous mode
[  204.000177][    T9] device veth0_vlan left promiscuous mode
[  204.058892][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  204.152174][    T9] device veth1_macvtap left promiscuous mode
[  204.155559][    T9] device veth0_macvtap left promiscuous mode
[  204.157173][    T9] device veth1_vlan left promiscuous mode
[  204.178255][    T9] device veth0_vlan left promiscuous mode
[  206.296459][ T9173] loop7: detected capacity change from 0 to 32768
[  207.202376][ T9181] loop8: detected capacity change from 0 to 128
[  207.221771][ T9181] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  207.943829][ T8467] EXT4-fs (loop8): unmounting filesystem.
[  208.075461][    T9] team0 (unregistering): Port device team_slave_1 removed
[  208.107753][ T9193] loop8: detected capacity change from 0 to 16
[  208.114662][ T9193] erofs: (device loop8): mounted with root inode @ nid 36.
[  208.118584][ T9193] syz.8.1571: attempt to access beyond end of device
[  208.118584][ T9193] loop8: rw=524288, sector=16, nr_sectors = 32 limit=16
[  208.121111][ T9193] syz.8.1571: attempt to access beyond end of device
[  208.121111][ T9193] loop8: rw=524288, sector=8, nr_sectors = 32 limit=16
[  208.333686][    T9] team0 (unregistering): Port device team_slave_0 removed
[  208.504989][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.640254][ T9195] FAULT_INJECTION: forcing a failure.
[  208.640254][ T9195] name failslab, interval 1, probability 0, space 0, times 0
[  208.642956][ T9195] CPU: 0 PID: 9195 Comm: syz.7.1574 Not tainted syzkaller #0
[  208.644256][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  208.646040][ T9195] Call trace:
[  208.646624][ T9195]  dump_backtrace+0x1c4/0x1f0
[  208.647454][ T9195]  show_stack+0x2c/0x3c
[  208.648187][ T9195]  __dump_stack+0x30/0x40
[  208.648933][ T9195]  dump_stack_lvl+0xf4/0x15c
[  208.649730][ T9195]  dump_stack+0x1c/0x5c
[  208.650443][ T9195]  should_fail_ex+0x3cc/0x524
[  208.651275][ T9195]  __should_failslab+0xc0/0x11c
[  208.652173][ T9195]  should_failslab+0x10/0x28
[  208.653013][ T9195]  __kmem_cache_alloc_node+0x7c/0x318
[  208.654039][ T9195]  kmalloc_trace+0x48/0x94
[  208.654844][ T9195]  vidtv_psi_service_desc_init+0xb0/0x46c
[  208.655883][ T9195]  vidtv_psi_desc_clone+0x148/0x808
[  208.656882][ T9195]  vidtv_channel_si_init+0x474/0x124c
[  208.657920][ T9195]  vidtv_mux_init+0x3ac/0x1554
[  208.658796][ T9195]  vidtv_start_feed+0x2e0/0x49c
[  208.659690][ T9195]  dmx_section_feed_start_filtering+0x328/0x464
[  208.660835][ T9195]  dvb_dmxdev_filter_start+0xafc/0xf10
[  208.661845][ T9195]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  208.662816][ T9195]  dvb_demux_do_ioctl+0x410/0x4d8
[  208.663687][ T9195]  dvb_usercopy+0x248/0x45c
[  208.664476][ T9195]  dvb_demux_ioctl+0x3c/0x54
[  208.665273][ T9195]  __arm64_sys_ioctl+0x14c/0x1c8
[  208.666132][ T9195]  invoke_syscall+0x98/0x290
[  208.666988][ T9195]  el0_svc_common+0x13c/0x258
[  208.667880][ T9195]  do_el0_svc+0x5c/0x134
[  208.668678][ T9195]  el0_svc+0x58/0x12c
[  208.669424][ T9195]  el0t_64_sync_handler+0x84/0xf0
[  208.670383][ T9195]  el0t_64_sync+0x18c/0x190
[  208.732379][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.663211][ T9219] loop7: detected capacity change from 0 to 128
[  210.681173][ T9219] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  210.903600][    T9] bond0 (unregistering): Released all slaves
[  211.406493][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  212.413903][ T9227] loop7: detected capacity change from 0 to 32768
[  213.198478][ T9235] loop8: detected capacity change from 0 to 512
[  213.838364][ T9238] FAULT_INJECTION: forcing a failure.
[  213.838364][ T9238] name failslab, interval 1, probability 0, space 0, times 0
[  213.841089][ T9238] CPU: 1 PID: 9238 Comm: syz.7.1585 Not tainted syzkaller #0
[  213.842513][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  213.844394][ T9238] Call trace:
[  213.845038][ T9238]  dump_backtrace+0x1c4/0x1f0
[  213.845928][ T9238]  show_stack+0x2c/0x3c
[  213.846722][ T9238]  __dump_stack+0x30/0x40
[  213.847577][ T9238]  dump_stack_lvl+0xf4/0x15c
[  213.848460][ T9238]  dump_stack+0x1c/0x5c
[  213.849272][ T9238]  should_fail_ex+0x3cc/0x524
[  213.850168][ T9238]  __should_failslab+0xc0/0x11c
[  213.851125][ T9238]  should_failslab+0x10/0x28
[  213.851943][ T9238]  __kmem_cache_alloc_node+0x7c/0x318
[  213.852953][ T9238]  kmalloc_trace+0x48/0x94
[  213.853783][ T9238]  vidtv_psi_short_event_desc_init+0xf0/0x558
[  213.854861][ T9238]  vidtv_psi_desc_clone+0x2f0/0x808
[  213.855815][ T9238]  vidtv_channel_si_init+0x738/0x124c
[  213.856782][ T9238]  vidtv_mux_init+0x3ac/0x1554
[  213.857657][ T9238]  vidtv_start_feed+0x2e0/0x49c
[  213.858564][ T9238]  dmx_section_feed_start_filtering+0x328/0x464
[  213.859752][ T9238]  dvb_dmxdev_filter_start+0xafc/0xf10
[  213.860742][ T9238]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  213.861697][ T9238]  dvb_demux_do_ioctl+0x410/0x4d8
[  213.862609][ T9238]  dvb_usercopy+0x248/0x45c
[  213.863371][ T9238]  dvb_demux_ioctl+0x3c/0x54
[  213.864192][ T9238]  __arm64_sys_ioctl+0x14c/0x1c8
[  213.865092][ T9238]  invoke_syscall+0x98/0x290
[  213.865928][ T9238]  el0_svc_common+0x13c/0x258
[  213.866767][ T9238]  do_el0_svc+0x5c/0x134
[  213.867521][ T9238]  el0_svc+0x58/0x12c
[  213.868217][ T9238]  el0t_64_sync_handler+0x84/0xf0
[  213.869119][ T9238]  el0t_64_sync+0x18c/0x190
[  214.136909][ T9242] loop8: detected capacity change from 0 to 512
[  214.171458][ T9242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  214.215654][    T9] team0 (unregistering): Port device team_slave_1 removed
[  214.360030][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1587'.
[  214.413858][    T9] team0 (unregistering): Port device team_slave_0 removed
[  214.612845][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.859209][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.166008][ T8467] EXT4-fs (loop8): unmounting filesystem.
[  215.205234][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  215.215032][ T4335] CPU: 1 PID: 4335 Comm: kworker/u5:3 Not tainted syzkaller #0
[  215.216221][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  215.216253][ T4335] Workqueue: hci2 hci_rx_work
[  215.216275][ T4335] Call trace:
[  215.216279][ T4335]  dump_backtrace+0x1c4/0x1f0
[  215.216288][ T4335]  show_stack+0x2c/0x3c
[  215.216294][ T4335]  __dump_stack+0x30/0x40
[  215.221479][ T4335]  dump_stack_lvl+0xf4/0x15c
[  215.222267][ T4335]  dump_stack+0x1c/0x5c
[  215.223032][ T4335]  sysfs_create_dir_ns+0x244/0x264
[  215.224000][ T4335]  kobject_add_internal+0x5a8/0xb18
[  215.224910][ T4335]  kobject_add+0x144/0x20c
[  215.225728][ T4335]  device_add+0x3dc/0xe4c
[  215.226545][ T4335]  hci_conn_add_sysfs+0xb8/0x1bc
[  215.227426][ T4335]  le_conn_complete_evt+0xd08/0x12c8
[  215.228396][ T4335]  hci_le_conn_complete_evt+0x114/0x3b8
[  215.229374][ T4335]  hci_le_meta_evt+0x2c0/0x4a8
[  215.230153][ T4335]  hci_event_packet+0x64c/0xe60
[  215.230956][ T4335]  hci_rx_work+0x310/0xa70
[  215.231777][ T4335]  process_one_work+0x7e4/0x13bc
[  215.232615][ T4335]  worker_thread+0x8cc/0xfe8
[  215.233419][ T4335]  kthread+0x254/0x2e0
[  215.234123][ T4335]  ret_from_fork+0x10/0x20
[  215.236822][ T4335] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  215.239060][ T4335] Bluetooth: hci2: failed to register connection device
[  215.745610][ T9259] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  215.762424][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.766372][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.108590][ T9263] loop8: detected capacity change from 0 to 128
[  216.132172][ T9263] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  216.875543][ T8467] EXT4-fs (loop8): unmounting filesystem.
[  216.919524][ T4335] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  216.983468][    T9] bond0 (unregistering): Released all slaves
[  217.257580][ T9142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1560'.
[  217.406231][ T9282] FAULT_INJECTION: forcing a failure.
[  217.406231][ T9282] name failslab, interval 1, probability 0, space 0, times 0
[  217.410702][ T9282] CPU: 0 PID: 9282 Comm: syz.6.1597 Not tainted syzkaller #0
[  217.412062][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  217.413813][ T9282] Call trace:
[  217.414407][ T9282]  dump_backtrace+0x1c4/0x1f0
[  217.415246][ T9282]  show_stack+0x2c/0x3c
[  217.416056][ T9282]  __dump_stack+0x30/0x40
[  217.416878][ T9282]  dump_stack_lvl+0xf4/0x15c
[  217.417713][ T9282]  dump_stack+0x1c/0x5c
[  217.418474][ T9282]  should_fail_ex+0x3cc/0x524
[  217.419320][ T9282]  __should_failslab+0xc0/0x11c
[  217.420217][ T9282]  should_failslab+0x10/0x28
[  217.421104][ T9282]  __kmem_cache_alloc_node+0x7c/0x318
[  217.422037][ T9282]  __kmalloc_node_track_caller+0xb8/0x174
[  217.423016][ T9282]  kstrdup+0x68/0xb0
[  217.423712][ T9282]  vidtv_psi_short_event_desc_init+0x1c8/0x558
[  217.424779][ T9282]  vidtv_psi_desc_clone+0x2f0/0x808
[  217.425772][ T9282]  vidtv_channel_si_init+0x738/0x124c
[  217.426742][ T9282]  vidtv_mux_init+0x3ac/0x1554
[  217.427634][ T9282]  vidtv_start_feed+0x2e0/0x49c
[  217.428568][ T9282]  dmx_section_feed_start_filtering+0x328/0x464
[  217.429746][ T9282]  dvb_dmxdev_filter_start+0xafc/0xf10
[  217.430716][ T9282]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  217.431672][ T9282]  dvb_demux_do_ioctl+0x410/0x4d8
[  217.432588][ T9282]  dvb_usercopy+0x248/0x45c
[  217.433397][ T9282]  dvb_demux_ioctl+0x3c/0x54
[  217.434223][ T9282]  __arm64_sys_ioctl+0x14c/0x1c8
[  217.435132][ T9282]  invoke_syscall+0x98/0x290
[  217.436041][ T9282]  el0_svc_common+0x13c/0x258
[  217.436905][ T9282]  do_el0_svc+0x5c/0x134
[  217.437719][ T9282]  el0_svc+0x58/0x12c
[  217.438461][ T9282]  el0t_64_sync_handler+0x84/0xf0
[  217.439364][ T9282]  el0t_64_sync+0x18c/0x190
[  217.786222][ T9286] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  218.081916][ T7851] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  218.183531][ T9300] 9pnet_fd: Insufficient options for proto=fd
[  218.274533][ T7851] usb 1-1: unable to get BOS descriptor or descriptor too short
[  218.276871][ T7851] usb 1-1: not running at top speed; connect to a high speed hub
[  218.279144][ T7851] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  218.284699][ T7851] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  218.287382][ T7851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.289461][ T7851] usb 1-1: Product: syz
[  218.290293][ T7851] usb 1-1: Manufacturer: syz
[  218.291069][ T7851] usb 1-1: SerialNumber: syz
[  218.660013][ T9315] loop7: detected capacity change from 0 to 128
[  219.358151][ T9339] loop8: detected capacity change from 0 to 128
[  219.425020][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1606'.
[  219.438785][ T9339] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  219.575326][ T9349] device syzkaller1 entered promiscuous mode
[  219.835830][ T9359] FAULT_INJECTION: forcing a failure.
[  219.835830][ T9359] name failslab, interval 1, probability 0, space 0, times 0
[  219.838748][ T9359] CPU: 0 PID: 9359 Comm: syz.7.1609 Not tainted syzkaller #0
[  219.840117][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  219.841939][ T9359] Call trace:
[  219.842534][ T9359]  dump_backtrace+0x1c4/0x1f0
[  219.843398][ T9359]  show_stack+0x2c/0x3c
[  219.844180][ T9359]  __dump_stack+0x30/0x40
[  219.844931][ T9359]  dump_stack_lvl+0xf4/0x15c
[  219.845798][ T9359]  dump_stack+0x1c/0x5c
[  219.846513][ T9359]  should_fail_ex+0x3cc/0x524
[  219.847295][ T9359]  __should_failslab+0xc0/0x11c
[  219.848102][ T9359]  should_failslab+0x10/0x28
[  219.848885][ T9359]  __kmem_cache_alloc_node+0x7c/0x318
[  219.849833][ T9359]  kmalloc_trace+0x48/0x94
[  219.850584][ T9359]  vidtv_psi_service_desc_init+0xb0/0x46c
[  219.851612][ T9359]  vidtv_psi_desc_clone+0x148/0x808
[  219.852558][ T9359]  vidtv_channel_si_init+0x474/0x124c
[  219.853515][ T9359]  vidtv_mux_init+0x3ac/0x1554
[  219.854377][ T9359]  vidtv_start_feed+0x2e0/0x49c
[  219.855232][ T9359]  dmx_section_feed_start_filtering+0x328/0x464
[  219.856349][ T9359]  dvb_dmxdev_filter_start+0xafc/0xf10
[  219.857362][ T9359]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  219.858338][ T9359]  dvb_demux_do_ioctl+0x410/0x4d8
[  219.859202][ T9359]  dvb_usercopy+0x248/0x45c
[  219.860011][ T9359]  dvb_demux_ioctl+0x3c/0x54
[  219.860816][ T9359]  __arm64_sys_ioctl+0x14c/0x1c8
[  219.861689][ T9359]  invoke_syscall+0x98/0x290
[  219.862505][ T9359]  el0_svc_common+0x13c/0x258
[  219.863317][ T9359]  do_el0_svc+0x5c/0x134
[  219.864084][ T9359]  el0_svc+0x58/0x12c
[  219.864796][ T9359]  el0t_64_sync_handler+0x84/0xf0
[  219.865665][ T9359]  el0t_64_sync+0x18c/0x190
[  220.464305][ T7851] usb 1-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  220.465945][ T7851] usb 1-1: found format II with max.bitrate = 512, frame size=4095
[  220.467959][ T7851] usb 1-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  220.469986][ T7851] usb 1-1: found format II with max.bitrate = 512, frame size=4095
[  220.474999][ T7851] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  220.528693][ T7851] usb 1-1: USB disconnect, device number 11
[  220.961219][ T9388] 9pnet_fd: Insufficient options for proto=fd
[  221.008412][ T9390] device syzkaller0 entered promiscuous mode
[  221.433404][ T8545] udevd[8545]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.440138][ T8467] EXT4-fs (loop8): unmounting filesystem.
[  221.546862][ T9406] device syzkaller1 entered promiscuous mode
[  221.556170][ T9411] loop8: detected capacity change from 0 to 128
[  222.245987][ T9431] 9pnet_fd: Insufficient options for proto=fd
[  224.428056][ T9458] 9pnet_fd: Insufficient options for proto=fd
[  224.906182][ T9469] loop6: detected capacity change from 0 to 256
[  224.931342][ T9469] FAT-fs (loop6): Directory bread(block 64) failed
[  224.935180][ T9469] FAT-fs (loop6): Directory bread(block 65) failed
[  224.936397][ T9469] FAT-fs (loop6): Directory bread(block 66) failed
[  224.940828][ T9469] FAT-fs (loop6): Directory bread(block 67) failed
[  224.942243][ T9469] FAT-fs (loop6): Directory bread(block 68) failed
[  224.943537][ T9469] FAT-fs (loop6): Directory bread(block 69) failed
[  224.944727][ T9469] FAT-fs (loop6): Directory bread(block 70) failed
[  224.945927][ T9469] FAT-fs (loop6): Directory bread(block 71) failed
[  224.947144][ T9469] FAT-fs (loop6): Directory bread(block 72) failed
[  224.948345][ T9469] FAT-fs (loop6): Directory bread(block 73) failed
[  225.044818][ T9475] loop7: detected capacity change from 0 to 128
[  225.268612][ T9493] loop6: detected capacity change from 0 to 8
[  225.322306][ T9493] SQUASHFS error: Failed to read block 0x285: -5
[  225.323558][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.324831][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.333040][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.334746][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.335919][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.337056][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.338163][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.339456][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.340625][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.341670][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.344073][ T9475] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  225.351680][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.357722][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.358881][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.359196][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.360152][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.360179][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.361493][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.362975][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.366443][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.367662][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.368953][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.370310][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.371625][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.373460][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.374784][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.376037][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.377156][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.378466][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.379761][ T9493] SQUASHFS error: Failed to read block 0x0: -5
[  225.380940][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.382327][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.383536][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.384784][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.386047][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.387461][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.388833][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.390086][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.391317][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.391468][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.404146][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.405528][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.406087][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.406767][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.410107][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.411457][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.413567][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.414852][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.416095][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.417282][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.418688][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.420015][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.421278][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.422808][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.424111][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.425378][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.426679][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.427851][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.428997][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.430325][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.431625][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.434629][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.435809][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.436917][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.438102][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.439720][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.440810][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.442283][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.443582][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.444940][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.446398][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.447822][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.449154][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.450481][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.451798][ T9493] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.464974][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.466452][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.467575][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.468894][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.470175][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.471289][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.473084][ T9493] SQUASHFS error: read_indexes: reading block [283:0]
[  225.491306][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.492830][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.502508][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.512704][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.513932][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.515169][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.516516][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.517618][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.518688][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.519906][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  225.521213][ T9502] SQUASHFS error: Failed to read block 0x0: -5
[  225.541991][ T9502] SQUASHFS error: Unable to read metadata cache entry [283]
[  225.545533][ T9502] SQUASHFS error: read_indexes: reading block [283:0]
[  226.075623][ T9515] loop8: detected capacity change from 0 to 32768
[  226.613394][ T9531] 9pnet_fd: Insufficient options for proto=fd
[  227.798538][ T9543] loop0: detected capacity change from 0 to 16
[  227.800502][ T9543] erofs: (device loop0): mounted with root inode @ nid 36.
[  227.803244][ T9543] syz.0.1643: attempt to access beyond end of device
[  227.803244][ T9543] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16
[  227.805708][ T9543] syz.0.1643: attempt to access beyond end of device
[  227.805708][ T9543] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16
[  227.906706][ T9551] device syzkaller0 entered promiscuous mode
[  228.022542][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  228.133227][ T9570] loop7: detected capacity change from 0 to 512
[  228.139069][ T9570] EXT4-fs (loop7): Test dummy encryption mode enabled
[  228.147069][ T9570] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #15: comm syz.7.1650: inode has both inline data and extents flags
[  228.149841][ T9570] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.1650: couldn't read orphan inode 15 (err -117)
[  228.154556][ T9570] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  228.188410][ T9579] Bluetooth: ISO socket layer initialized
[  228.590703][ T9583] loop8: detected capacity change from 0 to 2048
[  228.613208][ T9583] UDF-fs: bad mount option "џџџџџџ" or missing value
[  228.654226][ T8408] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.271653][ T9594] loop0: detected capacity change from 0 to 32768
[  229.944740][ T9611] 9pnet_fd: Insufficient options for proto=fd
[  230.470298][ T9624] loop0: detected capacity change from 0 to 16
[  230.472671][ T9624] erofs: (device loop0): mounted with root inode @ nid 36.
[  230.475573][ T9624] syz.0.1658: attempt to access beyond end of device
[  230.475573][ T9624] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16
[  230.477992][ T9624] syz.0.1658: attempt to access beyond end of device
[  230.477992][ T9624] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16
[  230.555749][ T9633] loop6: detected capacity change from 0 to 128
[  230.882870][ T9633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  230.998218][ T9646] loop8: detected capacity change from 0 to 164
[  233.111171][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  233.781684][ T9706] loop6: detected capacity change from 0 to 2048
[  233.802542][ T9706] UDF-fs: bad mount option "џџџџџџ" or missing value
[  234.334231][ T9727] loop8: detected capacity change from 0 to 2048
[  234.355202][ T9727] UDF-fs: bad mount option "џџџџџџ" or missing value
[  234.419529][ T9720] loop0: detected capacity change from 0 to 32768
[  234.987409][ T9748] loop6: detected capacity change from 0 to 128
[  235.034169][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  235.036919][ T9748] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  235.199592][ T9756] FAULT_INJECTION: forcing a failure.
[  235.199592][ T9756] name failslab, interval 1, probability 0, space 0, times 0
[  235.225286][ T9756] CPU: 1 PID: 9756 Comm: syz.7.1681 Not tainted syzkaller #0
[  235.226722][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  235.228369][ T9756] Call trace:
[  235.229063][ T9756]  dump_backtrace+0x1c4/0x1f0
[  235.229945][ T9756]  show_stack+0x2c/0x3c
[  235.230715][ T9756]  __dump_stack+0x30/0x40
[  235.231529][ T9756]  dump_stack_lvl+0xf4/0x15c
[  235.232382][ T9756]  dump_stack+0x1c/0x5c
[  235.233202][ T9756]  should_fail_ex+0x3cc/0x524
[  235.234075][ T9756]  __should_failslab+0xc0/0x11c
[  235.234966][ T9756]  should_failslab+0x10/0x28
[  235.235763][ T9756]  __kmem_cache_alloc_node+0x7c/0x318
[  235.236750][ T9756]  kmalloc_trace+0x48/0x94
[  235.237556][ T9756]  vidtv_psi_service_desc_init+0xb0/0x46c
[  235.238693][ T9756]  vidtv_psi_desc_clone+0x148/0x808
[  235.239620][ T9756]  vidtv_channel_si_init+0x474/0x124c
[  235.240607][ T9756]  vidtv_mux_init+0x3ac/0x1554
[  235.241409][ T9756]  vidtv_start_feed+0x2e0/0x49c
[  235.242275][ T9756]  dmx_section_feed_start_filtering+0x328/0x464
[  235.243601][ T9756]  dvb_dmxdev_filter_start+0xafc/0xf10
[  235.244617][ T9756]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  235.245551][ T9756]  dvb_demux_do_ioctl+0x410/0x4d8
[  235.246421][ T9756]  dvb_usercopy+0x248/0x45c
[  235.247233][ T9756]  dvb_demux_ioctl+0x3c/0x54
[  235.248088][ T9756]  __arm64_sys_ioctl+0x14c/0x1c8
[  235.249074][ T9756]  invoke_syscall+0x98/0x290
[  235.249910][ T9756]  el0_svc_common+0x13c/0x258
[  235.250765][ T9756]  do_el0_svc+0x5c/0x134
[  235.251586][ T9756]  el0_svc+0x58/0x12c
[  235.252332][ T9756]  el0t_64_sync_handler+0x84/0xf0
[  235.253264][ T9756]  el0t_64_sync+0x18c/0x190
[  235.313115][ T9769] overlayfs: failed to clone upperpath
[  236.612301][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  236.640488][ T9793] loop0: detected capacity change from 0 to 32768
[  236.680764][ T9808] loop6: detected capacity change from 0 to 512
[  236.688243][ T9808] EXT4-fs (loop6): Test dummy encryption mode enabled
[  236.806110][ T9808] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1691: inode has both inline data and extents flags
[  236.808789][ T9808] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1691: couldn't read orphan inode 15 (err -117)
[  236.813126][ T9808] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  237.273001][ T9811] loop8: detected capacity change from 0 to 32768
[  237.436351][ T9838] loop0: detected capacity change from 0 to 512
[  238.821161][ T9838] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1695: inode has both inline data and extents flags
[  238.824182][ T9838] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1695: couldn't read orphan inode 15 (err -117)
[  238.826374][ T9838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  239.008436][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  239.975261][ T9887] loop0: detected capacity change from 0 to 2048
[  239.996499][ T9887] UDF-fs: bad mount option "џџџџџџ" or missing value
[  240.456187][ T9895] loop8: detected capacity change from 0 to 256
[  240.505417][ T9895] FAT-fs (loop8): Directory bread(block 64) failed
[  240.506722][ T9895] FAT-fs (loop8): Directory bread(block 65) failed
[  240.507827][ T9895] FAT-fs (loop8): Directory bread(block 66) failed
[  240.508975][ T9895] FAT-fs (loop8): Directory bread(block 67) failed
[  240.510156][ T9895] FAT-fs (loop8): Directory bread(block 68) failed
[  240.511275][ T9895] FAT-fs (loop8): Directory bread(block 69) failed
[  240.552051][ T9895] FAT-fs (loop8): Directory bread(block 70) failed
[  240.553572][ T9895] FAT-fs (loop8): Directory bread(block 71) failed
[  240.554812][ T9895] FAT-fs (loop8): Directory bread(block 72) failed
[  240.556039][ T9895] FAT-fs (loop8): Directory bread(block 73) failed
[  241.914527][ T9913] loop0: detected capacity change from 0 to 2048
[  241.922307][ T9913] UDF-fs: bad mount option "џџџџџџ" or missing value
[  242.021694][ T9920] loop8: detected capacity change from 0 to 2048
[  242.027925][ T9920] UDF-fs: bad mount option "џџџџџџ" or missing value
[  242.104995][ T8408] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  242.907585][ T9934] FAULT_INJECTION: forcing a failure.
[  242.907585][ T9934] name failslab, interval 1, probability 0, space 0, times 0
[  242.909914][ T9934] CPU: 0 PID: 9934 Comm: syz.8.1711 Not tainted syzkaller #0
[  242.911189][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  242.913015][ T9934] Call trace:
[  242.913584][ T9934]  dump_backtrace+0x1c4/0x1f0
[  242.914416][ T9934]  show_stack+0x2c/0x3c
[  242.915204][ T9934]  __dump_stack+0x30/0x40
[  242.915991][ T9934]  dump_stack_lvl+0xf4/0x15c
[  242.916852][ T9934]  dump_stack+0x1c/0x5c
[  242.917616][ T9934]  should_fail_ex+0x3cc/0x524
[  242.918496][ T9934]  __should_failslab+0xc0/0x11c
[  242.919447][ T9934]  should_failslab+0x10/0x28
[  242.920316][ T9934]  __kmem_cache_alloc_node+0x7c/0x318
[  242.921343][ T9934]  __kmalloc_node_track_caller+0xb8/0x174
[  242.922326][ T9934]  kstrdup+0x68/0xb0
[  242.923039][ T9934]  vidtv_psi_short_event_desc_init+0x214/0x558
[  242.924128][ T9934]  vidtv_channel_s302m_init+0x3c4/0x78c
[  242.925153][ T9934]  vidtv_channels_init+0x4c/0x94
[  242.926069][ T9934]  vidtv_mux_init+0x38c/0x1554
[  242.926943][ T9934]  vidtv_start_feed+0x2e0/0x49c
[  242.927793][ T9934]  dmx_section_feed_start_filtering+0x328/0x464
[  242.928901][ T9934]  dvb_dmxdev_filter_start+0xafc/0xf10
[  242.929907][ T9934]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  242.930858][ T9934]  dvb_demux_do_ioctl+0x410/0x4d8
[  242.931832][ T9934]  dvb_usercopy+0x248/0x45c
[  242.932664][ T9934]  dvb_demux_ioctl+0x3c/0x54
[  242.933481][ T9934]  __arm64_sys_ioctl+0x14c/0x1c8
[  242.934345][ T9934]  invoke_syscall+0x98/0x290
[  242.935128][ T9934]  el0_svc_common+0x13c/0x258
[  242.935939][ T9934]  do_el0_svc+0x5c/0x134
[  242.936715][ T9934]  el0_svc+0x58/0x12c
[  242.937442][ T9934]  el0t_64_sync_handler+0x84/0xf0
[  242.938469][ T9934]  el0t_64_sync+0x18c/0x190
[  244.243767][ T9981] loop0: detected capacity change from 0 to 256
[  244.271548][ T9982] loop7: detected capacity change from 0 to 8
[  244.277275][ T9981] FAT-fs (loop0): Directory bread(block 64) failed
[  244.278499][ T9981] FAT-fs (loop0): Directory bread(block 65) failed
[  244.279599][ T9981] FAT-fs (loop0): Directory bread(block 66) failed
[  244.301778][ T9981] FAT-fs (loop0): Directory bread(block 67) failed
[  244.305438][ T9981] FAT-fs (loop0): Directory bread(block 68) failed
[  244.306566][ T9981] FAT-fs (loop0): Directory bread(block 69) failed
[  244.307715][ T9981] FAT-fs (loop0): Directory bread(block 70) failed
[  244.308788][ T9981] FAT-fs (loop0): Directory bread(block 71) failed
[  244.309905][ T9981] FAT-fs (loop0): Directory bread(block 72) failed
[  244.311051][ T9981] FAT-fs (loop0): Directory bread(block 73) failed
[  244.327136][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  244.394824][ T9982] SQUASHFS error: Failed to read block 0x285: -5
[  244.396015][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.397232][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.398348][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.412095][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.420154][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.421464][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.428346][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.428384][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  244.429637][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.429682][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.431575][ T4339] CPU: 1 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0
[  244.435204][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  244.437149][ T4339] Workqueue: hci5 hci_rx_work
[  244.437858][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.438104][ T4339] Call trace:
[  244.439380][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.439989][ T4339]  dump_backtrace+0x1c4/0x1f0
[  244.441276][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.442049][ T4339]  show_stack+0x2c/0x3c
[  244.442069][ T4339]  __dump_stack+0x30/0x40
[  244.442088][ T4339]  dump_stack_lvl+0xf4/0x15c
[  244.442096][ T4339]  dump_stack+0x1c/0x5c
[  244.442102][ T4339]  sysfs_create_dir_ns+0x244/0x264
[  244.447246][ T4339]  kobject_add_internal+0x5a8/0xb18
[  244.448230][ T4339]  kobject_add+0x144/0x20c
[  244.449108][ T4339]  device_add+0x3dc/0xe4c
[  244.449960][ T4339]  hci_conn_add_sysfs+0xb8/0x1bc
[  244.450894][ T4339]  le_conn_complete_evt+0xd08/0x12c8
[  244.451884][ T4339]  hci_le_conn_complete_evt+0x114/0x3b8
[  244.452884][ T4339]  hci_le_meta_evt+0x2c0/0x4a8
[  244.453776][ T4339]  hci_event_packet+0x64c/0xe60
[  244.454756][ T4339]  hci_rx_work+0x310/0xa70
[  244.455540][ T4339]  process_one_work+0x7e4/0x13bc
[  244.456391][ T4339]  worker_thread+0x8cc/0xfe8
[  244.457218][ T4339]  kthread+0x254/0x2e0
[  244.457971][ T4339]  ret_from_fork+0x10/0x20
[  244.460107][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.461532][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.462143][ T4339] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  244.465520][ T4339] Bluetooth: hci5: failed to register connection device
[  244.469738][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.471345][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.472902][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.474031][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.474080][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.475384][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.477511][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.477705][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.479931][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.479965][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.482376][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.482881][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.484909][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.485590][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.486003][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.488637][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.488838][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.489844][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.491611][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.492433][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.495062][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.498874][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.500295][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.501763][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.502402][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.503295][ T9982] SQUASHFS error: Failed to read block 0x0: -5
[  244.505948][ T9982] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.507576][ T9982] SQUASHFS error: read_indexes: reading block [283:0]
[  244.507853][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.517875][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.521502][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.527812][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.547924][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.562804][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.576053][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.580804][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.586727][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.598059][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.607840][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.612528][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.619349][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  244.627240][ T9988] SQUASHFS error: Failed to read block 0x0: -5
[  244.630953][ T9988] SQUASHFS error: Unable to read metadata cache entry [283]
[  244.643828][ T9988] SQUASHFS error: read_indexes: reading block [283:0]
[  245.403928][T10018] FAULT_INJECTION: forcing a failure.
[  245.403928][T10018] name failslab, interval 1, probability 0, space 0, times 0
[  245.423190][T10018] CPU: 0 PID: 10018 Comm: syz.7.1725 Not tainted syzkaller #0
[  245.424586][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  245.426101][T10018] Call trace:
[  245.426640][T10018]  dump_backtrace+0x1c4/0x1f0
[  245.427494][T10018]  show_stack+0x2c/0x3c
[  245.428225][T10018]  __dump_stack+0x30/0x40
[  245.428998][T10018]  dump_stack_lvl+0xf4/0x15c
[  245.429857][T10018]  dump_stack+0x1c/0x5c
[  245.430642][T10018]  should_fail_ex+0x3cc/0x524
[  245.431472][T10018]  __should_failslab+0xc0/0x11c
[  245.432345][T10018]  should_failslab+0x10/0x28
[  245.433128][T10018]  __kmem_cache_alloc_node+0x7c/0x318
[  245.434095][T10018]  kmalloc_trace+0x48/0x94
[  245.434968][T10018]  vidtv_psi_service_desc_init+0xb0/0x46c
[  245.435959][T10018]  vidtv_psi_desc_clone+0x148/0x808
[  245.436907][T10018]  vidtv_channel_si_init+0x474/0x124c
[  245.437919][T10018]  vidtv_mux_init+0x3ac/0x1554
[  245.438799][T10018]  vidtv_start_feed+0x2e0/0x49c
[  245.439673][T10018]  dmx_section_feed_start_filtering+0x328/0x464
[  245.440775][T10018]  dvb_dmxdev_filter_start+0xafc/0xf10
[  245.441767][T10018]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  245.442686][T10018]  dvb_demux_do_ioctl+0x410/0x4d8
[  245.443598][T10018]  dvb_usercopy+0x248/0x45c
[  245.444428][T10018]  dvb_demux_ioctl+0x3c/0x54
[  245.445282][T10018]  __arm64_sys_ioctl+0x14c/0x1c8
[  245.446165][T10018]  invoke_syscall+0x98/0x290
[  245.446970][T10018]  el0_svc_common+0x13c/0x258
[  245.447777][T10018]  do_el0_svc+0x5c/0x134
[  245.448595][T10018]  el0_svc+0x58/0x12c
[  245.449303][T10018]  el0t_64_sync_handler+0x84/0xf0
[  245.450191][T10018]  el0t_64_sync+0x18c/0x190
[  245.517327][T10028] FAULT_INJECTION: forcing a failure.
[  245.517327][T10028] name fail_futex, interval 1, probability 0, space 0, times 0
[  245.519484][T10028] CPU: 0 PID: 10028 Comm: syz.0.1726 Not tainted syzkaller #0
[  245.520761][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  245.522631][T10028] Call trace:
[  245.523248][T10028]  dump_backtrace+0x1c4/0x1f0
[  245.524089][T10028]  show_stack+0x2c/0x3c
[  245.524842][T10028]  __dump_stack+0x30/0x40
[  245.525651][T10028]  dump_stack_lvl+0xf4/0x15c
[  245.526506][T10028]  dump_stack+0x1c/0x5c
[  245.527284][T10028]  should_fail_ex+0x3cc/0x524
[  245.528126][T10028]  should_fail+0x14/0x24
[  245.528871][T10028]  get_futex_key+0x904/0xfb0
[  245.529678][T10028]  futex_wake+0x10c/0x458
[  245.530448][T10028]  do_futex+0x2c4/0x340
[  245.531197][T10028]  mm_release+0x190/0x274
[  245.531933][T10028]  exit_mm_release+0x30/0x40
[  245.532752][T10028]  exit_mm+0x50/0x290
[  245.533532][T10028]  do_exit+0x4d0/0x19ac
[  245.534242][T10028]  do_group_exit+0x198/0x238
[  245.535035][T10028]  get_signal+0x11f4/0x133c
[  245.535867][T10028]  do_notify_resume+0x364/0x2c84
[  245.536727][T10028]  el0_svc+0x9c/0x12c
[  245.537441][T10028]  el0t_64_sync_handler+0x84/0xf0
[  245.538352][T10028]  el0t_64_sync+0x18c/0x190
[  247.358037][T10091] FAULT_INJECTION: forcing a failure.
[  247.358037][T10091] name fail_futex, interval 1, probability 0, space 0, times 0
[  247.361375][T10091] CPU: 0 PID: 10091 Comm: syz.0.1740 Not tainted syzkaller #0
[  247.362662][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  247.364520][T10091] Call trace:
[  247.365087][T10091]  dump_backtrace+0x1c4/0x1f0
[  247.365952][T10091]  show_stack+0x2c/0x3c
[  247.366763][T10091]  __dump_stack+0x30/0x40
[  247.367510][T10091]  dump_stack_lvl+0xf4/0x15c
[  247.368404][T10091]  dump_stack+0x1c/0x5c
[  247.369246][T10091]  should_fail_ex+0x3cc/0x524
[  247.370209][T10091]  should_fail+0x14/0x24
[  247.371046][T10091]  get_futex_key+0x904/0xfb0
[  247.371970][T10091]  futex_wait_setup+0xbc/0x320
[  247.372879][T10091]  futex_wait+0x164/0x424
[  247.373678][T10091]  do_futex+0x2e8/0x340
[  247.374463][T10091]  __arm64_sys_futex+0x390/0x414
[  247.375335][T10091]  invoke_syscall+0x98/0x290
[  247.376188][T10091]  el0_svc_common+0x13c/0x258
[  247.377054][T10091]  do_el0_svc+0x5c/0x134
[  247.377822][T10091]  el0_svc+0x58/0x12c
[  247.378577][T10091]  el0t_64_sync_handler+0x84/0xf0
[  247.379531][T10091]  el0t_64_sync+0x18c/0x190
[  248.814884][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  248.816162][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  249.409454][T10143] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1758'.
[  250.616951][T10203] loop8: detected capacity change from 0 to 164
[  251.168148][T10220] loop5: detected capacity change from 0 to 7
[  251.171589][T10204] Dev loop5: unable to read RDB block 7
[  251.173436][T10204]  loop5: AHDI p1 p2 p3
[  251.174217][T10204] loop5: partition table partially beyond EOD, truncated
[  251.176033][T10204] loop5: p1 start 1818582900 is beyond EOD, truncated
[  251.177149][T10204] loop5: p3 start 335544320 is beyond EOD, truncated
[  251.179376][T10220] Dev loop5: unable to read RDB block 7
[  251.180445][T10220]  loop5: AHDI p1 p2 p3
[  251.181204][T10220] loop5: partition table partially beyond EOD, truncated
[  251.184352][T10220] loop5: p1 start 1818582900 is beyond EOD, truncated
[  251.185814][T10220] loop5: p3 start 335544320 is beyond EOD, truncated
[  252.573203][T10280] loop7: detected capacity change from 0 to 164
[  253.035665][T10289] FAULT_INJECTION: forcing a failure.
[  253.035665][T10289] name failslab, interval 1, probability 0, space 0, times 0
[  253.040261][T10289] CPU: 1 PID: 10289 Comm: syz.0.1788 Not tainted syzkaller #0
[  253.041386][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  253.043203][T10289] Call trace:
[  253.043777][T10289]  dump_backtrace+0x1c4/0x1f0
[  253.044752][T10289]  show_stack+0x2c/0x3c
[  253.045574][T10289]  __dump_stack+0x30/0x40
[  253.046454][T10289]  dump_stack_lvl+0xf4/0x15c
[  253.047365][T10289]  dump_stack+0x1c/0x5c
[  253.048195][T10289]  should_fail_ex+0x3cc/0x524
[  253.049116][T10289]  __should_failslab+0xc0/0x11c
[  253.050051][T10289]  should_failslab+0x10/0x28
[  253.050913][T10289]  __kmem_cache_alloc_node+0x7c/0x318
[  253.051924][T10289]  __kmalloc_node_track_caller+0xb8/0x174
[  253.052989][T10289]  kstrdup+0x68/0xb0
[  253.053759][T10289]  vidtv_psi_short_event_desc_init+0x160/0x558
[  253.054897][T10289]  vidtv_psi_desc_clone+0x2f0/0x808
[  253.055834][T10289]  vidtv_channel_si_init+0x738/0x124c
[  253.056796][T10289]  vidtv_mux_init+0x3ac/0x1554
[  253.057673][T10289]  vidtv_start_feed+0x2e0/0x49c
[  253.058611][T10289]  dmx_section_feed_start_filtering+0x328/0x464
[  253.059749][T10289]  dvb_dmxdev_filter_start+0xafc/0xf10
[  253.060791][T10289]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  253.061742][T10289]  dvb_demux_do_ioctl+0x410/0x4d8
[  253.062647][T10289]  dvb_usercopy+0x248/0x45c
[  253.063483][T10289]  dvb_demux_ioctl+0x3c/0x54
[  253.064327][T10289]  __arm64_sys_ioctl+0x14c/0x1c8
[  253.065234][T10289]  invoke_syscall+0x98/0x290
[  253.066083][T10289]  el0_svc_common+0x13c/0x258
[  253.066910][T10289]  do_el0_svc+0x5c/0x134
[  253.067696][T10289]  el0_svc+0x58/0x12c
[  253.068384][T10289]  el0t_64_sync_handler+0x84/0xf0
[  253.069277][T10289]  el0t_64_sync+0x18c/0x190
[  254.163738][T10355] loop8: detected capacity change from 0 to 128
[  254.930446][T10368] FAULT_INJECTION: forcing a failure.
[  254.930446][T10368] name failslab, interval 1, probability 0, space 0, times 0
[  254.937804][T10368] CPU: 1 PID: 10368 Comm: syz.6.1806 Not tainted syzkaller #0
[  254.939236][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  254.941016][T10368] Call trace:
[  254.941615][T10368]  dump_backtrace+0x1c4/0x1f0
[  254.942409][T10368]  show_stack+0x2c/0x3c
[  254.943099][T10368]  __dump_stack+0x30/0x40
[  254.943888][T10368]  dump_stack_lvl+0xf4/0x15c
[  254.944713][T10368]  dump_stack+0x1c/0x5c
[  254.945433][T10368]  should_fail_ex+0x3cc/0x524
[  254.946267][T10368]  __should_failslab+0xc0/0x11c
[  254.947122][T10368]  should_failslab+0x10/0x28
[  254.947941][T10368]  __kmem_cache_alloc_node+0x7c/0x318
[  254.948999][T10368]  kmalloc_trace+0x48/0x94
[  254.949799][T10368]  vidtv_psi_sdt_service_init+0x68/0x23c
[  254.950855][T10368]  vidtv_channel_si_init+0x440/0x124c
[  254.951869][T10368]  vidtv_mux_init+0x3ac/0x1554
[  254.952776][T10368]  vidtv_start_feed+0x2e0/0x49c
[  254.953674][T10368]  dmx_section_feed_start_filtering+0x328/0x464
[  254.954853][T10368]  dvb_dmxdev_filter_start+0xafc/0xf10
[  254.955728][T10368]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  254.956654][T10368]  dvb_demux_do_ioctl+0x410/0x4d8
[  254.957507][T10368]  dvb_usercopy+0x248/0x45c
[  254.958257][T10368]  dvb_demux_ioctl+0x3c/0x54
[  254.959028][T10368]  __arm64_sys_ioctl+0x14c/0x1c8
[  254.959960][T10368]  invoke_syscall+0x98/0x290
[  254.960842][T10368]  el0_svc_common+0x13c/0x258
[  254.961628][T10368]  do_el0_svc+0x5c/0x134
[  254.962377][T10368]  el0_svc+0x58/0x12c
[  254.963113][T10368]  el0t_64_sync_handler+0x84/0xf0
[  254.964076][T10368]  el0t_64_sync+0x18c/0x190
[  254.987451][T10374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1808'.
[  256.920971][T10443] loop8: detected capacity change from 0 to 128
[  257.040562][T10451] FAULT_INJECTION: forcing a failure.
[  257.040562][T10451] name failslab, interval 1, probability 0, space 0, times 0
[  257.053632][T10451] CPU: 1 PID: 10451 Comm: syz.7.1823 Not tainted syzkaller #0
[  257.054983][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  257.056849][T10451] Call trace:
[  257.057527][T10451]  dump_backtrace+0x1c4/0x1f0
[  257.058473][T10451]  show_stack+0x2c/0x3c
[  257.059247][T10451]  __dump_stack+0x30/0x40
[  257.060145][T10451]  dump_stack_lvl+0xf4/0x15c
[  257.061138][T10451]  dump_stack+0x1c/0x5c
[  257.061920][T10451]  should_fail_ex+0x3cc/0x524
[  257.062824][T10451]  __should_failslab+0xc0/0x11c
[  257.063674][T10451]  should_failslab+0x10/0x28
[  257.064464][T10451]  __kmem_cache_alloc_node+0x7c/0x318
[  257.065407][T10451]  __kmalloc+0xc4/0x180
[  257.066140][T10451]  memcg_list_lru_alloc+0x190/0x8bc
[  257.067131][T10451]  slab_pre_alloc_hook+0x2cc/0x31c
[  257.068009][T10451]  kmem_cache_alloc_lru+0x60/0x284
[  257.068938][T10451]  new_inode_pseudo+0xdc/0x1cc
[  257.069838][T10451]  new_inode+0x38/0x174
[  257.070541][T10451]  binderfs_create_file+0x10c/0x348
[  257.071456][T10451]  binder_open+0x774/0xa60
[  257.072263][T10451]  do_dentry_open+0x738/0xf8c
[  257.073116][T10451]  vfs_open+0x7c/0x90
[  257.073828][T10451]  path_openat+0x1fc0/0x27a0
[  257.074630][T10451]  do_filp_open+0x198/0x38c
[  257.075426][T10451]  do_sys_openat2+0x134/0x3fc
[  257.076258][T10451]  __arm64_sys_openat+0x11c/0x150
[  257.077122][T10451]  invoke_syscall+0x98/0x290
[  257.077950][T10451]  el0_svc_common+0x13c/0x258
[  257.078789][T10451]  do_el0_svc+0x5c/0x134
[  257.079594][T10451]  el0_svc+0x58/0x12c
[  257.080304][T10451]  el0t_64_sync_handler+0x84/0xf0
[  257.081221][T10451]  el0t_64_sync+0x18c/0x190
[  257.350079][T10451] binder: Unable to create file 10450 in binderfs (error -12)
[  257.417382][T10464] FAULT_INJECTION: forcing a failure.
[  257.417382][T10464] name failslab, interval 1, probability 0, space 0, times 0
[  257.422076][T10464] CPU: 0 PID: 10464 Comm: syz.0.1826 Not tainted syzkaller #0
[  257.423367][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  257.425157][T10464] Call trace:
[  257.425829][T10464]  dump_backtrace+0x1c4/0x1f0
[  257.426722][T10464]  show_stack+0x2c/0x3c
[  257.427522][T10464]  __dump_stack+0x30/0x40
[  257.428396][T10464]  dump_stack_lvl+0xf4/0x15c
[  257.429296][T10464]  dump_stack+0x1c/0x5c
[  257.430090][T10464]  should_fail_ex+0x3cc/0x524
[  257.430930][T10464]  __should_failslab+0xc0/0x11c
[  257.431808][T10464]  should_failslab+0x10/0x28
[  257.432617][T10464]  __kmem_cache_alloc_node+0x7c/0x318
[  257.433580][T10464]  kmalloc_trace+0x48/0x94
[  257.434339][T10464]  vidtv_psi_service_desc_init+0xb0/0x46c
[  257.435341][T10464]  vidtv_psi_desc_clone+0x148/0x808
[  257.436272][T10464]  vidtv_channel_si_init+0x474/0x124c
[  257.437242][T10464]  vidtv_mux_init+0x3ac/0x1554
[  257.438118][T10464]  vidtv_start_feed+0x2e0/0x49c
[  257.439121][T10464]  dmx_section_feed_start_filtering+0x328/0x464
[  257.440296][T10464]  dvb_dmxdev_filter_start+0xafc/0xf10
[  257.441267][T10464]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  257.442170][T10464]  dvb_demux_do_ioctl+0x410/0x4d8
[  257.443061][T10464]  dvb_usercopy+0x248/0x45c
[  257.443867][T10464]  dvb_demux_ioctl+0x3c/0x54
[  257.444658][T10464]  __arm64_sys_ioctl+0x14c/0x1c8
[  257.445561][T10464]  invoke_syscall+0x98/0x290
[  257.446389][T10464]  el0_svc_common+0x13c/0x258
[  257.447186][T10464]  do_el0_svc+0x5c/0x134
[  257.447934][T10464]  el0_svc+0x58/0x12c
[  257.448660][T10464]  el0t_64_sync_handler+0x84/0xf0
[  257.449557][T10464]  el0t_64_sync+0x18c/0x190
[  257.934964][T10491] loop0: detected capacity change from 0 to 128
[  257.938590][T10491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  257.960862][T10496] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1833'.
[  257.984934][T10496] device macvlan0 entered promiscuous mode
[  258.022085][T10496] netlink: 'syz.8.1833': attribute type 1 has an invalid length.
[  258.023608][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1833'.
[  258.407467][T10507] FAULT_INJECTION: forcing a failure.
[  258.407467][T10507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.417689][T10507] CPU: 0 PID: 10507 Comm: syz.8.1837 Not tainted syzkaller #0
[  258.419004][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  258.420739][T10507] Call trace:
[  258.421320][T10507]  dump_backtrace+0x1c4/0x1f0
[  258.422224][T10507]  show_stack+0x2c/0x3c
[  258.422977][T10507]  __dump_stack+0x30/0x40
[  258.423758][T10507]  dump_stack_lvl+0xf4/0x15c
[  258.424619][T10507]  dump_stack+0x1c/0x5c
[  258.425374][T10507]  should_fail_ex+0x3cc/0x524
[  258.426217][T10507]  should_fail+0x14/0x24
[  258.426936][T10507]  should_fail_usercopy+0x20/0x30
[  258.427827][T10507]  copy_from_bpfptr+0x84/0x1d8
[  258.428682][T10507]  __sys_bpf+0x1f8/0x660
[  258.429403][T10507]  __arm64_sys_bpf+0x80/0x98
[  258.430200][T10507]  invoke_syscall+0x98/0x290
[  258.430979][T10507]  el0_svc_common+0x13c/0x258
[  258.431821][T10507]  do_el0_svc+0x5c/0x134
[  258.432593][T10507]  el0_svc+0x58/0x12c
[  258.433275][T10507]  el0t_64_sync_handler+0x84/0xf0
[  258.434283][T10507]  el0t_64_sync+0x18c/0x190
[  258.452578][T10509] FAULT_INJECTION: forcing a failure.
[  258.452578][T10509] name failslab, interval 1, probability 0, space 0, times 0
[  258.458479][T10509] CPU: 0 PID: 10509 Comm: syz.7.1838 Not tainted syzkaller #0
[  258.459855][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  258.461683][T10509] Call trace:
[  258.462270][T10509]  dump_backtrace+0x1c4/0x1f0
[  258.463114][T10509]  show_stack+0x2c/0x3c
[  258.463895][T10509]  __dump_stack+0x30/0x40
[  258.464691][T10509]  dump_stack_lvl+0xf4/0x15c
[  258.465487][T10509]  dump_stack+0x1c/0x5c
[  258.466224][T10509]  should_fail_ex+0x3cc/0x524
[  258.467056][T10509]  __should_failslab+0xc0/0x11c
[  258.467938][T10509]  should_failslab+0x10/0x28
[  258.468737][T10509]  kmem_cache_alloc+0x88/0x310
[  258.469545][T10509]  security_inode_alloc+0x38/0x11c
[  258.470491][T10509]  inode_init_always+0x6c8/0xb28
[  258.471382][T10509]  new_inode_pseudo+0x7c/0x1cc
[  258.472251][T10509]  new_inode+0x38/0x174
[  258.472971][T10509]  binderfs_create_file+0x10c/0x348
[  258.473873][T10509]  binder_open+0x774/0xa60
[  258.474674][T10509]  do_dentry_open+0x738/0xf8c
[  258.475450][T10509]  vfs_open+0x7c/0x90
[  258.476136][T10509]  path_openat+0x1fc0/0x27a0
[  258.477120][T10509]  do_filp_open+0x198/0x38c
[  258.478044][T10509]  do_sys_openat2+0x134/0x3fc
[  258.478885][T10509]  __arm64_sys_openat+0x11c/0x150
[  258.479790][T10509]  invoke_syscall+0x98/0x290
[  258.480635][T10509]  el0_svc_common+0x13c/0x258
[  258.481466][T10509]  do_el0_svc+0x5c/0x134
[  258.482254][T10509]  el0_svc+0x58/0x12c
[  258.483028][T10509]  el0t_64_sync_handler+0x84/0xf0
[  258.483966][T10509]  el0t_64_sync+0x18c/0x190
[  258.503440][T10509] binder: Unable to create file 10508 in binderfs (error -12)
[  258.520696][T10515] loop8: detected capacity change from 0 to 128
[  258.994641][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'.
[  258.997472][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  259.094165][ T4339] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  259.155511][T10547] FAULT_INJECTION: forcing a failure.
[  259.155511][T10547] name failslab, interval 1, probability 0, space 0, times 0
[  259.157585][T10547] CPU: 1 PID: 10547 Comm: syz.0.1846 Not tainted syzkaller #0
[  259.158713][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  259.160492][T10547] Call trace:
[  259.161083][T10547]  dump_backtrace+0x1c4/0x1f0
[  259.161869][T10547]  show_stack+0x2c/0x3c
[  259.162557][T10547]  __dump_stack+0x30/0x40
[  259.163347][T10547]  dump_stack_lvl+0xf4/0x15c
[  259.164135][T10547]  dump_stack+0x1c/0x5c
[  259.164876][T10547]  should_fail_ex+0x3cc/0x524
[  259.165662][T10547]  __should_failslab+0xc0/0x11c
[  259.166476][T10547]  should_failslab+0x10/0x28
[  259.167457][T10547]  __kmem_cache_alloc_node+0x7c/0x318
[  259.168468][T10547]  kmalloc_trace+0x48/0x94
[  259.169257][T10547]  vidtv_psi_pat_program_init+0x64/0x228
[  259.170261][T10547]  vidtv_channel_si_init+0x180/0x124c
[  259.171222][T10547]  vidtv_mux_init+0x3ac/0x1554
[  259.172070][T10547]  vidtv_start_feed+0x2e0/0x49c
[  259.172976][T10547]  dmx_section_feed_start_filtering+0x328/0x464
[  259.174104][T10547]  dvb_dmxdev_filter_start+0xafc/0xf10
[  259.175077][T10547]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  259.175980][T10547]  dvb_demux_do_ioctl+0x410/0x4d8
[  259.176838][T10547]  dvb_usercopy+0x248/0x45c
[  259.177603][T10547]  dvb_demux_ioctl+0x3c/0x54
[  259.178369][T10547]  __arm64_sys_ioctl+0x14c/0x1c8
[  259.179247][T10547]  invoke_syscall+0x98/0x290
[  259.180047][T10547]  el0_svc_common+0x13c/0x258
[  259.180855][T10547]  do_el0_svc+0x5c/0x134
[  259.181594][T10547]  el0_svc+0x58/0x12c
[  259.182338][T10547]  el0t_64_sync_handler+0x84/0xf0
[  259.183290][T10547]  el0t_64_sync+0x18c/0x190
[  259.587219][T10554] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1847'.
[  259.589047][T10554] netlink: 'syz.8.1847': attribute type 1 has an invalid length.
[  259.590452][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1847'.
[  259.624987][T10557] loop8: detected capacity change from 0 to 8
[  259.634229][T10557] SQUASHFS error: Failed to read block 0x285: -5
[  259.635512][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.636893][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.638207][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.639379][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.640640][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.644871][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.649490][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.650820][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.653297][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.654604][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.657131][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.658473][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.659779][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.661071][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.675130][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.676930][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.678541][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.679749][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.691100][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.693346][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.701689][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.706899][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.710368][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.713810][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.715844][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.719021][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.725031][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.727348][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.731107][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.735943][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.738241][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.741799][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.746651][T10557] SQUASHFS error: Failed to read block 0x0: -5
[  259.751043][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.755790][T10557] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.761395][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.768153][T10557] SQUASHFS error: read_indexes: reading block [283:0]
[  259.770210][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.780982][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.791925][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.805958][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.810787][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.825034][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.831007][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.840919][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.852744][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.860376][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.871133][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.878857][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.888709][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.896353][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  259.902170][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  259.906777][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  259.909185][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  260.008107][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  260.009363][T10561] SQUASHFS error: Failed to read block 0x0: -5
[  260.010418][T10561] SQUASHFS error: Unable to read metadata cache entry [283]
[  260.011579][T10561] SQUASHFS error: read_indexes: reading block [283:0]
[  260.083614][T10590] loop6: detected capacity change from 0 to 128
[  260.097364][T10590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  260.532416][T10585] loop7: detected capacity change from 0 to 32768
[  260.556305][T10585] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  261.135543][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  261.168970][T10624] loop6: detected capacity change from 0 to 128
[  261.171120][ T8443] ocfs2: Unmounting device (7,7) on (node local)
[  261.258962][T10629] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1858'.
[  261.260886][T10629] device macvlan0 entered promiscuous mode
[  261.262158][T10629] netlink: 'syz.7.1858': attribute type 1 has an invalid length.
[  261.263688][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1858'.
[  261.293646][T10631] FAULT_INJECTION: forcing a failure.
[  261.293646][T10631] name failslab, interval 1, probability 0, space 0, times 0
[  261.298381][T10631] CPU: 1 PID: 10631 Comm: syz.0.1859 Not tainted syzkaller #0
[  261.299580][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  261.301281][T10631] Call trace:
[  261.301840][T10631]  dump_backtrace+0x1c4/0x1f0
[  261.302705][T10631]  show_stack+0x2c/0x3c
[  261.303457][T10631]  __dump_stack+0x30/0x40
[  261.304251][T10631]  dump_stack_lvl+0xf4/0x15c
[  261.305081][T10631]  dump_stack+0x1c/0x5c
[  261.305856][T10631]  should_fail_ex+0x3cc/0x524
[  261.306750][T10631]  __should_failslab+0xc0/0x11c
[  261.307693][T10631]  should_failslab+0x10/0x28
[  261.308585][T10631]  __kmem_cache_alloc_node+0x7c/0x318
[  261.309589][T10631]  kmalloc_trace+0x48/0x94
[  261.310354][T10631]  vidtv_psi_short_event_desc_init+0xf0/0x558
[  261.311393][T10631]  vidtv_psi_desc_clone+0x2f0/0x808
[  261.312475][T10631]  vidtv_channel_si_init+0x738/0x124c
[  261.313552][T10631]  vidtv_mux_init+0x3ac/0x1554
[  261.314441][T10631]  vidtv_start_feed+0x2e0/0x49c
[  261.315340][T10631]  dmx_section_feed_start_filtering+0x328/0x464
[  261.316517][T10631]  dvb_dmxdev_filter_start+0xafc/0xf10
[  261.317510][T10631]  dvb_dmxdev_filter_set+0x2cc/0x57c
[  261.318493][T10631]  dvb_demux_do_ioctl+0x410/0x4d8
[  261.319427][T10631]  dvb_usercopy+0x248/0x45c
[  261.320296][T10631]  dvb_demux_ioctl+0x3c/0x54
[  261.321109][T10631]  __arm64_sys_ioctl+0x14c/0x1c8
[  261.321982][T10631]  invoke_syscall+0x98/0x290
[  261.322851][T10631]  el0_svc_common+0x13c/0x258
[  261.323714][T10631]  do_el0_svc+0x5c/0x134
[  261.324495][T10631]  el0_svc+0x58/0x12c
[  261.325261][T10631]  el0t_64_sync_handler+0x84/0xf0
[  261.326217][T10631]  el0t_64_sync+0x18c/0x190
[  261.620543][T10640] loop7: detected capacity change from 0 to 512
[  261.656373][T10640] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  261.905262][T10661] loop5: detected capacity change from 0 to 7
[  261.907581][T10204] Dev loop5: unable to read RDB block 7
[  261.908807][T10204]  loop5: unable to read partition table
[  261.910052][T10204] loop5: partition table beyond EOD, truncated
[  261.927143][T10661] Dev loop5: unable to read RDB block 7
[  261.928138][T10661]  loop5: unable to read partition table
[  261.929149][T10661] loop5: partition table beyond EOD, truncated
[  261.930151][T10661] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5)
[  261.948519][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1862'.
[  262.164582][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1865'.
[  262.485431][T10692] loop6: detected capacity change from 0 to 164
[  262.937114][T10700] device syzkaller1 entered promiscuous mode
[  263.135224][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  263.190619][T10716] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1872'.
[  263.192914][T10716] netlink: 'syz.7.1872': attribute type 1 has an invalid length.
[  263.194483][T10716] netlink: 'syz.7.1872': attribute type 2 has an invalid length.
[  263.295704][T10726] loop0: detected capacity change from 0 to 128
[  263.988783][T10740] device syzkaller1 entered promiscuous mode
[  264.214124][T10767] loop0: detected capacity change from 0 to 164
[  264.551976][T10772] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1888'.
[  264.553925][T10772] netlink: 'syz.7.1888': attribute type 1 has an invalid length.
[  264.555374][T10772] netlink: 'syz.7.1888': attribute type 2 has an invalid length.
[  264.838908][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1890'.
[  265.185376][T10796] syz.0.1893 uses obsolete (PF_INET,SOCK_PACKET)
[  265.569803][T10810] loop7: detected capacity change from 0 to 128
[  265.609088][T10812] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1899'.
[  265.611002][T10812] netlink: 'syz.8.1899': attribute type 1 has an invalid length.
[  265.613303][T10812] netlink: 'syz.8.1899': attribute type 2 has an invalid length.
[  265.637268][T10817] device syzkaller1 entered promiscuous mode
[  265.693675][T10822] loop0: detected capacity change from 0 to 512
[  265.699663][T10822] EXT4-fs (loop0): Test dummy encryption mode enabled
[  265.997128][T10822] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1901: inode has both inline data and extents flags
[  265.999696][T10822] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1901: couldn't read orphan inode 15 (err -117)
[  266.004699][T10822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  266.011708][T10830] loop6: detected capacity change from 0 to 164
[  266.567036][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  266.732987][T10861] FAULT_INJECTION: forcing a failure.
[  266.732987][T10861] name fail_futex, interval 1, probability 0, space 0, times 0
[  266.736308][T10861] CPU: 0 PID: 10861 Comm: syz.8.1909 Not tainted syzkaller #0
[  266.737664][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  266.739303][T10861] Call trace:
[  266.739844][T10861]  dump_backtrace+0x1c4/0x1f0
[  266.740661][T10861]  show_stack+0x2c/0x3c
[  266.741441][T10861]  __dump_stack+0x30/0x40
[  266.742241][T10861]  dump_stack_lvl+0xf4/0x15c
[  266.743104][T10861]  dump_stack+0x1c/0x5c
[  266.743885][T10861]  should_fail_ex+0x3cc/0x524
[  266.744879][T10861]  should_fail+0x14/0x24
[  266.745774][T10861]  get_futex_key+0x904/0xfb0
[  266.746625][T10861]  futex_wake+0x10c/0x458
[  266.747364][T10861]  do_futex+0x2c4/0x340
[  266.748132][T10861]  __arm64_sys_futex+0x390/0x414
[  266.749004][T10861]  invoke_syscall+0x98/0x290
[  266.749879][T10861]  el0_svc_common+0x13c/0x258
[  266.750762][T10861]  do_el0_svc+0x5c/0x134
[  266.751622][T10861]  el0_svc+0x58/0x12c
[  266.752440][T10861]  el0t_64_sync_handler+0x84/0xf0
[  266.753414][T10861]  el0t_64_sync+0x18c/0x190
[  266.759458][T10866] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1911'.
[  267.178170][T10866] netlink: 'syz.7.1911': attribute type 1 has an invalid length.
[  267.179705][T10866] netlink: 'syz.7.1911': attribute type 2 has an invalid length.
[  268.563174][T10932] loop7: detected capacity change from 0 to 164
[  269.364206][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1930'.
[  269.694368][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1932'.
[  270.169728][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.171418][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.240676][T10984] 9pnet_fd: Insufficient options for proto=fd
[  270.307903][T10980] FAULT_INJECTION: forcing a failure.
[  270.307903][T10980] name fail_futex, interval 1, probability 0, space 0, times 0
[  270.310412][T10980] CPU: 1 PID: 10980 Comm: syz.6.1935 Not tainted syzkaller #0
[  270.311684][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  270.313617][T10980] Call trace:
[  270.314225][T10980]  dump_backtrace+0x1c4/0x1f0
[  270.315170][T10980]  show_stack+0x2c/0x3c
[  270.315997][T10980]  __dump_stack+0x30/0x40
[  270.316880][T10980]  dump_stack_lvl+0xf4/0x15c
[  270.317711][T10980]  dump_stack+0x1c/0x5c
[  270.318501][T10980]  should_fail_ex+0x3cc/0x524
[  270.319319][T10980]  should_fail+0x14/0x24
[  270.320098][T10980]  get_futex_key+0x904/0xfb0
[  270.320919][T10980]  futex_wake+0x10c/0x458
[  270.321712][T10980]  do_futex+0x2c4/0x340
[  270.322480][T10980]  __arm64_sys_futex+0x390/0x414
[  270.323396][T10980]  invoke_syscall+0x98/0x290
[  270.324245][T10980]  el0_svc_common+0x13c/0x258
[  270.325080][T10980]  do_el0_svc+0x5c/0x134
[  270.325811][T10980]  el0_svc+0x58/0x12c
[  270.326529][T10980]  el0t_64_sync_handler+0x84/0xf0
[  270.327454][T10980]  el0t_64_sync+0x18c/0x190
[  270.601776][T10986] loop8: detected capacity change from 0 to 1024
[  271.087261][ T4418] hfsplus: b-tree write err: -5, ino 25
[  271.090024][ T4418] hfsplus: b-tree write err: -5, ino 4
[  271.091159][ T4418] hfsplus: b-tree write err: -5, ino 2
[  271.701024][T11025] loop6: detected capacity change from 0 to 164
[  272.327731][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1946'.
[  273.165860][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1953'.
[  273.892518][T11087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1957'.
[  273.928474][T11087] device macvlan0 entered promiscuous mode
[  273.937038][T11087] netlink: 'syz.1.1957': attribute type 1 has an invalid length.
[  273.941004][T11087] netlink: 'syz.1.1957': attribute type 2 has an invalid length.
[  273.971663][T11102] loop0: detected capacity change from 0 to 164
[  274.793189][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1960'.
[  275.494310][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'.
[  275.943514][T11137] loop8: detected capacity change from 0 to 1024
[  276.189460][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'.
[  276.542815][ T6766] hfsplus: b-tree write err: -5, ino 25
[  276.544184][ T6766] hfsplus: b-tree write err: -5, ino 4
[  276.545281][ T6766] hfsplus: b-tree write err: -5, ino 2
[  276.864435][T11142] loop0: detected capacity change from 0 to 1024
[  277.240140][ T1609] hfsplus: b-tree write err: -5, ino 25
[  277.241551][ T1609] hfsplus: b-tree write err: -5, ino 4
[  277.242712][ T1609] hfsplus: b-tree write err: -5, ino 2
[  278.368178][T11171] loop6: detected capacity change from 0 to 512
[  278.392457][T11171] EXT4-fs (loop6): Test dummy encryption mode enabled
[  278.418465][T11171] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1979: inode has both inline data and extents flags
[  278.420848][T11171] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1979: couldn't read orphan inode 15 (err -117)
[  278.423330][T11171] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  278.572615][T11176] loop7: detected capacity change from 0 to 1024
[  279.448105][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'.
[  279.780996][ T4991] hfsplus: b-tree write err: -5, ino 25
[  279.782488][ T4991] hfsplus: b-tree write err: -5, ino 4
[  279.783666][ T4991] hfsplus: b-tree write err: -5, ino 2
[  279.863013][T11188] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1982'.
[  279.866947][T11188] netlink: 'syz.7.1982': attribute type 1 has an invalid length.
[  279.870741][T11188] netlink: 'syz.7.1982': attribute type 2 has an invalid length.
[  280.357175][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  280.394725][T11200] loop5: detected capacity change from 0 to 7
[  280.404130][T11200] Dev loop5: unable to read RDB block 7
[  280.407690][T11200]  loop5: AHDI p1 p2 p3
[  280.414083][T11200] loop5: partition table partially beyond EOD, truncated
[  280.417649][T11200] loop5: p1 start 1818582900 is beyond EOD, truncated
[  280.419041][T11200] loop5: p3 start 335544320 is beyond EOD, truncated
[  280.919617][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1987'.
[  281.036117][T11216] loop8: detected capacity change from 0 to 1024
[  281.500089][ T8719] hfsplus: b-tree write err: -5, ino 25
[  281.501412][ T8719] hfsplus: b-tree write err: -5, ino 4
[  281.503884][ T8719] hfsplus: b-tree write err: -5, ino 2
[  282.759778][T11231] loop6: detected capacity change from 0 to 128
[  282.820066][T11235] loop8: detected capacity change from 0 to 512
[  283.797128][T11235] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  284.312925][T11266] loop7: detected capacity change from 0 to 1024
[  284.519611][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1998'.
[  284.555373][ T4991] hfsplus: b-tree write err: -5, ino 25
[  284.556561][ T4991] hfsplus: b-tree write err: -5, ino 4
[  284.557658][ T4991] hfsplus: b-tree write err: -5, ino 2
[  285.960940][T11294] loop6: detected capacity change from 0 to 512
[  285.968382][T11294] EXT4-fs (loop6): Test dummy encryption mode enabled
[  286.025300][T11299] loop0: detected capacity change from 0 to 128
[  286.048924][T11294] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.2016: inode has both inline data and extents flags
[  286.051715][T11294] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2016: couldn't read orphan inode 15 (err -117)
[  286.056112][T11299] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  286.059256][T11294] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  286.166963][ T8467] EXT4-fs (loop8): unmounting filesystem.
[  286.820959][T11299] overlayfs: upper fs needs to support d_type.
[  286.913260][T11299] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  286.914711][T11299] overlayfs: failed to set xattr on upper
[  286.920258][T11299] overlayfs: ...falling back to index=off,metacopy=off.
[  286.921390][T11299] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  287.011459][T11299] overlayfs: failed to resolve 'lower': -2
[  287.079401][T11306] loop8: detected capacity change from 0 to 1024
[  287.506432][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  288.102669][ T1609] hfsplus: b-tree write err: -5, ino 25
[  288.103940][ T1609] hfsplus: b-tree write err: -5, ino 4
[  288.105010][ T1609] hfsplus: b-tree write err: -5, ino 2
[  288.231039][T11337] loop7: detected capacity change from 0 to 512
[  288.263496][T11337] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  288.673064][T11348] loop8: detected capacity change from 0 to 128
[  289.092863][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2028'.
[  289.217661][T11352] loop6: detected capacity change from 0 to 40427
[  289.232730][T11350] loop0: detected capacity change from 0 to 40427
[  289.235744][T11352] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  289.241552][T11352] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  289.249364][T11350] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  289.250848][T11350] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  289.254507][T11350] F2FS-fs (loop0): invalid crc value
[  289.256797][T11352] F2FS-fs (loop6): invalid crc value
[  289.485588][T11350] F2FS-fs (loop0): Found nat_bits in checkpoint
[  290.013555][T11352] F2FS-fs (loop6): Found nat_bits in checkpoint
[  290.065335][T11350] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  290.067824][T11350] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  290.069963][T11352] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  290.071137][T11352] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  292.327443][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  292.586560][T11389] loop7: detected capacity change from 0 to 1024
[  292.598236][T11389] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  292.642124][T11389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  294.081747][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  294.729730][T11424] loop6: detected capacity change from 0 to 512
[  294.783070][T11424] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  295.221762][T11439] overlayfs: failed to clone upperpath
[  295.866781][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2050'.
[  296.348044][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  296.919285][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2067'.
[  298.748820][T11495] loop7: detected capacity change from 0 to 40427
[  298.765660][T11495] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  298.768292][T11495] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  298.776447][T11495] F2FS-fs (loop7): invalid crc value
[  298.799362][T11495] F2FS-fs (loop7): Found nat_bits in checkpoint
[  298.857313][T11495] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  298.858615][T11495] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  300.114197][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2077'.
[  300.613198][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.615298][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.437170][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'.
[  302.059407][T11556] loop7: detected capacity change from 0 to 4096
[  302.064965][T11556] EXT4-fs: Ignoring removed orlov option
[  302.066166][T11556] EXT4-fs: Ignoring removed orlov option
[  302.067745][T11556] EXT4-fs (loop7): Test dummy encryption mode enabled
[  302.121930][ T4335] Bluetooth: hci5: command 0x0406 tx timeout
[  302.172135][ T4339] Bluetooth: hci6: command 0x0406 tx timeout
[  302.172679][ T4335] Bluetooth: hci2: command 0x0406 tx timeout
[  302.197292][T11556] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  302.275851][T11556] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  302.279400][T11564] loop5: detected capacity change from 0 to 7
[  302.286510][T11564] Dev loop5: unable to read RDB block 7
[  302.287654][T11564]  loop5: AHDI p1 p2 p3
[  302.288341][T11564] loop5: partition table partially beyond EOD, truncated
[  302.302137][T11564] loop5: p1 start 1818582900 is beyond EOD, truncated
[  302.303502][T11564] loop5: p3 start 335544320 is beyond EOD, truncated
[  303.616739][ T8443] EXT4-fs (loop7): unmounting filesystem.
[  303.664263][T11575] loop6: detected capacity change from 0 to 164
[  304.141643][T11576] loop8: detected capacity change from 0 to 40427
[  304.147529][T11576] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  304.148949][T11576] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  304.154849][T11576] F2FS-fs (loop8): invalid crc value
[  304.181712][T11576] F2FS-fs (loop8): Found nat_bits in checkpoint
[  304.205072][T11576] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  304.206650][T11576] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  305.096141][T11593] device vlan2 entered promiscuous mode
[  305.097264][T11593] device team0 entered promiscuous mode
[  305.098376][T11593] device team_slave_0 entered promiscuous mode
[  305.099633][T11593] device team_slave_1 entered promiscuous mode
[  306.017729][T11616] loop5: detected capacity change from 0 to 7
[  306.019546][T10204] Dev loop5: unable to read RDB block 7
[  306.020496][T10204]  loop5: AHDI p1 p2 p3
[  306.021404][T10204] loop5: partition table partially beyond EOD, truncated
[  306.023422][T10204] loop5: p1 start 1818582900 is beyond EOD, truncated
[  306.024487][T10204] loop5: p3 start 335544320 is beyond EOD, truncated
[  306.031203][T11616] Dev loop5: unable to read RDB block 7
[  306.039728][T11616]  loop5: AHDI p1 p2 p3
[  306.040504][T11616] loop5: partition table partially beyond EOD, truncated
[  306.042495][T11616] loop5: p1 start 1818582900 is beyond EOD, truncated
[  306.043756][T11616] loop5: p3 start 335544320 is beyond EOD, truncated
[  307.341563][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2099'.
[  307.597563][T11627] loop6: detected capacity change from 0 to 164
[  308.257927][T11651] loop0: detected capacity change from 0 to 1024
[  308.475368][T11570] hfsplus: b-tree write err: -5, ino 25
[  308.476777][T11570] hfsplus: b-tree write err: -5, ino 4
[  308.477892][T11570] hfsplus: b-tree write err: -5, ino 2
[  308.670493][T11660] loop0: detected capacity change from 0 to 512
[  308.672442][T11660] EXT4-fs: Ignoring removed i_version option
[  308.676637][T11660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  308.678470][T11660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  308.771695][T11665] device vlan2 entered promiscuous mode
[  308.778517][T11665] device team0 entered promiscuous mode
[  308.790120][T11665] device team_slave_0 entered promiscuous mode
[  308.797312][T11665] device team_slave_1 entered promiscuous mode
[  308.801413][T11660] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  308.979088][T11671] loop5: detected capacity change from 0 to 7
[  308.986658][T10204] Dev loop5: unable to read RDB block 7
[  308.987940][T10204]  loop5: AHDI p1 p2 p3
[  308.988630][T10204] loop5: partition table partially beyond EOD, truncated
[  308.990716][T10204] loop5: p1 start 1818582900 is beyond EOD, truncated
[  308.994813][T10204] loop5: p3 start 335544320 is beyond EOD, truncated
[  309.030511][T11671] Dev loop5: unable to read RDB block 7
[  309.031732][T11671]  loop5: AHDI p1 p2 p3
[  309.036796][T11671] loop5: partition table partially beyond EOD, truncated
[  309.041551][T11671] loop5: p1 start 1818582900 is beyond EOD, truncated
[  309.050962][T11671] loop5: p3 start 335544320 is beyond EOD, truncated
[  309.243054][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'.
[  309.409357][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  309.637111][T11681] loop0: detected capacity change from 0 to 128
[  310.277629][T11697] loop8: detected capacity change from 0 to 1024
[  310.292944][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  310.300070][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  310.950863][ T9084] hfsplus: b-tree write err: -5, ino 25
[  310.954527][ T9084] hfsplus: b-tree write err: -5, ino 4
[  310.957092][ T9084] hfsplus: b-tree write err: -5, ino 2
[  311.482023][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  312.408760][T11742] FAULT_INJECTION: forcing a failure.
[  312.408760][T11742] name fail_futex, interval 1, probability 0, space 0, times 0
[  312.411961][T11742] CPU: 0 PID: 11742 Comm: syz.0.2142 Not tainted syzkaller #0
[  312.413382][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  312.415289][T11742] Call trace:
[  312.415915][T11742]  dump_backtrace+0x1c4/0x1f0
[  312.416814][T11742]  show_stack+0x2c/0x3c
[  312.417548][T11742]  __dump_stack+0x30/0x40
[  312.418375][T11742]  dump_stack_lvl+0xf4/0x15c
[  312.419185][T11742]  dump_stack+0x1c/0x5c
[  312.420028][T11742]  should_fail_ex+0x3cc/0x524
[  312.420873][T11742]  should_fail+0x14/0x24
[  312.421636][T11742]  get_futex_key+0x904/0xfb0
[  312.422420][T11742]  futex_wait_setup+0xbc/0x320
[  312.423340][T11742]  futex_wait+0x164/0x424
[  312.424114][T11742]  do_futex+0x2e8/0x340
[  312.424814][T11742]  __arm64_sys_futex+0x390/0x414
[  312.425661][T11742]  invoke_syscall+0x98/0x290
[  312.426477][T11742]  el0_svc_common+0x13c/0x258
[  312.427325][T11742]  do_el0_svc+0x5c/0x134
[  312.428115][T11742]  el0_svc+0x58/0x12c
[  312.428904][T11742]  el0t_64_sync_handler+0x84/0xf0
[  312.429839][T11742]  el0t_64_sync+0x18c/0x190
[  313.671536][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'.
[  314.314768][T11775] loop8: detected capacity change from 0 to 40427
[  314.319327][T11775] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  314.320650][T11775] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  314.324908][T11775] F2FS-fs (loop8): invalid crc value
[  314.396960][T11775] F2FS-fs (loop8): Found nat_bits in checkpoint
[  314.413614][T11775] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  314.414914][T11775] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  315.418313][T11810] loop6: detected capacity change from 0 to 128
[  315.514198][T11810] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  316.677642][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  317.125631][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2167'.
[  318.406762][T11854] device vlan2 entered promiscuous mode
[  318.408867][T11854] device team0 entered promiscuous mode
[  318.409846][T11854] device team_slave_0 entered promiscuous mode
[  318.417487][T11854] device team_slave_1 entered promiscuous mode
[  318.721565][T11863] loop0: detected capacity change from 0 to 128
[  318.740757][T11863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  319.999961][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  320.065979][T11890] FAULT_INJECTION: forcing a failure.
[  320.065979][T11890] name fail_futex, interval 1, probability 0, space 0, times 0
[  320.069534][T11890] CPU: 1 PID: 11890 Comm: syz.0.2181 Not tainted syzkaller #0
[  320.070843][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  320.072604][T11890] Call trace:
[  320.073266][T11890]  dump_backtrace+0x1c4/0x1f0
[  320.074114][T11890]  show_stack+0x2c/0x3c
[  320.074904][T11890]  __dump_stack+0x30/0x40
[  320.075707][T11890]  dump_stack_lvl+0xf4/0x15c
[  320.076537][T11890]  dump_stack+0x1c/0x5c
[  320.077291][T11890]  should_fail_ex+0x3cc/0x524
[  320.078111][T11890]  should_fail+0x14/0x24
[  320.078914][T11890]  get_futex_key+0x904/0xfb0
[  320.079731][T11890]  futex_wake+0x10c/0x458
[  320.080491][T11890]  do_futex+0x2c4/0x340
[  320.081266][T11890]  mm_release+0x190/0x274
[  320.082081][T11890]  exit_mm_release+0x30/0x40
[  320.082999][T11890]  exit_mm+0x50/0x290
[  320.083772][T11890]  do_exit+0x4d0/0x19ac
[  320.084531][T11890]  do_group_exit+0x198/0x238
[  320.085360][T11890]  get_signal+0x11f4/0x133c
[  320.086201][T11890]  do_notify_resume+0x364/0x2c84
[  320.087149][T11890]  el0_svc+0x9c/0x12c
[  320.087895][T11890]  el0t_64_sync_handler+0x84/0xf0
[  320.088809][T11890]  el0t_64_sync+0x18c/0x190
[  320.269482][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'.
[  320.719250][T11899] loop8: detected capacity change from 0 to 32768
[  320.735335][T11899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2184 (11899)
[  320.761470][T11899] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  320.764330][T11899] BTRFS info (device loop8): using sha256 (sha256-ce) checksum algorithm
[  320.766035][T11899] BTRFS info (device loop8): using free space tree
[  320.783267][T11899] BTRFS info (device loop8): enabling ssd optimizations
[  320.972723][ T8467] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  321.015542][T11925] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2188'.
[  321.050707][T11927] loop6: detected capacity change from 0 to 512
[  321.156567][T11927] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  321.316572][T11938] loop8: detected capacity change from 0 to 128
[  321.807859][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2187'.
[  322.106454][T11947] loop0: detected capacity change from 0 to 164
[  322.314006][ T8414] EXT4-fs (loop6): unmounting filesystem.
[  322.339676][T11955] ------------[ cut here ]------------
[  322.340868][T11955] kernel BUG at net/sunrpc/svc.c:605!
[  322.341817][T11955] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[  322.343161][T11955] Modules linked in:
[  322.343904][T11955] CPU: 1 PID: 11955 Comm: syz.8.2195 Not tainted syzkaller #0
[  322.345307][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  322.347224][T11955] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  322.348694][T11955] pc : svc_destroy+0x178/0x184
[  322.349589][T11955] lr : svc_destroy+0x178/0x184
[  322.350438][T11955] sp : ffff800022197930
[  322.351172][T11955] x29: ffff800022197930 x28: 1fffe0001b4bdc0f x27: ffff0000cd169c00
[  322.352560][T11955] x26: dfff800000000000 x25: ffff700004432f2c x24: ffff800022197960
[  322.353952][T11955] x23: ffff0000cd8a1000 x22: dfff800000000000 x21: 0000000000000001
[  322.355387][T11955] x20: ffff0000ce447468 x19: ffff0000ce447450 x18: 1fffe00033c1c97e
[  322.356857][T11955] x17: ffff80001641d000 x16: ffff8000082dd38c x15: 000000000004ffff
[  322.358305][T11955] x14: 0000000000000001 x13: 1fffe00033c1caf0 x12: 0000000000080000
[  322.359712][T11955] x11: 0000000000028f71 x10: ffff80002cdb6000 x9 : ffff800010f3ec14
[  322.361163][T11955] x8 : 0000000000028f72 x7 : ffff8000083bb394 x6 : 0000000000000000
[  322.362652][T11955] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  322.364133][T11955] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000
[  322.365608][T11955] Call trace:
[  322.366206][T11955]  svc_destroy+0x178/0x184
[  322.367152][T11955]  write_ports+0x850/0x9f0
[  322.367971][T11955]  nfsctl_transaction_write+0x114/0x164
[  322.369006][T11955]  vfs_write+0x2a8/0x7c8
[  322.369783][T11955]  ksys_write+0x12c/0x228
[  322.370603][T11955]  __arm64_sys_write+0x7c/0x90
[  322.371528][T11955]  invoke_syscall+0x98/0x290
[  322.372367][T11955]  el0_svc_common+0x13c/0x258
[  322.373219][T11955]  do_el0_svc+0x5c/0x134
[  322.373978][T11955]  el0_svc+0x58/0x12c
[  322.374711][T11955]  el0t_64_sync_handler+0x84/0xf0
[  322.375598][T11955]  el0t_64_sync+0x18c/0x190
[  322.376436][T11955] Code: 91026260 97c2d20a 17ffffc8 97c2d19b (d4210000) 
[  322.377703][T11955] ---[ end trace 0000000000000000 ]---
[  322.640109][T11955] Kernel panic - not syncing: Oops - BUG: Fatal exception
[  322.641361][T11955] SMP: stopping secondary CPUs
[  322.642230][T11955] Kernel Offset: disabled
[  322.642995][T11955] CPU features: 0x0a0000,000f0097,a65bfea7
[  322.644063][T11955] Memory Limit: none
[  322.901206][T11955] Rebooting in 86400 seconds..