last executing test programs:

5m38.549861478s ago: executing program 3 (id=81):
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040))
r0 = syz_open_pts(0xffffffffffffffff, 0x42)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCSBRK(r0, 0x400455c8, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xcf)

5m38.206367395s ago: executing program 3 (id=82):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000010800)={0x0, 0x0, &(0x7f00000107c0)={&(0x7f0000010840)=@delchain={0x13f8, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x9, 0x1}, {0x2, 0x2}}, [@f_rsvp6={{0xa}, {0x13c8, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x3, 0xd}, {0x4, 0x667, 0x5}, 0x4, 0x3, 0xc}}, @TCA_RSVP_SRC={0x14, 0x3, @private0}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x64aecc91}]}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_POLICE={0x454, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x8, 0x0, 0x6, 0x5b8, 0xe, 0x2, 0x8, 0x1, 0x85, 0x5, 0x3, 0x9, 0x8001, 0x6, 0x12e0879e, 0x5, 0x6, 0x81, 0x6, 0x4b3e, 0x6, 0x79, 0xaae, 0x3816, 0x2, 0xffff, 0x1ff, 0x4, 0x99, 0xf, 0x80, 0xe, 0x101, 0x0, 0x100, 0x5, 0x25, 0xc, 0x8, 0x5, 0x5, 0x9, 0x7fff, 0x0, 0x5, 0x6, 0x2, 0x7fff, 0x8537, 0x600000, 0x50000000, 0x200, 0x5, 0x8000, 0x3, 0xf5, 0x5, 0x7, 0x7, 0x8, 0x1, 0x5, 0xddf, 0x4, 0x9, 0x1, 0x800000, 0x80, 0x0, 0xf, 0x5, 0x915, 0x7f, 0xe419, 0x1, 0x9, 0x800, 0xfffffff8, 0x101, 0x400, 0xfffffbff, 0xe, 0x9, 0x1000, 0xffffff80, 0xe2, 0x8, 0x100, 0x3ff, 0x8, 0x2, 0x2, 0x0, 0xff3b, 0x1, 0x8, 0x0, 0x7, 0xffff, 0xd133, 0xdf, 0x8000, 0x10000, 0x44, 0x7, 0xb, 0x0, 0x5, 0x6, 0xffff, 0x9, 0x1b8, 0x2, 0x6, 0x4, 0x5, 0x1, 0x101, 0x6, 0x7ff, 0x6, 0x7ff, 0x1, 0x7fff, 0x81, 0x40, 0x9, 0xffffffff, 0x5, 0x9, 0x4, 0x3, 0x8, 0x2, 0x7452, 0x80, 0xffffffff, 0x490c1563, 0x5, 0x8, 0x6, 0x40, 0x0, 0x3, 0x2, 0x2, 0x1bb, 0x3, 0x0, 0x4, 0x6, 0x5, 0x3, 0x97, 0x3, 0x4, 0xffffff21, 0x4f, 0x4, 0xfff, 0x1, 0x0, 0x66ad, 0x9, 0x10001, 0x3, 0x1ff, 0x200, 0x828, 0x3, 0x0, 0x6, 0x6e16, 0x800000, 0xfffffff2, 0xfff, 0x7fff, 0x9, 0x8, 0xf, 0x25, 0x2, 0x5, 0xffffff7e, 0x4, 0x7, 0x25a, 0x8, 0x3, 0xffffffff, 0x0, 0x9, 0x3, 0x3, 0xfffffffc, 0xa5, 0x9, 0x0, 0xfffffff6, 0x1, 0x80, 0x5, 0x2, 0x1, 0xf, 0x61c, 0xfffffffe, 0x0, 0x0, 0x80, 0x101, 0x8001, 0x1ce, 0x9b20e01, 0x8, 0x81, 0x9, 0x10000, 0x2, 0xd, 0x8, 0x3, 0x3, 0x4, 0x200, 0x37, 0xf2, 0x401, 0x7fff, 0xfffffffc, 0x9, 0x8, 0x3, 0x7, 0x23e, 0x3, 0x1, 0x2, 0x1, 0x1, 0xe, 0x100, 0x7ff, 0x300, 0x26e, 0x81, 0x5, 0xffffffff, 0x40, 0x3, 0x5, 0x101, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5be, 0x7, 0x444f, 0x418, 0x2, {0x4d, 0x1, 0x36, 0x449, 0x7, 0x6}, {0x7, 0x0, 0xff, 0x1c0, 0x4, 0x2}, 0x2, 0x10000, 0x2}}]}, @TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_ACT={0xf04, 0x6, [@m_ct={0xb0, 0x1e, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_ZONE={0x6}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0xfffffffd, 0x20000000, 0xffffffff, 0x1}}, @TCA_CT_LABELS={0x14, 0x7, "4958a80c7d49e87dd42c66ca2fc48c6d"}, @TCA_CT_ACTION={0x6, 0x3, 0x6}]}, {0x35, 0x6, "95e57c141cfe7a93073d13f0f919199a2c0236c08d3f1c112e26483bf79401d53584c18efaa654671f574a9d3413e2d517"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xe50, 0x16, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x7fffffff, 0x8, 0x10000000, 0x5}, 0x8, 0x1c}, [{0xc, 0xe, 0x0, 0x101, 0xfffffffa, 0xf}, {0x8, 0x7, 0x2, 0xa75, 0xc}, {0x1ff, 0x8, 0xfffffff9, 0xf4, 0xfffffff9, 0x9f}, {0x6, 0x1, 0x0, 0xfff, 0x8, 0x7}, {0x7, 0xc, 0x5, 0x8ff, 0x0, 0x4}, {0x1, 0x4a7, 0x40, 0xa19, 0x3, 0x5}, {0x6720b25, 0x3, 0x91b, 0x21e7, 0x7fffffff, 0x8}, {0xfffffffd, 0xdc, 0x4, 0x6, 0x101, 0x9}, {0x0, 0xe, 0x1400, 0xd10a, 0xe, 0x5}, {0x7, 0xd, 0xfff, 0x5f, 0x81, 0x7f}, {0x9, 0x2f, 0x0, 0xfffffffd, 0x2, 0x2}, {0xe2e1, 0x5, 0x2, 0x5, 0x3ff, 0x9}, {0x2536, 0x7e1f, 0x80000000, 0x7629, 0x7f, 0xf}, {0x7f, 0x216, 0x8000, 0x2, 0x1, 0x7fff}, {0x1, 0x74, 0x200, 0x7, 0x9, 0x6}, {0x1, 0x5, 0xffffffff, 0x7, 0x1, 0x1a943daa}, {0xffffffff, 0x15, 0x9, 0x1, 0x9, 0x7}, {0x0, 0x9, 0x9, 0x4d, 0xa5c, 0x4}, {0x2, 0x2a4, 0x9, 0x1, 0x2e9, 0x6}, {0xffffffff, 0x3, 0x3, 0xae, 0x9, 0x1d2a}, {0x7, 0x8000, 0x3, 0x6, 0x14b, 0x8}, {0x5, 0x10000, 0x5, 0x3, 0x6, 0x1}, {0x7, 0x4, 0x7, 0x3, 0x8, 0xb8e}, {0x0, 0x0, 0x6, 0x106c, 0x1000}, {0xffffff01, 0xa8c6, 0xff, 0x80000000, 0x3, 0xb3}, {0xd7, 0x5925, 0x5, 0x7, 0x2, 0x4}, {0x9, 0x1, 0x426, 0x15041eec, 0xfffffffb, 0x8}, {0x2, 0x2, 0x1, 0x3, 0x5, 0x5}, {0x400, 0xff, 0x6, 0xfffffff8, 0x2, 0x3}, {0x7f, 0xd, 0x4, 0x5, 0x8, 0x1ff}, {0x5d, 0x77, 0x400, 0x709e, 0xffffffc0, 0x6b7e}, {0x6, 0x3, 0x0, 0xffffff87, 0x8000, 0xc}, {0x2, 0x6, 0x9, 0x80000001, 0x5}, {0x7, 0x6, 0x36, 0x8, 0x2, 0x1}, {0x883, 0x400, 0xffffff6e, 0x5, 0xfffffff9, 0x7}, {0x3ff, 0x1, 0x3e, 0x7, 0xd, 0x5693}, {0x3ff, 0x0, 0x0, 0x2000000, 0x2, 0x9}, {0x9, 0xeee3, 0x1, 0x0, 0x4e74, 0x7fff}, {0x7, 0x5, 0x0, 0x0, 0x6}, {0x2, 0x8, 0x1c, 0x61f, 0x5, 0x8e}, {0x40, 0xfffffff8, 0x1, 0xf8, 0x5, 0x6}, {0xffffff80, 0x7, 0xa, 0x9a, 0x3, 0x3}, {0x10000, 0xff, 0x0, 0x7, 0x101, 0x2}, {0x800, 0xfffffeff, 0x7, 0x8, 0x1}, {0x8, 0xffffff7f, 0x7db0, 0x7, 0x2, 0x3}, {0x1, 0x634b000, 0x7, 0x8, 0x9, 0x32a5}, {0xe6, 0x3603, 0x621, 0x4, 0x6, 0x6bf}, {0x5d5, 0x1, 0x3, 0xd6, 0x80000001}, {0x9, 0x1cb5, 0x9, 0x6, 0x899, 0xcf1a}, {0xd3, 0x10001, 0x80, 0x4d2b, 0x4, 0x7}, {0xb5, 0x5, 0x8, 0x984b, 0x10000, 0xd}, {0x80000001, 0x9, 0x0, 0x4, 0x5, 0x690}, {0xf4e9, 0x7ff, 0x200, 0x6, 0x8, 0xfffffff9}, {0x81, 0x7fff, 0x80, 0x2, 0x9, 0x8}, {0x4, 0x9, 0x3, 0x8, 0x3}, {0x9, 0x58, 0xe, 0x2, 0x81, 0x5}, {0xdd, 0x0, 0x2, 0x87cd92f4, 0x9, 0x5}, {0x100, 0x1, 0x3, 0x3, 0x4, 0xcc}, {0xa, 0x101, 0x1, 0x3, 0x8000, 0x4800}, {0x4, 0x3, 0x80000000, 0x6, 0x97c, 0x80}, {0x8, 0x8, 0x5, 0xff, 0xf760000, 0x7fffffff}, {0x1, 0x9, 0x3, 0x0, 0x219, 0x9}, {0x5, 0x9a85, 0x9, 0x5, 0x4, 0x2}, {0x0, 0x1, 0x2143, 0xe, 0x6, 0x695a}, {0x10000, 0x1, 0x1000, 0x838, 0xfc6, 0xd1b}, {0x10000, 0x9, 0x1, 0x1, 0x6, 0x9}, {0xfff, 0x16fe, 0x98d, 0x200, 0x80000001, 0x8}, {0x8, 0x9, 0x2, 0x0, 0x10001, 0x2}, {0x1, 0x18b, 0x81, 0x0, 0x5b5, 0x7}, {0x6, 0x5, 0x3, 0x6, 0x7fffffff, 0x7}, {0x7, 0x9, 0xfff, 0x7, 0xbb, 0x80}, {0x6, 0x1, 0x4, 0x2, 0x6}, {0xfffff000, 0x7, 0xc10, 0x80, 0x5d, 0x8001}, {0xfffffff7, 0x8, 0x8, 0x40, 0x7, 0x3ff}, {0x8, 0x8, 0x2, 0x2, 0x6, 0x2}, {0x1, 0x3, 0x1, 0x0, 0x4, 0x8}, {0x20000, 0x7, 0x7, 0xb08, 0xce0}, {0x1, 0x81, 0x9c9, 0x8, 0xfffffffe, 0x100}, {0x4d, 0x101, 0xe, 0x0, 0x80000000, 0x7}, {0x2, 0x9, 0x5, 0x8, 0x4, 0x1}, {0x9, 0x2, 0x2, 0x0, 0x1, 0x3}, {0x3, 0x6, 0x4, 0x9, 0x8, 0xd1}, {0xd6, 0x94f, 0x680, 0x2, 0x7f, 0x5}, {0x81, 0x200, 0x80000000, 0xf, 0x3, 0x4}, {0x7, 0x0, 0x2, 0x7, 0x7fffffff, 0x8}, {0x2, 0xfff, 0x0, 0xe97, 0x1, 0x7}, {0x0, 0x3d634caf, 0x915c, 0x7ff, 0x4}, {0x19, 0x80000000, 0x8, 0x0, 0x6, 0x6}, {0x2, 0xbf28, 0x401, 0x6, 0x0, 0x2}, {0x2, 0x5, 0xc8, 0xfffffffb, 0x7fffffff, 0x2}, {0x506, 0x761, 0x3, 0xfff, 0x3, 0x8}, {0x5, 0x9, 0x33, 0x1, 0x2, 0x2}, {0xffff, 0x0, 0x0, 0x0, 0xdb1, 0x8}, {0x7, 0xc8, 0x7f, 0x761ad2fd, 0x1, 0x1}, {0x3, 0xa, 0x2, 0x80000, 0xffff, 0x1000}, {0x5, 0x4, 0x2, 0x6a, 0x0, 0x2}, {0x7fffffff, 0x7a, 0x0, 0x7, 0x1, 0x5}, {0x7, 0xffff, 0x3, 0x2, 0x7, 0xffffffff}, {0x8000, 0x3, 0xa195, 0xed, 0x9, 0x4}, {0x80, 0x1, 0x2, 0x10000, 0x8, 0x7}, {0xe58f, 0x5, 0x3, 0xd66, 0x595, 0xc}, {0xb, 0x4, 0x7, 0x6, 0x0, 0x7}, {0x7f, 0xf, 0x0, 0x5, 0x10001, 0xd8b}, {0x7, 0x5, 0xe9a0, 0x3ff, 0x1, 0x1f63}, {0x4, 0xd8ee, 0x5, 0x2, 0x8, 0x2}, {0x9, 0x46, 0x0, 0x2, 0x3, 0x2}, {0x5, 0x80000001, 0x3, 0x8, 0x101, 0x9}, {0x0, 0x0, 0x7fffffff, 0x10001, 0x7, 0x1509}, {0x7f, 0xe, 0x94, 0x4, 0xfffffff0, 0x7}, {0x3, 0x2f, 0x5, 0xa9, 0x7, 0x6}, {0x3f6931de, 0x1, 0xc, 0x6, 0x800, 0x6781}, {0x100, 0x4, 0x10000, 0x65c, 0x4, 0x400}, {0xcc6a, 0x4, 0x62, 0x286b, 0xfffffff7, 0x9}, {0xe, 0x4, 0x36, 0x7, 0x0, 0x7}, {0x0, 0x1, 0x8, 0x7f, 0x80, 0x8db0}, {0x0, 0x8f, 0x7, 0x7, 0x4}, {0xfffffff8, 0x10, 0x1, 0x3, 0x5c000000, 0xfd}, {0x3ff, 0x2, 0x1, 0x3, 0x1, 0x1}, {0x2d, 0x5, 0xb, 0x4, 0x2, 0x3}, {0x3, 0x53b, 0x0, 0x6, 0xb, 0x9a9}, {0x1, 0x4, 0x1, 0x8, 0x80000, 0x100}, {0x9, 0x8, 0x5, 0xb, 0x2081, 0xc7b}, {0xef7, 0x3, 0x0, 0x3, 0x3, 0x6335}, {0x800, 0xd, 0x10001, 0x9c, 0x80000000, 0x3}, {0xb72, 0xfffffff9, 0xc, 0x7, 0x9131, 0x5f0}, {0x5, 0x9, 0x7, 0x8, 0x1, 0x4}, {0xb, 0x1, 0x2, 0x1000, 0x2, 0x7fff}, {0x9, 0x52, 0x34, 0x2, 0xfffffff8, 0x40}], [{0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x7}, {0x2}, {0x1}, {}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x13f8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m35.931335649s ago: executing program 3 (id=87):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000000b80)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b80)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000019bc0)='./tracing\x00', &(0x7f0000019c00)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019c40)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0)
pselect6(0x40, &(0x7f0000019c80)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000019cc0)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000019d00)={0x0, 0x989680}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000084070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, 0x0, 0x109, 0x2000000, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdcb2}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x7, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2={0xff, 0x3}, 0x8008, 0x700, 0x2, 0x3fffff}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)

5m34.340176867s ago: executing program 3 (id=89):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000300)=0x2, 0xf6)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="b94a6430e0d5", 0x6}], 0x1}, 0x95)
sendmsg$inet(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="aa", 0x1}], 0x1}, 0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0)
read$msr(r3, &(0x7f0000006740)=""/102376, 0x18fe8)
creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
process_vm_writev(r2, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000002c0)=""/35, 0x23}], 0x4, &(0x7f0000000b00)=[{&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/234, 0xea}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)=""/248, 0xf8}, {&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/91, 0x5b}], 0x8, 0x0)

5m25.627074047s ago: executing program 3 (id=101):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000000b80)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b80)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000019bc0)='./tracing\x00', &(0x7f0000019c00)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019c40)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0)
pselect6(0x40, &(0x7f0000019c80)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000019cc0)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000019d00)={0x0, 0x989680}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)

5m23.908113745s ago: executing program 3 (id=102):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f})
socket$inet(0x2, 0x2, 0x400000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0800, 0x0)
close(r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xa1d3, 0xe, 0x80}, {0x3, 0x60, 0x3, 0xc7}, {0x7f, 0x0, 0x2}, {0x1, 0x5, 0x8, 0x83b3}, {0x0, 0xca, 0x0, 0x5}, {0x5, 0x5, 0x5e, 0x3}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x46, 0x17, 0x2, {0x2f, './sys/module/kvm/parameters/nx_huge_pages/file0'}}, 0x38)
openat(r2, &(0x7f0000000100)='./file0\x00', 0x2003c0, 0x7)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640))
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000680)={'syzkaller0\x00', @broadcast})

5m8.770731839s ago: executing program 32 (id=102):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f})
socket$inet(0x2, 0x2, 0x400000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0800, 0x0)
close(r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xa1d3, 0xe, 0x80}, {0x3, 0x60, 0x3, 0xc7}, {0x7f, 0x0, 0x2}, {0x1, 0x5, 0x8, 0x83b3}, {0x0, 0xca, 0x0, 0x5}, {0x5, 0x5, 0x5e, 0x3}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x46, 0x17, 0x2, {0x2f, './sys/module/kvm/parameters/nx_huge_pages/file0'}}, 0x38)
openat(r2, &(0x7f0000000100)='./file0\x00', 0x2003c0, 0x7)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640))
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000680)={'syzkaller0\x00', @broadcast})

40.225187084s ago: executing program 0 (id=385):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x20, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)

38.616754715s ago: executing program 4 (id=388):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x2009}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x200000e, 0xe, 0x55, &(0x7f0000000e00)="a06ad876d56a0064d082778c3938", &(0x7f0000000e40)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000ec0), &(0x7f0000000f00)}, 0x28)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)
shutdown(r0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x5, 0x2)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8)
r5 = socket(0x10, 0x2, 0x4)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0, <r6=>0x0}, &(0x7f0000000340)=0x4c)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
r7 = socket$unix(0x1, 0x1, 0x0)
listen(r7, 0xffffff80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bind$unix(0xffffffffffffffff, &(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4004045)
io_uring_setup(0x1b81, &(0x7f00000008c0)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8})
syz_emit_ethernet(0x22, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
setresuid(0x0, r6, r6)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x90000, &(0x7f0000000980)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7f6d61702c63616368653d667363616368652c6e6f5365766d61702c63616368653d6d6d61702c63616368653d7265616461686561642c76657273696f6e3d3970323030302e4c2c63616368657461673d5b2c646f6e745f686173682c666f776e65723d", @ANYRESDEC=r4, @ANYBLOB=',measure,fowner<', @ANYRESDEC=r6, @ANYBLOB=',dont_measure,permit_directio,subj_user=o&,obj_type=,obj_user=,\x00'])
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640"], 0x60}}, 0x200040c0)

37.661595539s ago: executing program 4 (id=389):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000002bc0)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
mkdir(0x0, 0x1fd)
r4 = syz_open_dev$usbmon(&(0x7f000001bbc0), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f000001bc00), 0x20000007c, 0x0)
r6 = dup3(r4, r5, 0x0)
ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f000001bc40)={0x0, 0x0, 0x1})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000002880)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x1, 0x1, 0x3, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x100ac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x1869e, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000002b00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x200000000, 0xfffffff8, 0x2})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040))
r8 = syz_open_pts(r7, 0x42)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCSBRK(r8, 0x400455c8, 0x1)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x1)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000180)=0xcf)

34.473094678s ago: executing program 1 (id=391):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002d80)={0x0, 0x1c, &(0x7f0000002dc0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000002e00)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000002e40)=@assoc_value={<r2=>0x0}, &(0x7f0000002e80)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000002ec0)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

31.488190089s ago: executing program 4 (id=394):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000002bc0)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
mkdir(0x0, 0x1fd)
syz_open_dev$usbmon(&(0x7f000001bbc0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f000001bc00), 0x20000007c, 0x0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f000001bc40)={0x0, 0x0, 0x1})
r4 = syz_open_dev$sndpcmc(&(0x7f0000002840), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000002880)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x1, 0x1, 0x3, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x100ac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x1869e, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000002b00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x200000000, 0xfffffff8, 0x2})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040))
r6 = syz_open_pts(r5, 0x42)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x1)

31.468162127s ago: executing program 0 (id=395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002900010000000000100000000f000000080001"], 0x1c}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x58, r2, 0x801, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3203597dfac48362427a40c894"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}]}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r1, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3c58}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x40}, @NL80211_ATTR_PMK={0x14, 0xfe, "d006d2fdd45bba6e858a91d7fe4740f9"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4801)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000ec0)={{0x1009, 0x0, 0xfffffffc, 0x80, 'syz0\x00'}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})

30.21175756s ago: executing program 0 (id=396):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r1, &(0x7f0000000b80)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b80)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000019bc0)='./tracing\x00', &(0x7f0000019c00)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019c40)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0)
pselect6(0x40, &(0x7f0000019c80)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000019cc0)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000019d00)={0x0, 0x989680}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000084070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, 0x0, 0x109, 0x2000000, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdcb2}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x7, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2={0xff, 0x3}, 0x8008, 0x700, 0x2, 0x3fffff}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)

28.575506268s ago: executing program 0 (id=398):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000040)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x1, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x9, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x5)
r4 = socket(0x2b, 0x80801, 0x1)
sendmmsg$inet(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001ec0)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f000001aec0)=0x4)
socket$inet6(0xa, 0x80002, 0x0)
setns(0xc9, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f000001af00)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmsg$rds(r7, &(0x7f000001af40)={&(0x7f000001af80)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xab85d5c0d4fddf40}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x13, 0x13, &(0x7f0000001cc0)=ANY=[@ANYBLOB="18080000d0ff000000000000f2ff00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001d80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001dc0)=""/222, 0x0, 0x8}, 0x78)

27.109503045s ago: executing program 5 (id=399):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r2, &(0x7f0000002bc0)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
mkdir(0x0, 0x1fd)
syz_open_dev$usbmon(&(0x7f000001bbc0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f000001bc00), 0x20000007c, 0x0)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xcf)

25.509606238s ago: executing program 1 (id=400):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e00)={'ip6tnl0\x00', 0x0})
syz_usb_connect(0x5, 0xe2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000e45db340480b03201925010203010902d000030300100309046a0101d0f5f800072406000044a605240000010d240f010000000002000500d398050f40020184dc1166df0909046a0200ffaf91400904630506d35573ef0524060001052400ae0f0d240f010600000004000240113d2a4c72e80806241a01002808241cff0100010009050500ff0306080009"], 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x408c4)
mknod(0x0, 0xc000, 0x4)
write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x6004}, @val={0x0, 0x3, 0x8, 0x6, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xa, 0x28, 0x64, 0x0, 0x9, 0xff, 0x0, @private=0xa010101, @local}, "9307969e33fba2a3129004ba0000000000000000"}}, 0x36)

24.520256423s ago: executing program 2 (id=401):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000000b80)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b80)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000019bc0)='./tracing\x00', &(0x7f0000019c00)='tracefs\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000019c80)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000019cc0)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000019d00)={0x0, 0x989680}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000084070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r6)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r7, 0x109, 0x2000000, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdcb2}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0)
socket$inet6(0xa, 0x3, 0x7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)

22.780694444s ago: executing program 2 (id=402):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x181})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}})
r2 = syz_io_uring_setup(0x112, &(0x7f0000001740)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe, 0x0, r1}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000001880)='n', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000001b40)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="4c000000020601080000000000000000007809ff0000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000500010007000000050005000a"], 0x4c}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
syz_clone(0x24004800, &(0x7f00000000c0)="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", 0x1000, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="9079ab67baa3d37e25bb0161a3512c435203aa41")

21.044489984s ago: executing program 4 (id=403):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={<r4=>0x0}, &(0x7f0000000580)=0xc)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000005c0)=r4)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000440), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000004c0)={0x2001, 0x1, 0x3, 0x9, 0x4})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000280))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x401})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

21.025400717s ago: executing program 5 (id=404):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={<r4=>0x0}, &(0x7f0000000580)=0xc)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000005c0)=r4)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000440), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000004c0)={0x2001, 0x1, 0x3, 0x9, 0x4})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000280))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x401})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

20.860176927s ago: executing program 1 (id=405):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000002bc0)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
mkdir(0x0, 0x1fd)
r4 = syz_open_dev$usbmon(&(0x7f000001bbc0), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f000001bc00), 0x20000007c, 0x0)
dup3(r4, r5, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f0000002840), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000002880)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x1, 0x1, 0x3, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x100ac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x1869e, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000002b00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x200000000, 0xfffffff8, 0x2})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040))
r8 = syz_open_pts(r7, 0x42)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCSBRK(r8, 0x400455c8, 0x1)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x1)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000180)=0xcf)

19.141239849s ago: executing program 1 (id=406):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019540)=0x7)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80080)
listen(r0, 0xfffffffc)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000300)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup(r11)
syz_ublk_setup_queues(r12, r10, &(0x7f0000000340)={0x0, 0x41e9, 0x1, 0x3}, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf914, 0x10, 0x2, 0xe3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000019800)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r9, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)

18.433683492s ago: executing program 0 (id=407):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000002bc0)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
mkdir(0x0, 0x1fd)
syz_open_dev$usbmon(&(0x7f000001bbc0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f000001bc00), 0x20000007c, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000002840), 0x1, 0x2)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = syz_open_pts(r4, 0x42)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCSBRK(r5, 0x400455c8, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xc0)

12.564453298s ago: executing program 1 (id=408):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019540)=0x7)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80080)
listen(r0, 0xfffffffc)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40000)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, 0x0, 0xc040)
r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000200)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000300))

12.468767138s ago: executing program 0 (id=409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x75b9, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000005d00)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000005d40)={0x14, 0x0, &(0x7f0000005d80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000005dc0)={0x14, 0x0, &(0x7f0000005e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000005e40)={0x24, 0x0, &(0x7f0000005e80)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "8f820358d4c68aecf6ae868e9b15cb5c5c87806d49b7a94c0342dad02dc47ed41c4c8a837fdb904578cc8a1109"}}, 0x0, 0x0}, 0x0)
r3 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4492, &(0x7f00000000c0)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@noflushoncommit}]}, 0x0, 0x559e, &(0x7f0000000680)="$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")
close_range(r1, r3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100110000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100090000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100100000000c000500000000000a000000300000001900050000000000000000002d000000000000010000000005000100110000000c000500000000000a"], 0xe1c}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000180)=0x10)
r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000005ec0), 0x8000, 0x0)
ioctl$DM_DEV_SUSPEND(r5, 0xc138fd06, &(0x7f0000005f00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4000, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r6=>0x0]}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000240)={r6, 0x1}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000002c0)={r6, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7]}, &(0x7f00000003c0)=0x100)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000005c40)={r6, @in6={{0xa, 0x4e24, 0x44, @rand_addr=' \x01\x00', 0xffff}}}, 0x84)

11.487446999s ago: executing program 5 (id=410):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r1, &(0x7f0000000b80)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r3, 0x109, 0x2000000, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdcb2}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0)

11.460103089s ago: executing program 2 (id=411):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}}}}}}, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000180)='100', 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010400)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000010300), 0x42300, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000010340)=0x4000000)

9.209308783s ago: executing program 5 (id=412):
mkdirat(0xffffffffffffff9c, &(0x7f0000001780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000017c0)='./proc\x00', &(0x7f0000001900)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000001980)='27', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dy'])

7.894262592s ago: executing program 5 (id=413):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000002bc0)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
mkdir(0x0, 0x1fd)
syz_open_dev$usbmon(&(0x7f000001bbc0), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f000001bc40)={0x0, 0x0, 0x1})
r4 = syz_open_dev$sndpcmc(&(0x7f0000002840), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000002880)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x1, 0x1, 0x3, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x100ac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x1869e, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000002b00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x200000000, 0xfffffff8, 0x2})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040))
r6 = syz_open_pts(r5, 0x42)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x1)

7.773175494s ago: executing program 4 (id=414):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00')
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=<r3=>0x0)
sched_setscheduler(r3, 0x0, &(0x7f0000032280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r5, &(0x7f00000001c0)=""/102392, 0x18ff8)
pread64(r1, &(0x7f00000191c0)=""/102371, 0x18fe3, 0x4000)
creat(&(0x7f0000032240)='./file0\x00', 0x102)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt(r1, 0xc, 0xacd, &(0x7f00000321c0)="500408dc3926ddcec408c3bfbe8a4cdbdc97cec60a4aad3b91932996fabc1dffd8b7830ea0fe671921d875d41cebbab4fe924ad449fce02a520f2ed456ce6e5f4d288915232ad000f9b9c2e84d433c2924b53b838bc0d6e222a3cff1c806ac439066c0c43db545f61b08a0fa", 0x6c)

7.724578509s ago: executing program 2 (id=415):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e00)={'ip6tnl0\x00', 0x0})
syz_usb_connect(0x5, 0xe2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000e45db340480b03201925010203010902d000030300100309046a0101d0f5f800072406000044a605240000010d240f010000000002000500d398050f40020184dc1166df0909046a0200ffaf91400904630506d35573ef0524060001052400ae0f0d240f010600000004000240113d2a4c72e80806241a01002808241cff0100010009050500ff0306080009"], 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x408c4)
mknod(0x0, 0xc000, 0x4)
write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x6004}, @val={0x0, 0x3, 0x8, 0x6, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xa, 0x28, 0x64, 0x0, 0x9, 0xff, 0x0, @private=0xa010101, @local}, "9307969e33fba2a3129004ba0000000000000000"}}, 0x36)

6.093973743s ago: executing program 5 (id=416):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f0000000180)=[{{}, {<r2=>0x80000000, <r3=>0x0}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={r2, &(0x7f0000000240)=[{<r4=>0x80000000}], &(0x7f0000000300)=[{{}, {<r5=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000380)={r5, 0x0, &(0x7f00000003c0)=[{{<r6=>0x80000000, <r7=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000440)={{r4, r7, 0x2, [0x80000001, 0x8]}, {r6, r3, 0x2, [0x80, 0x3]}, 0x0, [0x7d, 0x8]}) (async)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) (async)
r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x100)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) (async)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="4004000025"], 0x0, 0x0})

3.427241872s ago: executing program 2 (id=417):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000040)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x1, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x9, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x5)
r4 = socket(0x2b, 0x80801, 0x1)
sendmmsg$inet(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000001ec0)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f000001aec0)=0x4)
socket$inet6(0xa, 0x80002, 0x0)
setns(0xc9, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f000001af00)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmsg$rds(r7, &(0x7f000001af40)={&(0x7f000001af80)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xab85d5c0d4fddf40}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x13, 0x13, &(0x7f0000001cc0)=ANY=[@ANYBLOB="18080000d0ff000000000000f2ff00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001d80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001dc0)=""/222, 0x0, 0x8}, 0x78)

2.049653829s ago: executing program 2 (id=418):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x81, 0xa082)
dup(r2)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000000c0)={0xa, "876ae3877aa1d000732322927842422c0f6a7e3dc2b68628178e6e9a279e88d8", 0x3, 0x3ff, 0x3, 0xc00000, 0x301, 0x2})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

393.58559ms ago: executing program 1 (id=419):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000002bc0)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
mkdir(0x0, 0x1fd)
syz_open_dev$usbmon(&(0x7f000001bbc0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f000001bc00), 0x20000007c, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000002840), 0x1, 0x2)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = syz_open_pts(r4, 0x42)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCSBRK(r5, 0x400455c8, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xc0)

0s ago: executing program 4 (id=420):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={<r4=>0x0}, &(0x7f0000000580)=0xc)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000005c0)=r4)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000440), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000004c0)={0x2001, 0x1, 0x3, 0x9, 0x4})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000280))
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x401})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

SS using preconfigured BSSID 50:50:50:50:50:50
[   96.995557][  T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.022032][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.080629][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.102164][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.102187][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.142952][ T5634] veth0_vlan: entered promiscuous mode
[   97.169893][   T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.171555][   T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.171749][   T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.171969][   T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.251866][ T5634] veth1_vlan: entered promiscuous mode
[   97.269661][ T5642] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.319527][ T5633] veth0_macvtap: entered promiscuous mode
[   97.365315][ T5633] veth1_macvtap: entered promiscuous mode
[   97.484728][  T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.484751][  T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.530373][ T5634] veth0_macvtap: entered promiscuous mode
[   97.540445][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.555819][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.585749][ T5634] veth1_macvtap: entered promiscuous mode
[   97.624884][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.624918][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.711655][ T5843] loop1: detected capacity change from 0 to 1764
[   97.744420][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.769595][   T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.821204][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.860529][  T263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.860581][  T263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.860622][  T263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.860660][  T263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.860697][  T263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.860736][  T263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.860773][  T263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.972153][ T5846] FAULT_INJECTION: forcing a failure.
[   97.972153][ T5846] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   97.972200][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) 
[   97.972224][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   97.972246][ T5846] Call Trace:
[   97.972255][ T5846]  <TASK>
[   97.972264][ T5846]  dump_stack_lvl+0xe8/0x150
[   97.972305][ T5846]  should_fail_ex+0x3eb/0x540
[   97.972343][ T5846]  _copy_to_user+0x31/0xb0
[   97.972388][ T5846]  simple_read_from_buffer+0xe1/0x170
[   97.972424][ T5846]  proc_fail_nth_read+0x1bb/0x230
[   97.972453][ T5846]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.972481][ T5846]  ? rw_verify_area+0x24a/0x4c0
[   97.972514][ T5846]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.972538][ T5846]  vfs_read+0x213/0xa80
[   97.972575][ T5846]  ? __pfx___mutex_lock+0x10/0x10
[   97.972602][ T5846]  ? __pfx_vfs_read+0x10/0x10
[   97.972634][ T5846]  ? __fget_files+0x2a/0x420
[   97.972662][ T5846]  ? __fget_files+0x3a2/0x420
[   97.972689][ T5846]  ? __fget_files+0x2a/0x420
[   97.972722][ T5846]  ? fdget+0x1ac/0x250
[   97.972758][ T5846]  ksys_read+0x150/0x270
[   97.972792][ T5846]  ? __pfx_ksys_read+0x10/0x10
[   97.972822][ T5846]  ? __pfx_sock_ioctl+0x10/0x10
[   97.972856][ T5846]  do_syscall_64+0x16a/0x530
[   97.972880][ T5846]  ? trace_irq_disable+0x3b/0x140
[   97.972909][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.972928][ T5846]  ? clear_bhb_loop+0x70/0xc0
[   97.972955][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.972975][ T5846] RIP: 0033:0x00007f234f56034e
[   97.973008][ T5846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   97.973024][ T5846] RSP: 002b:00007f234d7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   97.973054][ T5846] RAX: ffffffffffffffda RBX: 00007f234d7f66c0 RCX: 00007f234f56034e
[   97.973069][ T5846] RDX: 000000000000000f RSI: 00007f234d7f60a0 RDI: 0000000000000007
[   97.973083][ T5846] RBP: 00007f234d7f6090 R08: 0000000000000000 R09: 0000000000000000
[   97.973096][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.973108][ T5846] R13: 00007f234f826038 R14: 00007f234f825fa0 R15: 00007ffec5e0b708
[   97.973143][ T5846]  </TASK>
[   98.429625][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.429649][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.563560][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.563581][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.592454][ T5848] loop3: detected capacity change from 0 to 32768
[   98.685814][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.685847][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.790719][ T5848] macvlan0: entered promiscuous mode
[   98.796339][ T5848] netlink: 'syz.3.7': attribute type 1 has an invalid length.
[   98.796362][ T5848] netlink: 'syz.3.7': attribute type 2 has an invalid length.
[   98.831746][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.831769][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.833642][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.940921][ T5848] =======================================================
[   98.940921][ T5848] WARNING: The mand mount option has been deprecated and
[   98.940921][ T5848]          and is ignored by this kernel. Remove the mand
[   98.940921][ T5848]          option from the mount to silence this warning.
[   98.940921][ T5848] =======================================================
[   99.010541][   T33] audit: type=1326 audit(1793873341.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb77f9fb19 code=0x0
[   99.039261][   T27] usb 2-1: New USB device found: idVendor=056a, idProduct=0097, bcdDevice=0.00
[   99.069702][   T27] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.069739][   T27] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.069763][   T27] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   99.069792][   T27] usb 2-1: config 0 interface 0 has no altsetting 0
[   99.069830][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.167839][   T27] usb 2-1: config 0 descriptor??
[   99.572558][   T27] usbhid 2-1:0.0: can't add hid device: -32
[   99.572675][   T27] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[   99.624372][ T5876] FAULT_INJECTION: forcing a failure.
[   99.624372][ T5876] name failslab, interval 1, probability 0, space 0, times 1
[   99.624403][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) 
[   99.624428][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   99.624440][ T5876] Call Trace:
[   99.624449][ T5876]  <TASK>
[   99.624458][ T5876]  dump_stack_lvl+0xe8/0x150
[   99.624499][ T5876]  should_fail_ex+0x3eb/0x540
[   99.624541][ T5876]  should_failslab+0xa8/0x100
[   99.624566][ T5876]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[   99.624593][ T5876]  ? media_request_alloc+0xe2/0x560
[   99.624619][ T5876]  ? __d_alloc+0x37/0x820
[   99.624646][ T5876]  ? __d_alloc+0x37/0x820
[   99.624683][ T5876]  __d_alloc+0x37/0x820
[   99.624727][ T5876]  d_alloc_pseudo+0x21/0xc0
[   99.624761][ T5876]  alloc_path_pseudo+0x107/0x220
[   99.624791][ T5876]  ? __pfx_alloc_path_pseudo+0x10/0x10
[   99.624819][ T5876]  ? do_raw_spin_lock+0x12b/0x2f0
[   99.624849][ T5876]  alloc_file_pseudo+0xa8/0x1e0
[   99.624879][ T5876]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   99.624906][ T5876]  ? _raw_spin_unlock+0x28/0x50
[   99.624928][ T5876]  ? alloc_fd+0x6af/0x760
[   99.624960][ T5876]  anon_inode_getfile+0xc5/0x1a0
[   99.624991][ T5876]  media_request_alloc+0x26e/0x560
[   99.625020][ T5876]  media_device_request_alloc+0x98/0xd0
[   99.625055][ T5876]  media_device_ioctl+0x281/0x490
[   99.625089][ T5876]  ? __pfx_media_device_ioctl+0x10/0x10
[   99.625146][ T5876]  ? __fget_files+0x2a/0x420
[   99.625175][ T5876]  ? __pfx_media_device_ioctl+0x10/0x10
[   99.625206][ T5876]  ? media_ioctl+0xfe/0x120
[   99.625237][ T5876]  ? __pfx_media_ioctl+0x10/0x10
[   99.625269][ T5876]  __se_sys_ioctl+0xfc/0x170
[   99.625297][ T5876]  do_syscall_64+0x16a/0x530
[   99.625321][ T5876]  ? trace_irq_disable+0x3b/0x140
[   99.625351][ T5876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.625374][ T5876]  ? clear_bhb_loop+0x70/0xc0
[   99.625400][ T5876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.625423][ T5876] RIP: 0033:0x00007fa9ea79fb19
[   99.625445][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.625463][ T5876] RSP: 002b:00007fa9e89f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.625486][ T5876] RAX: ffffffffffffffda RBX: 00007fa9eaa25fa0 RCX: 00007fa9ea79fb19
[   99.625502][ T5876] RDX: 0000000000000000 RSI: 0000000080047c05 RDI: 0000000000000004
[   99.625516][ T5876] RBP: 00007fa9e89f6090 R08: 0000000000000000 R09: 0000000000000000
[   99.625530][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.625542][ T5876] R13: 00007fa9eaa26038 R14: 00007fa9eaa25fa0 R15: 00007ffdba8f4648
[   99.625576][ T5876]  </TASK>
[  100.130142][ T5868] FAULT_INJECTION: forcing a failure.
[  100.130142][ T5868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.130167][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) 
[  100.130184][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  100.130194][ T5868] Call Trace:
[  100.130200][ T5868]  <TASK>
[  100.130206][ T5868]  dump_stack_lvl+0xe8/0x150
[  100.130236][ T5868]  should_fail_ex+0x3eb/0x540
[  100.130261][ T5868]  _copy_from_iter+0x1d3/0x1680
[  100.130283][ T5868]  ? __alloc_skb+0x27a/0x7a0
[  100.130306][ T5868]  ? __alloc_skb+0x27a/0x7a0
[  100.130328][ T5868]  ? __alloc_skb+0x27a/0x7a0
[  100.130350][ T5868]  ? __pfx__copy_from_iter+0x10/0x10
[  100.130368][ T5868]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  100.130387][ T5868]  ? __alloc_skb+0x27a/0x7a0
[  100.130407][ T5868]  ? __alloc_skb+0x27a/0x7a0
[  100.130432][ T5868]  ? netlink_sendmsg+0x64f/0xb20
[  100.130453][ T5868]  ? skb_put+0x112/0x210
[  100.130477][ T5868]  netlink_sendmsg+0x6bb/0xb20
[  100.130503][ T5868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.130526][ T5868]  ? aa_sock_msg_perm+0x144/0x210
[  100.130548][ T5868]  ? apparmor_socket_sendmsg+0x98/0x360
[  100.130565][ T5868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.130585][ T5868]  sock_sendmsg_nosec+0x14e/0x190
[  100.130606][ T5868]  ____sys_sendmsg+0x54e/0x850
[  100.130634][ T5868]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.130665][ T5868]  ? import_iovec+0x73/0xa0
[  100.130689][ T5868]  ___sys_sendmsg+0x2a6/0x360
[  100.130702][ T5868]  ? __lock_acquire+0x747/0x2de0
[  100.130725][ T5868]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.130773][ T5868]  ? __fget_files+0x3a2/0x420
[  100.130793][ T5868]  ? __fget_files+0x2a/0x420
[  100.130819][ T5868]  __x64_sys_sendmsg+0x1b1/0x290
[  100.130836][ T5868]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  100.130866][ T5868]  do_syscall_64+0x16a/0x530
[  100.130883][ T5868]  ? trace_irq_disable+0x3b/0x140
[  100.130905][ T5868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.130921][ T5868]  ? clear_bhb_loop+0x70/0xc0
[  100.130939][ T5868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.130955][ T5868] RIP: 0033:0x00007f3c0839fb19
[  100.130970][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.130983][ T5868] RSP: 002b:00007f3c091d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.130999][ T5868] RAX: ffffffffffffffda RBX: 00007f3c08625fa0 RCX: 00007f3c0839fb19
[  100.131009][ T5868] RDX: 0000000000000000 RSI: 0000200000019880 RDI: 0000000000000004
[  100.131019][ T5868] RBP: 00007f3c091d7090 R08: 0000000000000000 R09: 0000000000000000
[  100.131028][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.131037][ T5868] R13: 00007f3c08626038 R14: 00007f3c08625fa0 R15: 00007ffcd7f9ad28
[  100.131060][ T5868]  </TASK>
[  100.309617][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  100.870974][ T5766] rxe_eth0 speed is unknown, defaulting to 1000
[  101.547579][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.263136][ T5831] usb 2-1: USB disconnect, device number 2
[  102.349117][ T5746] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  102.359115][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  102.397015][   T33] audit: type=1326 audit(1793873345.382:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.1.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f234f59fb19 code=0x0
[  103.979281][ T5746] usb 3-1: Using ep0 maxpacket: 16
[  103.981955][ T5746] usb 3-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40
[  104.060842][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.060871][ T5746] usb 3-1: Product: syz
[  104.060886][ T5746] usb 3-1: Manufacturer: syz
[  104.060901][ T5746] usb 3-1: SerialNumber: syz
[  104.121675][ T5891] loop3: detected capacity change from 0 to 256
[  104.156418][ T5891] exfat: Deprecated parameter 'namecase'
[  104.156524][ T5891] exfat: Deprecated parameter 'namecase'
[  104.267290][ T5891] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  104.461882][ T5746] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  104.461926][ T5746] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  104.471664][ T5746] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  104.503259][ T5900] loop1: detected capacity change from 0 to 8192
[  104.515510][ T5891] tap0: tun_chr_ioctl cmd 1074025677
[  104.515657][ T5891] tap0: linktype set to 776
[  104.603427][ T5910] loop0: detected capacity change from 0 to 4096
[  104.643980][ T5911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.972019][ T5746] usb 3-1: USB disconnect, device number 2
[  105.744756][ T5659] udevd[5659]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.999468][ T5643] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  106.834023][ T5928] FAULT_INJECTION: forcing a failure.
[  106.834023][ T5928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.834081][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) 
[  106.834108][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  106.834121][ T5928] Call Trace:
[  106.834129][ T5928]  <TASK>
[  106.834139][ T5928]  dump_stack_lvl+0xe8/0x150
[  106.834180][ T5928]  should_fail_ex+0x3eb/0x540
[  106.834217][ T5928]  _copy_from_iter+0x1d3/0x1680
[  106.834248][ T5928]  ? __sk_mem_raise_allocated+0x134/0x1250
[  106.834284][ T5928]  ? __pfx__copy_from_iter+0x10/0x10
[  106.834311][ T5928]  ? __sk_mem_raise_allocated+0x292/0x1250
[  106.834345][ T5928]  ? __sk_mem_schedule+0x7b/0xf0
[  106.834380][ T5928]  mptcp_sendmsg+0xdfa/0x1cf0
[  106.834442][ T5928]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  106.834470][ T5928]  ? aa_sock_msg_perm+0xfc/0x210
[  106.834495][ T5928]  ? sock_rps_record_flow+0x19/0x350
[  106.834520][ T5928]  ? inet_sendmsg+0x298/0x320
[  106.834538][ T5928]  ? apparmor_socket_sendmsg+0x98/0x360
[  106.834570][ T5928]  ? __pfx_inet_sendmsg+0x10/0x10
[  106.834590][ T5928]  sock_sendmsg_nosec+0x10f/0x190
[  106.834621][ T5928]  __sys_sendto+0x408/0x5a0
[  106.834651][ T5928]  ? ksys_write+0x1e6/0x270
[  106.834687][ T5928]  ? __pfx___sys_sendto+0x10/0x10
[  106.834716][ T5928]  ? __mutex_unlock_slowpath+0x731/0x900
[  106.834756][ T5928]  ? fdget+0x1ac/0x250
[  106.834799][ T5928]  ? __pfx_ksys_write+0x10/0x10
[  106.834837][ T5928]  __x64_sys_sendto+0xde/0x100
[  106.834872][ T5928]  do_syscall_64+0x16a/0x530
[  106.834898][ T5928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.834920][ T5928]  ? clear_bhb_loop+0x70/0xc0
[  106.834947][ T5928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.834969][ T5928] RIP: 0033:0x00007f2ab059fb19
[  106.834991][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.835009][ T5928] RSP: 002b:00007f2ab1416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  106.835033][ T5928] RAX: ffffffffffffffda RBX: 00007f2ab0826090 RCX: 00007f2ab059fb19
[  106.835049][ T5928] RDX: 0000000000010002 RSI: 00002000000000c0 RDI: 0000000000000005
[  106.835063][ T5928] RBP: 00007f2ab1416090 R08: 0000000000000000 R09: 0000000000000000
[  106.835077][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.835090][ T5928] R13: 00007f2ab0826128 R14: 00007f2ab0826090 R15: 00007fff93ee8018
[  106.835125][ T5928]  </TASK>
[  108.429412][ T5936] netlink: 72 bytes leftover after parsing attributes in process `syz.2.23'.
[  110.369007][ T5627] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.431656][ T5936] loop2: detected capacity change from 0 to 32768
[  110.437022][ T5936] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.23 (5936)
[  110.471737][ T5936] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  110.471784][ T5936] BTRFS info (device loop2): using blake2b checksum algorithm
[  110.550164][ T5627] usb 4-1: Using ep0 maxpacket: 8
[  110.554570][ T5627] usb 4-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  110.574854][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.574881][ T5627] usb 4-1: Product: syz
[  110.574896][ T5627] usb 4-1: Manufacturer: syz
[  110.574911][ T5627] usb 4-1: SerialNumber: syz
[  110.598612][ T5627] usb 4-1: config 0 descriptor??
[  110.618200][ T5627] gspca_main: se401-2.14.0 probing 047d:5003
[  110.710243][ T5936] BTRFS info (device loop2): enabling ssd optimizations
[  110.710274][ T5936] BTRFS info (device loop2): using spread ssd allocation scheme
[  110.710292][ T5936] BTRFS info (device loop2): disabling tree log
[  110.710315][ T5936] BTRFS info (device loop2): turning on async discard
[  110.710332][ T5936] BTRFS info (device loop2): enabling free space tree
[  110.781559][ T5957] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  110.959073][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  110.998929][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  112.451772][ T5645] Bluetooth: hci5: command 0x1003 tx timeout
[  112.452806][ T5627] gspca_se401: write req failed req 0x57 val 0x00 error -110
[  112.453067][ T5627] se401 4-1:0.0: probe with driver se401 failed with error -110
[  112.460510][ T5643] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  112.704642][ T5640] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  113.929486][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  114.339147][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  116.079226][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  116.178304][ T5627] usb 4-1: USB disconnect, device number 2
[  116.412380][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'.
[  116.623921][ T5976] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  116.728289][ T5974] loop3: detected capacity change from 0 to 4096
[  116.821620][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.904384][ T5974] capability: warning: `syz.3.31' uses deprecated v2 capabilities in a way that may be insecure
[  117.103759][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.289250][ T5643] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  118.639154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  119.468966][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.4.26'.
[  119.469164][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.4.26'.
[  119.469329][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.4.26'.
[  121.567772][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'.
[  121.651796][ T6012] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  121.950997][ T6012] loop1: detected capacity change from 0 to 4096
[  122.197183][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.613142][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.973432][ T6020] FAULT_INJECTION: forcing a failure.
[  122.973432][ T6020] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.973476][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.4.35 Not tainted syzkaller #0 PREEMPT(full) 
[  122.973500][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  122.973512][ T6020] Call Trace:
[  122.973520][ T6020]  <TASK>
[  122.973529][ T6020]  dump_stack_lvl+0xe8/0x150
[  122.973589][ T6020]  should_fail_ex+0x3eb/0x540
[  122.973624][ T6020]  _copy_from_iter+0x1d3/0x1680
[  122.973672][ T6020]  ? __alloc_skb+0x27a/0x7a0
[  122.973705][ T6020]  ? __alloc_skb+0x27a/0x7a0
[  122.973737][ T6020]  ? __alloc_skb+0x27a/0x7a0
[  122.973768][ T6020]  ? __pfx__copy_from_iter+0x10/0x10
[  122.973795][ T6020]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  122.973822][ T6020]  ? __alloc_skb+0x27a/0x7a0
[  122.973850][ T6020]  ? __alloc_skb+0x27a/0x7a0
[  122.973887][ T6020]  ? netlink_sendmsg+0x64f/0xb20
[  122.973917][ T6020]  ? skb_put+0x112/0x210
[  122.973952][ T6020]  netlink_sendmsg+0x6bb/0xb20
[  122.973989][ T6020]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.974023][ T6020]  ? aa_sock_msg_perm+0x144/0x210
[  122.974054][ T6020]  ? apparmor_socket_sendmsg+0x18b/0x360
[  122.974079][ T6020]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.974108][ T6020]  sock_sendmsg_nosec+0x14e/0x190
[  122.974138][ T6020]  ____sys_sendmsg+0x54e/0x850
[  122.974179][ T6020]  ? __pfx_____sys_sendmsg+0x10/0x10
[  122.974224][ T6020]  ? import_iovec+0x73/0xa0
[  122.974262][ T6020]  ___sys_sendmsg+0x2a6/0x360
[  122.974281][ T6020]  ? __lock_acquire+0x747/0x2de0
[  122.974315][ T6020]  ? __pfx____sys_sendmsg+0x10/0x10
[  122.974375][ T6020]  ? __fget_files+0x3a2/0x420
[  122.974403][ T6020]  ? __fget_files+0x2a/0x420
[  122.974442][ T6020]  __x64_sys_sendmsg+0x1b1/0x290
[  122.974467][ T6020]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  122.974512][ T6020]  do_syscall_64+0x16a/0x530
[  122.974537][ T6020]  ? trace_irq_disable+0x3b/0x140
[  122.974574][ T6020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.974596][ T6020]  ? clear_bhb_loop+0x70/0xc0
[  122.974622][ T6020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.974643][ T6020] RIP: 0033:0x00007f3c0839fb19
[  122.974670][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.974687][ T6020] RSP: 002b:00007f3c091d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.974715][ T6020] RAX: ffffffffffffffda RBX: 00007f3c08625fa0 RCX: 00007f3c0839fb19
[  122.974731][ T6020] RDX: 0000000024000040 RSI: 0000200000006c40 RDI: 0000000000000004
[  122.974746][ T6020] RBP: 00007f3c091d7090 R08: 0000000000000000 R09: 0000000000000000
[  122.974759][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.974772][ T6020] R13: 00007f3c08626038 R14: 00007f3c08625fa0 R15: 00007ffcd7f9ad28
[  122.974807][ T6020]  </TASK>
[  123.280018][ T5635] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  123.450163][ T6026] [U] 
[  123.450174][ T6026] [U] K{‘
[  123.450184][ T6026] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç
[  123.450217][ T6026] [U] tžØ–/,�~ˆÄœ­‹jõÿÊ}8îÊþ'o1�Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î¾ª(È5ˆObü¤‡ÍƒJÖ
[  123.450239][ T6026] [U] ±k\&—}6£6œXîHX�¥ôµ„Ìþ.`¸a“$Û40|϶¿�9°øÞ¨„¯ÀÏU‚ò4�ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’4”ÿ
[  123.450286][ T6026] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØI�n¨™[Z(•„C|Të]z{�â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJø�SH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž�÷éwUh„fN—Ž�Çhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<ã	¢Ø°‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿c�Õ³žV¦=�‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI
˜¢œaïì6-úD�úV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯
Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå
[  123.450372][ T6026] [U] 	+�w‰G?]£Ó'a:	»Ú)Õ
ïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:�^0À�téèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj×;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼�Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿Bĵٜ Nóy"vI2ûÌ
[  123.450399][ T6026] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ�°¶ºqîÙ
 ŸÇ3‹Æq¯ôN^HP*½Ü$	µ.Î7yÓ±œ2³
[  123.450413][ T6026] [U] ½?�©ÿhüä*ÙÁ”Î3í�7Üé�¾^#Q�"0~‡‚ð(éoïXLŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ
[  123.450447][ T6026] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“�®ŸŸñ�2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä�„RTÔ¶ŒBÚ[+/<<R�B�Êäõ|ФeŽžÑÛ –V96#ûúÑͤê¦jºUº%
s851ƒ�þÒ©s�P±¨\£ƒ?qª|L�´QXµ0ÂKÔ1orÉ´2¡½|ÖüdÖFÌ¿»ù�ÚË2Þ”–¨×0ÌåH•}C[/¤»“Ÿpx^¼èo
[  123.450467][ T6026] FAULT_INJECTION: forcing a failure.
[  123.450467][ T6026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.450485][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) 
[  123.450501][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  123.450511][ T6026] Call Trace:
[  123.450517][ T6026]  <TASK>
[  123.450523][ T6026]  dump_stack_lvl+0xe8/0x150
[  123.450554][ T6026]  should_fail_ex+0x3eb/0x540
[  123.450580][ T6026]  _copy_from_iter+0x1d3/0x1680
[  123.450610][ T6026]  ? __pfx__copy_from_iter+0x10/0x10
[  123.450642][ T6026]  file_tty_write+0x48c/0xa20
[  123.450673][ T6026]  vfs_write+0x612/0xba0
[  123.450702][ T6026]  ? __pfx_vfs_write+0x10/0x10
[  123.450727][ T6026]  ? __fget_files+0x3a2/0x420
[  123.450746][ T6026]  ? __fget_files+0x2a/0x420
[  123.450769][ T6026]  ? fdget+0x1ac/0x250
[  123.450795][ T6026]  ksys_write+0x150/0x270
[  123.450820][ T6026]  ? __pfx_ksys_write+0x10/0x10
[  123.450858][ T6026]  do_syscall_64+0x16a/0x530
[  123.450921][ T6026]  ? trace_irq_disable+0x3b/0x140
[  123.450949][ T6026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.450970][ T6026]  ? clear_bhb_loop+0x70/0xc0
[  123.450997][ T6026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.451018][ T6026] RIP: 0033:0x00007f2ab059fb19
[  123.451040][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.451057][ T6026] RSP: 002b:00007f2ab1437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  123.451079][ T6026] RAX: ffffffffffffffda RBX: 00007f2ab0825fa0 RCX: 00007f2ab059fb19
[  123.451095][ T6026] RDX: 0000000000001006 RSI: 0000200000000340 RDI: 0000000000000006
[  123.451109][ T6026] RBP: 00007f2ab1437090 R08: 0000000000000000 R09: 0000000000000000
[  123.451122][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.451135][ T6026] R13: 00007f2ab0826038 R14: 00007f2ab0825fa0 R15: 00007fff93ee8018
[  123.451172][ T6026]  </TASK>
[  123.650166][ T6024] [U] ÖØ›·Ü—(JÅЛ•§mÛüxz˜;œ½±ÓÿØ�_¹»µÔ*3÷3…ß5¸\ƒxm³ÚU�‰AK!aQ`ß
[  124.066812][ T6021] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  125.909559][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  126.136858][ T6034] device-mapper: raid: Choosing default region size of 4MiB
[  126.192909][ T6043] ip_tables: iptables: counters copy to user failed while replacing table
[  126.212892][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.47'.
[  126.253239][ T6034] mdX: WARNING: ram7 appears to be on the same physical disk as ram7.
[  126.253271][ T6034] True protection against single-disk failure might be compromised.
[  126.277902][ T6034] md/raid:mdX: device ram7 operational as raid disk 0
[  126.277927][ T6034] md/raid:mdX: device ram7 operational as raid disk 1
[  126.448832][ T6034] md/raid:mdX: raid level 5 active with 2 out of 2 devices, algorithm 2
[  126.507151][ T6034] device-mapper: raid: raid456 discard support disabled due to discard_zeroes_data uncertainty.
[  126.507172][ T6034] device-mapper: raid: Set dm-raid.devices_handle_discard_safely=Y to override.
[  126.575405][   T33] audit: type=1326 audit(1793873369.562:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.575913][ T6051] loop1: detected capacity change from 0 to 2048
[  126.592744][   T33] audit: type=1326 audit(1793873369.572:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.592907][   T33] audit: type=1326 audit(1793873369.572:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.593035][   T33] audit: type=1326 audit(1793873369.572:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.607173][   T33] audit: type=1326 audit(1793873369.572:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.663317][   T33] audit: type=1326 audit(1793873369.642:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.663470][   T33] audit: type=1326 audit(1793873369.642:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.676726][   T33] audit: type=1326 audit(1793873369.672:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.676886][   T33] audit: type=1326 audit(1793873369.672:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.699134][   T33] audit: type=1326 audit(1793873369.672:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.49" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2ab059fb19 code=0x7ffc0000
[  126.859403][ T6051] NILFS (loop1): invalid segment: Magic number mismatch
[  126.859432][ T6051] NILFS (loop1): trying rollback from an earlier position
[  126.912037][ T6051] NILFS (loop1): recovery complete
[  126.954265][ T6057] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.469580][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  129.107623][ T6070] ip_tables: iptables: counters copy to user failed while replacing table
[  129.108135][ T6070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.57'.
[  129.317587][ T6074] process 'syz.1.56' launched '/dev/fd/4' with NULL argv: empty string added
[  129.613459][ T6077] netlink: 52 bytes leftover after parsing attributes in process `syz.0.58'.
[  129.613519][ T6077] netlink: 52 bytes leftover after parsing attributes in process `syz.0.58'.
[  129.613588][ T6077] netlink: 52 bytes leftover after parsing attributes in process `syz.0.58'.
[  131.164330][ T6082] netlink: 52 bytes leftover after parsing attributes in process `syz.1.60'.
[  131.165701][ T6082] netlink: 52 bytes leftover after parsing attributes in process `syz.1.60'.
[  131.165744][ T6082] netlink: 52 bytes leftover after parsing attributes in process `syz.1.60'.
[  132.858923][ T6090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.61'.
[  132.858952][ T6090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.61'.
[  132.859158][ T6090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.61'.
[  133.962494][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  133.962552][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  134.467357][ T6096] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  134.628272][ T6098] FAULT_INJECTION: forcing a failure.
[  134.628272][ T6098] name failslab, interval 1, probability 0, space 0, times 0
[  134.628303][ T6098] CPU: 1 UID: 0 PID: 6098 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) 
[  134.628321][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  134.628330][ T6098] Call Trace:
[  134.628336][ T6098]  <TASK>
[  134.628342][ T6098]  dump_stack_lvl+0xe8/0x150
[  134.628373][ T6098]  should_fail_ex+0x3eb/0x540
[  134.628399][ T6098]  should_failslab+0xa8/0x100
[  134.628416][ T6098]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  134.628439][ T6098]  ? kasprintf+0xe2/0x140
[  134.628460][ T6098]  ? kasprintf+0xe2/0x140
[  134.628487][ T6098]  kvasprintf+0xeb/0x1a0
[  134.628512][ T6098]  ? __pfx_kvasprintf+0x10/0x10
[  134.628532][ T6098]  ? kernfs_put+0x622/0x820
[  134.628549][ T6098]  ? __bfs+0x153/0x290
[  134.628568][ T6098]  ? __pfx_hlock_conflict+0x10/0x10
[  134.628598][ T6098]  kasprintf+0xe2/0x140
[  134.628624][ T6098]  ? __pfx_kasprintf+0x10/0x10
[  134.628645][ T6098]  ? __lock_acquire+0x1511/0x2de0
[  134.628668][ T6098]  ? __lock_acquire+0x747/0x2de0
[  134.628688][ T6098]  ? __pfx_input_devnode+0x10/0x10
[  134.628706][ T6098]  device_get_devnode+0x168/0x2a0
[  134.628734][ T6098]  devtmpfs_delete_node+0xf8/0x230
[  134.628756][ T6098]  ? __pfx_devtmpfs_delete_node+0x10/0x10
[  134.628786][ T6098]  ? __pfx_klist_children_put+0x10/0x10
[  134.628809][ T6098]  ? kobject_put+0x50f/0x550
[  134.628830][ T6098]  ? _raw_spin_unlock+0x28/0x50
[  134.628845][ T6098]  ? klist_del+0xc7/0x110
[  134.628866][ T6098]  device_del+0x2ce/0x8f0
[  134.628929][ T6098]  ? __pfx_device_del+0x10/0x10
[  134.628979][ T6098]  cdev_device_del+0x27/0xf0
[  134.628998][ T6098]  evdev_disconnect+0x4c/0xb0
[  134.629019][ T6098]  __input_unregister_device+0x356/0x650
[  134.629042][ T6098]  input_unregister_device+0x9b/0x100
[  134.629062][ T6098]  hidp_session_remove+0x181/0x2b0
[  134.629080][ T6098]  l2cap_unregister_user+0x145/0x160
[  134.629104][ T6098]  hidp_connection_del+0xfd/0x1d0
[  134.629130][ T6098]  hidp_sock_ioctl+0x3ab/0x650
[  134.629149][ T6098]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  134.629200][ T6098]  ? do_vfs_ioctl+0x116f/0x1530
[  134.629225][ T6098]  sock_do_ioctl+0x101/0x320
[  134.629246][ T6098]  ? __pfx_sock_do_ioctl+0x10/0x10
[  134.629277][ T6098]  sock_ioctl+0x57a/0x7e0
[  134.629300][ T6098]  ? __fget_files+0x2a/0x420
[  134.629320][ T6098]  ? __pfx_sock_ioctl+0x10/0x10
[  134.629337][ T6098]  ? __fget_files+0x2a/0x420
[  134.629357][ T6098]  ? __fget_files+0x2a/0x420
[  134.629380][ T6098]  ? bpf_lsm_file_ioctl+0x9/0x20
[  134.629403][ T6098]  ? __pfx_sock_ioctl+0x10/0x10
[  134.629420][ T6098]  __se_sys_ioctl+0xfc/0x170
[  134.629436][ T6098]  do_syscall_64+0x16a/0x530
[  134.629453][ T6098]  ? trace_irq_disable+0x3b/0x140
[  134.629474][ T6098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.629490][ T6098]  ? clear_bhb_loop+0x70/0xc0
[  134.629509][ T6098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.629524][ T6098] RIP: 0033:0x00007fa9ea79fb19
[  134.629540][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.629553][ T6098] RSP: 002b:00007fa9e89d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.629568][ T6098] RAX: ffffffffffffffda RBX: 00007fa9eaa26090 RCX: 00007fa9ea79fb19
[  134.629579][ T6098] RDX: 0000200000000200 RSI: 00000000400448c9 RDI: 0000000000000004
[  134.629589][ T6098] RBP: 00007fa9e89d5090 R08: 0000000000000000 R09: 0000000000000000
[  134.629599][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.629607][ T6098] R13: 00007fa9eaa26128 R14: 00007fa9eaa26090 R15: 00007ffdba8f4648
[  134.629632][ T6098]  </TASK>
[  137.388279][ T6108] netlink: 52 bytes leftover after parsing attributes in process `syz.3.54'.
[  137.388389][ T6108] netlink: 52 bytes leftover after parsing attributes in process `syz.3.54'.
[  137.388455][ T6108] netlink: 52 bytes leftover after parsing attributes in process `syz.3.54'.
[  141.982466][ T6125] Unknown vers= option specified: 3/0
[  141.982466][ T6125] 
[  141.982606][ T6125] CIFS: VFS: Unknown vers= option specified: 3/0
[  144.940810][ T6138] trusted_key: encrypted_key: insufficient parameters specified
[  145.474219][ T6142] loop3: detected capacity change from 0 to 2048
[  145.534905][ T6142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.968521][ T6145] loop4: detected capacity change from 0 to 256
[  146.051678][ T6145] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  147.777710][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'.
[  150.079835][ T6159] Illegal XDP return value 4294967274 on prog  (id 13) dev N/A, expect packet loss!
[  150.568999][ T6164] netlink: 52 bytes leftover after parsing attributes in process `syz.1.74'.
[  150.569408][ T6164] netlink: 52 bytes leftover after parsing attributes in process `syz.1.74'.
[  150.569578][ T6164] netlink: 52 bytes leftover after parsing attributes in process `syz.1.74'.
[  151.748221][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  151.930764][   T10] usb 3-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00
[  151.931847][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  151.931880][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  151.931919][   T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.931944][   T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.998145][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.998177][   T10] usb 3-1: Product: syz
[  151.998194][   T10] usb 3-1: Manufacturer: syz
[  151.998210][   T10] usb 3-1: SerialNumber: syz
[  152.046799][ T6157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  152.046964][ T6157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  152.169864][   T10] ims_pcu 3-1:1.1: Failed to allocate memory for read buffer
[  152.217181][   T10] ims_pcu 3-1:1.1: probe with driver ims_pcu failed with error -12
[  152.510374][ T5766] usb 3-1: USB disconnect, device number 3
[  154.391859][ T6182] ip_tables: iptables: counters copy to user failed while replacing table
[  154.396802][ T6182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.85'.
[  156.305978][ T6192] loop2: detected capacity change from 0 to 4096
[  156.347440][ T6193] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.515858][ T6195] loop4: detected capacity change from 0 to 512
[  158.358498][ T6195] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.79: bg 0: block 5: invalid block bitmap
[  158.358700][ T6195] loop4: lost filesystem error report for type 5 error -117
[  158.359392][    C1] EXT4-fs (loop4): initial error at time 1793873401: ext4_validate_block_bitmap:436
[  158.359428][    C1] EXT4-fs (loop4): last error at time 1793873401: ext4_validate_block_bitmap:436
[  158.409144][ T6195] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  158.409176][ T6195] loop4: lost filesystem error report for type 5 error -117
[  158.418913][ T6195] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #11: comm syz.4.79: invalid indirect mapped block 3 (level 2)
[  158.419122][ T6195] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  158.445075][ T6195] EXT4-fs (loop4): 1 orphan inode deleted
[  158.445104][ T6195] EXT4-fs (loop4): 1 truncate cleaned up
[  158.485628][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.832347][ T6204] Zero length message leads to an empty skb
[  158.844701][ T6195] rxe_eth0 speed is unknown, defaulting to 1000
[  159.123215][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.92'.
[  159.123261][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.92'.
[  159.123294][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.92'.
[  159.863350][ T6213] loop0: detected capacity change from 0 to 512
[  159.965195][ T6213] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  159.965221][ T6213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  159.965324][ T6213] System zones: 0-1, 15-15, 18-18, 34-34
[  159.965596][ T6213] EXT4-fs (loop0): orphan cleanup on readonly fs
[  159.965614][ T6213] EXT4-fs error (device loop0): ext4_quota_enable:7307: comm syz.0.84: Bad quota inum: 768, type: 0
[  159.965640][ T6213] loop0: lost filesystem error report for type 5 error -117
[  159.968948][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  159.968973][    C0] EXT4-fs (loop0): initial error at time 1793873402: ext4_quota_enable:7307
[  159.968998][    C0] EXT4-fs (loop0): last error at time 1793873402: ext4_quota_enable:7307
[  159.990155][ T6213] EXT4-fs warning (device loop0): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix.
[  159.990282][ T6213] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  160.011729][ T6213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.959652][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.452227][ T5643] Bluetooth: hci4: link tx timeout
[  162.452249][ T5643] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.652878][ T6232] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6228] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6232]
[  164.682315][ T5643] Bluetooth: hci4: command 0x0406 tx timeout
[  164.815323][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.738425][ T6239] loop4: detected capacity change from 0 to 256
[  166.757843][ T6239] exfat: Deprecated parameter 'namecase'
[  166.757914][ T6239] exfat: Deprecated parameter 'namecase'
[  166.817200][ T6239] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  167.118340][ T6246] netlink: 52 bytes leftover after parsing attributes in process `syz.0.103'.
[  167.118409][ T6246] netlink: 52 bytes leftover after parsing attributes in process `syz.0.103'.
[  167.118442][ T6246] netlink: 52 bytes leftover after parsing attributes in process `syz.0.103'.
[  167.647570][ T6248] tap0: tun_chr_ioctl cmd 1074025677
[  167.647703][ T6248] tap0: linktype set to 776
[  169.674973][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'.
[  169.783675][ T6259] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  170.060749][ T6259] loop0: detected capacity change from 0 to 4096
[  170.342465][ T6259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.082242][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.842972][ T6289] FAULT_INJECTION: forcing a failure.
[  177.842972][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.843021][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(full) 
[  177.843046][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  177.843064][ T6289] Call Trace:
[  177.843073][ T6289]  <TASK>
[  177.843091][ T6289]  dump_stack_lvl+0xe8/0x150
[  177.843132][ T6289]  should_fail_ex+0x3eb/0x540
[  177.843170][ T6289]  _copy_to_user+0x31/0xb0
[  177.843204][ T6289]  simple_read_from_buffer+0xe1/0x170
[  177.843240][ T6289]  proc_fail_nth_read+0x1bb/0x230
[  177.843268][ T6289]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.843296][ T6289]  ? rw_verify_area+0x24a/0x4c0
[  177.843329][ T6289]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.843352][ T6289]  vfs_read+0x213/0xa80
[  177.843389][ T6289]  ? __pfx___mutex_lock+0x10/0x10
[  177.843418][ T6289]  ? __pfx_vfs_read+0x10/0x10
[  177.843451][ T6289]  ? __fget_files+0x2a/0x420
[  177.843478][ T6289]  ? __fget_files+0x3a2/0x420
[  177.843505][ T6289]  ? __fget_files+0x2a/0x420
[  177.843538][ T6289]  ? fdget+0x1ac/0x250
[  177.843575][ T6289]  ksys_read+0x150/0x270
[  177.843609][ T6289]  ? __pfx_ksys_read+0x10/0x10
[  177.843639][ T6289]  ? __pfx_v4l2_ioctl+0x10/0x10
[  177.843676][ T6289]  do_syscall_64+0x16a/0x530
[  177.843701][ T6289]  ? trace_irq_disable+0x3b/0x140
[  177.843731][ T6289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.843753][ T6289]  ? clear_bhb_loop+0x70/0xc0
[  177.843780][ T6289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.843801][ T6289] RIP: 0033:0x00007f2ab056034e
[  177.843823][ T6289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  177.843846][ T6289] RSP: 002b:00007f2ab1436fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.843869][ T6289] RAX: ffffffffffffffda RBX: 00007f2ab14376c0 RCX: 00007f2ab056034e
[  177.843885][ T6289] RDX: 000000000000000f RSI: 00007f2ab14370a0 RDI: 0000000000000004
[  177.843898][ T6289] RBP: 00007f2ab1437090 R08: 0000000000000000 R09: 0000000000000000
[  177.843912][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.843925][ T6289] R13: 00007f2ab0826038 R14: 00007f2ab0825fa0 R15: 00007fff93ee8018
[  177.843960][ T6289]  </TASK>
[  180.310030][ T6297] netlink: 52 bytes leftover after parsing attributes in process `syz.0.118'.
[  180.310138][ T6297] netlink: 52 bytes leftover after parsing attributes in process `syz.0.118'.
[  180.310205][ T6297] netlink: 52 bytes leftover after parsing attributes in process `syz.0.118'.
[  182.106815][ T6305] netlink: 52 bytes leftover after parsing attributes in process `syz.4.122'.
[  182.106952][ T6305] netlink: 52 bytes leftover after parsing attributes in process `syz.4.122'.
[  182.107021][ T6305] netlink: 52 bytes leftover after parsing attributes in process `syz.4.122'.
[  183.758036][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.768328][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.772200][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.787363][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.788075][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.817768][ T6312] loop2: detected capacity change from 0 to 64
[  184.976231][ T6322] loop1: detected capacity change from 0 to 4096
[  185.009475][ T5774] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  185.086881][ T6327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.161070][ T5774] usb 3-1: Using ep0 maxpacket: 32
[  185.168109][ T5774] usb 3-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[  185.192910][ T5774] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  185.192939][ T5774] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  185.192954][ T5774] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  185.192988][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  185.193004][ T5774] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  185.193020][ T5774] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  185.193059][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.234834][ T5774] usb 3-1: config 0 descriptor??
[  185.612710][ T5774] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  185.661754][ T5774] usb 3-1: USB disconnect, device number 4
[  185.728281][ T5774] usblp0: removed
[  185.746950][  T253] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.839248][ T5635] Bluetooth: hci5: command tx timeout
[  185.973638][  T253] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.973894][ T6323] program syz.2.125 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.470140][  T253] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.583433][ T6310] rxe_eth0 speed is unknown, defaulting to 1000
[  187.762116][ T6347] syz.0.120: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  187.762746][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT(full) 
[  187.762773][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  187.762786][ T6347] Call Trace:
[  187.762794][ T6347]  <TASK>
[  187.762805][ T6347]  dump_stack_lvl+0xe8/0x150
[  187.762847][ T6347]  warn_alloc+0x24d/0x270
[  187.762884][ T6347]  ? __pfx_warn_alloc+0x10/0x10
[  187.762912][ T6347]  ? __kasan_kmalloc+0x93/0xb0
[  187.762945][ T6347]  ? xsk_init_queue+0x8a/0xe0
[  187.762970][ T6347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.762996][ T6347]  ? __pfx___schedule+0x10/0x10
[  187.763027][ T6347]  __vmalloc_node_range_noprof+0x12c/0x16f0
[  187.763060][ T6347]  ? irqentry_exit+0x2a0/0x9b0
[  187.763086][ T6347]  ? lockdep_hardirqs_on+0x7b/0x110
[  187.763111][ T6347]  ? irqentry_exit+0x2a0/0x9b0
[  187.763177][ T6347]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  187.763205][ T6347]  ? __kmalloc_cache_noprof+0x31c/0x600
[  187.763235][ T6347]  ? __kmalloc_cache_noprof+0x148/0x600
[  187.763264][ T6347]  ? xskq_create+0x56/0x220
[  187.763294][ T6347]  xskq_create+0x148/0x220
[  187.763318][ T6347]  ? xsk_init_queue+0x8a/0xe0
[  187.763348][ T6347]  xsk_init_queue+0x8a/0xe0
[  187.763375][ T6347]  xsk_setsockopt+0x52a/0x960
[  187.763402][ T6347]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.763425][ T6347]  ? __pfx_aa_sk_perm+0x10/0x10
[  187.763461][ T6347]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  187.763492][ T6347]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.763525][ T6347]  do_sock_setsockopt+0x17c/0x1b0
[  187.763566][ T6347]  __x64_sys_setsockopt+0x13d/0x1b0
[  187.763607][ T6347]  do_syscall_64+0x16a/0x530
[  187.763633][ T6347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.763656][ T6347]  ? clear_bhb_loop+0x70/0xc0
[  187.763685][ T6347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.763707][ T6347] RIP: 0033:0x00007f2ab059fb19
[  187.763731][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.763750][ T6347] RSP: 002b:00007f2ab13d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  187.763773][ T6347] RAX: ffffffffffffffda RBX: 00007f2ab0826270 RCX: 00007f2ab059fb19
[  187.763790][ T6347] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  187.763803][ T6347] RBP: 00007f2ab0637b70 R08: 0000000000000004 R09: 0000000000000000
[  187.763817][ T6347] R10: 0000200000000d00 R11: 0000000000000246 R12: 0000000000000000
[  187.763832][ T6347] R13: 00007f2ab0826308 R14: 00007f2ab0826270 R15: 00007fff93ee8018
[  187.763869][ T6347]  </TASK>
[  187.763972][ T6347] Mem-Info:
[  187.764066][ T6347] active_anon:9906 inactive_anon:0 isolated_anon:0
[  187.764066][ T6347]  active_file:0 inactive_file:61881 isolated_file:0
[  187.764066][ T6347]  unevictable:0 dirty:218 writeback:0
[  187.764066][ T6347]  slab_reclaimable:11802 slab_unreclaimable:95743
[  187.764066][ T6347]  mapped:32806 shmem:4835 pagetables:1194
[  187.764066][ T6347]  sec_pagetables:0 bounce:0
[  187.764066][ T6347]  kernel_misc_reclaimable:0
[  187.764066][ T6347]  free:1284939 free_pcp:30025 free_cma:0
[  187.764229][ T6347] Node 0 active_anon:39624kB inactive_anon:0kB active_file:0kB inactive_file:247324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131224kB dirty:868kB writeback:0kB shmem:19340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12380kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  187.764341][ T6347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  187.764453][ T6347] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  187.764607][ T6347] lowmem_reserve[]: 0 2463 2464 2464 2464
[  187.764876][ T6347] Node 0 DMA32 free:1190100kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39564kB inactive_anon:0kB active_file:0kB inactive_file:247324kB unevictable:0kB writepending:868kB zspages:0kB present:3129332kB managed:2522500kB mlocked:0kB bounce:0kB free_pcp:120096kB local_pcp:47420kB free_cma:0kB
[  187.765033][ T6347] lowmem_reserve[]: 0 0 1 1 1
[  187.765224][ T6347] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  187.765371][ T6347] lowmem_reserve[]: 0 0 0 0 0
[  187.765718][ T6347] Node 1 Normal free:3934296kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  187.767117][ T6347] lowmem_reserve[]: 0 0 0 0 0
[  187.767450][ T6347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  187.768960][ T6347] Node 0 DMA32: 1549*4kB (UM) 1112*8kB (UM) 1236*16kB (UME) 1171*32kB (UME) 792*64kB (UME) 421*128kB (UM) 125*256kB (UM) 22*512kB (M) 1*1024kB (M) 11*2048kB (UM) 231*4096kB (UM) = 1189908kB
[  187.769862][ T6347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  187.770896][ T6347] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 9*16kB (UM) 13*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934296kB
[  187.771833][ T6347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  187.772772][ T6347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  187.772835][ T6347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  187.772900][ T6347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  187.772951][ T6347] 66690 total pagecache pages
[  187.773240][ T6347] 0 pages in swap cache
[  187.773523][ T6347] Free swap  = 124996kB
[  187.774059][ T6347] Total swap = 124996kB
[  187.774071][ T6347] 2097051 pages RAM
[  187.774122][ T6347] 0 pages HighMem/MovableOnly
[  187.774425][ T6347] 434464 pages reserved
[  187.790400][ T6347] 0 pages cma reserved
[  187.929378][ T5635] Bluetooth: hci5: command tx timeout
[  188.358683][  T253] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.126765][ T5645] Bluetooth: hci5: command tx timeout
[  190.524135][ T6365] netlink: 52 bytes leftover after parsing attributes in process `syz.0.132'.
[  190.524192][ T6365] netlink: 52 bytes leftover after parsing attributes in process `syz.0.132'.
[  190.524209][ T6365] netlink: 52 bytes leftover after parsing attributes in process `syz.0.132'.
[  191.981286][ T6371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.130'.
[  191.981315][ T6371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.130'.
[  191.981332][ T6371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.130'.
[  192.580126][ T5635] Bluetooth: hci5: command tx timeout
[  193.137112][  T253] bridge_slave_1: left allmulticast mode
[  193.137163][  T253] bridge_slave_1: left promiscuous mode
[  193.139370][  T253] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.179929][  T253] bridge_slave_0: left allmulticast mode
[  193.179957][  T253] bridge_slave_0: left promiscuous mode
[  193.184034][  T253] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.481456][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  194.481518][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  195.100555][  T253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.125397][  T253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.143973][  T253] bond0 (unregistering): Released all slaves
[  196.247347][ T6394] loop0: detected capacity change from 0 to 64
[  196.523952][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.525724][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.525887][ T6310] bridge_slave_0: entered allmulticast mode
[  196.621275][ T6310] bridge_slave_0: entered promiscuous mode
[  196.641677][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.641752][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.641849][ T6310] bridge_slave_1: entered allmulticast mode
[  196.697899][ T6310] bridge_slave_1: entered promiscuous mode
[  197.059819][ T6397] loop1: detected capacity change from 0 to 32768
[  197.080491][ T6397] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.131 (6397)
[  198.155250][ T6397] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  198.155287][ T6397] BTRFS info (device loop1): using blake2b checksum algorithm
[  198.550608][ T6414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.140'.
[  198.550754][ T6414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.140'.
[  198.550920][ T6414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.140'.
[  199.646333][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  199.653943][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.751671][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.774441][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  199.774793][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  199.792336][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  199.793000][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  199.793419][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  199.797387][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  199.797828][ T6397] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  199.893620][ T6397] BTRFS error (device loop1): open_ctree failed: -ENOMEM
[  201.773506][ T6310] team0: Port device team_slave_0 added
[  201.847822][ T6310] team0: Port device team_slave_1 added
[  202.258889][ T6436] netlink: 52 bytes leftover after parsing attributes in process `syz.1.143'.
[  202.258923][ T6436] netlink: 52 bytes leftover after parsing attributes in process `syz.1.143'.
[  202.258942][ T6436] netlink: 52 bytes leftover after parsing attributes in process `syz.1.143'.
[  202.935876][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1
[  203.047381][  T253] hsr_slave_0: left promiscuous mode
[  203.056131][  T253] hsr_slave_1: left promiscuous mode
[  203.064925][  T253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.064965][  T253] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.085837][  T253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.085861][  T253] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.231665][  T253] veth1_macvtap: left promiscuous mode
[  203.231778][  T253] veth0_macvtap: left promiscuous mode
[  203.232195][  T253] veth1_vlan: left promiscuous mode
[  203.232427][  T253] veth0_vlan: left promiscuous mode
[  204.060183][ T6439] netlink: 52 bytes leftover after parsing attributes in process `syz.0.141'.
[  204.060286][ T6439] netlink: 52 bytes leftover after parsing attributes in process `syz.0.141'.
[  204.060329][ T6439] netlink: 52 bytes leftover after parsing attributes in process `syz.0.141'.
[  205.751973][ T6443] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  207.233919][  T253] team0 (unregistering): Port device team_slave_1 removed
[  207.304952][  T253] team0 (unregistering): Port device team_slave_0 removed
[  207.880000][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.880018][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.880045][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.951552][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.951572][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.951597][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.053902][ T6446] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[  208.470761][ T6310] hsr_slave_0: entered promiscuous mode
[  208.971399][ T6310] hsr_slave_1: entered promiscuous mode
[  208.972244][ T6310] debugfs: 'hsr0' already exists in 'hsr'
[  208.972262][ T6310] Cannot create hsr debugfs directory
[  210.129128][ T6466] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  213.123198][ T4953] Bluetooth: hci1: command 0x0406 tx timeout
[  213.123240][ T5641] Bluetooth: hci0: command 0x0406 tx timeout
[  213.123262][ T4953] Bluetooth: hci2: command 0x0406 tx timeout
[  213.615122][ T6310] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  213.646601][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  213.662229][ T6310] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  213.700840][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  213.703926][ T6310] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  213.841757][ T6482] netlink: 52 bytes leftover after parsing attributes in process `syz.4.154'.
[  213.842276][ T6482] netlink: 52 bytes leftover after parsing attributes in process `syz.4.154'.
[  213.842318][ T6482] netlink: 52 bytes leftover after parsing attributes in process `syz.4.154'.
[  214.233240][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  214.234154][ T6310] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  214.600330][ T6310] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  214.650526][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2
[  215.139570][ T6496] capability: warning: `syz.4.155' uses 32-bit capabilities (legacy support in use)
[  215.186767][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.266837][ T6310] 8021q: adding VLAN 0 to HW filter on device team0
[  215.317963][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.318071][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.386294][  T263] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.386443][  T263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.612705][ T6503] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  215.925962][ T6503] loop1: detected capacity change from 0 to 4096
[  216.005515][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'.
[  216.289211][ T6511] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  216.479718][ T6503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.556745][ T6511] loop2: detected capacity change from 0 to 4096
[  218.922535][ T6511] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  218.951971][ T6511] EXT4-fs: failed to create workqueue
[  218.951989][ T6511] EXT4-fs (loop2): mount failed
[  219.333041][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.287712][ T6535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.158'.
[  221.287777][ T6535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.158'.
[  221.287809][ T6535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.158'.
[  225.812114][ T5645] Bluetooth: hci3: command 0x1003 tx timeout
[  225.812208][ T5643] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  226.654002][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3
[  227.350917][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.256531][ T6554] loop1: detected capacity change from 0 to 32768
[  228.532274][ T6554] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.881719][ T6554] XFS (loop1): Ending clean mount
[  228.977804][ T6554] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  229.595715][ T6310] veth0_vlan: entered promiscuous mode
[  229.666423][ T6310] veth1_vlan: entered promiscuous mode
[  231.360382][ T6586] netlink: 52 bytes leftover after parsing attributes in process `syz.2.164'.
[  231.360500][ T6586] netlink: 52 bytes leftover after parsing attributes in process `syz.2.164'.
[  231.360542][ T6586] netlink: 52 bytes leftover after parsing attributes in process `syz.2.164'.
[  231.770352][ T6310] veth0_macvtap: entered promiscuous mode
[  231.806180][ T6310] veth1_macvtap: entered promiscuous mode
[  231.929626][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.998057][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.162776][   T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.163435][   T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.163900][   T34] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.165797][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.501125][ T6603] netlink: 52 bytes leftover after parsing attributes in process `syz.2.170'.
[  232.501171][ T6603] netlink: 52 bytes leftover after parsing attributes in process `syz.2.170'.
[  232.501203][ T6603] netlink: 52 bytes leftover after parsing attributes in process `syz.2.170'.
[  233.422402][ T6514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.422425][ T6514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.485813][ T6610] loop1: detected capacity change from 0 to 8
[  234.714343][ T6610] FAULT_INJECTION: forcing a failure.
[  234.714343][ T6610] name failslab, interval 1, probability 0, space 0, times 0
[  234.714368][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(full) 
[  234.714385][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  234.714394][ T6610] Call Trace:
[  234.714400][ T6610]  <TASK>
[  234.714407][ T6610]  dump_stack_lvl+0xe8/0x150
[  234.714444][ T6610]  should_fail_ex+0x3eb/0x540
[  234.714476][ T6610]  should_failslab+0xa8/0x100
[  234.714494][ T6610]  __kmalloc_cache_noprof+0x9e/0x600
[  234.714516][ T6610]  ? squashfs_lookup+0x21e/0xf00
[  234.714537][ T6610]  ? squashfs_lookup+0x21e/0xf00
[  234.714564][ T6610]  squashfs_lookup+0x21e/0xf00
[  234.714601][ T6610]  ? __pfx_squashfs_lookup+0x10/0x10
[  234.714624][ T6610]  ? __pfx___d_alloc_parallel+0x10/0x10
[  234.714648][ T6610]  ? lock_acquire+0x115/0x350
[  234.714680][ T6610]  __lookup_slow+0x1fb/0x2f0
[  234.714704][ T6610]  lookup_slow+0x59/0x80
[  234.714725][ T6610]  path_lookupat+0x3f5/0x8c0
[  234.714760][ T6610]  filename_lookup+0x265/0x5d0
[  234.714784][ T6610]  ? __pfx_filename_lookup+0x10/0x10
[  234.714822][ T6610]  ? strncpy_from_user+0x150/0x2c0
[  234.714851][ T6610]  path_listxattrat+0x13b/0x3f0
[  234.714870][ T6610]  ? __pfx_path_listxattrat+0x10/0x10
[  234.714894][ T6610]  do_syscall_64+0x16a/0x530
[  234.714912][ T6610]  ? trace_irq_disable+0x3b/0x140
[  234.714934][ T6610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.714950][ T6610]  ? clear_bhb_loop+0x70/0xc0
[  234.714975][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.714990][ T6610] RIP: 0033:0x00007f234f59fb19
[  234.715006][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.715018][ T6610] RSP: 002b:00007f234d7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3
[  234.715035][ T6610] RAX: ffffffffffffffda RBX: 00007f234f825fa0 RCX: 00007f234f59fb19
[  234.715046][ T6610] RDX: fffffffffffffff3 RSI: 0000000000000000 RDI: 0000200000000b80
[  234.715056][ T6610] RBP: 00007f234d7f6090 R08: 0000000000000000 R09: 0000000000000000
[  234.715065][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.715074][ T6610] R13: 00007f234f826038 R14: 00007f234f825fa0 R15: 00007ffec5e0b708
[  234.715098][ T6610]  </TASK>
[  234.861845][ T6610] SQUASHFS error: Failed to allocate squashfs_dir_entry
[  234.995193][  T263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.995209][  T263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.351998][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4
[  235.876127][ T6618] netlink: 52 bytes leftover after parsing attributes in process `syz.1.172'.
[  235.876180][ T6618] netlink: 52 bytes leftover after parsing attributes in process `syz.1.172'.
[  235.876199][ T6618] netlink: 52 bytes leftover after parsing attributes in process `syz.1.172'.
[  240.217644][ T6631] loop4: detected capacity change from 0 to 32768
[  240.257476][ T6631] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  240.317143][ T6631] XFS (loop4): Ending clean mount
[  240.452152][ T5634] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  242.493416][ T6656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.179'.
[  242.493513][ T6656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.179'.
[  242.493601][ T6656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.179'.
[  243.292651][ T6663] netlink: 52 bytes leftover after parsing attributes in process `syz.5.180'.
[  243.292702][ T6663] netlink: 52 bytes leftover after parsing attributes in process `syz.5.180'.
[  243.292735][ T6663] netlink: 52 bytes leftover after parsing attributes in process `syz.5.180'.
[  250.646002][ T6685] loop4: detected capacity change from 0 to 256
[  250.687045][ T6685] exfat: Deprecated parameter 'namecase'
[  250.687158][ T6685] exfat: Deprecated parameter 'namecase'
[  250.785783][ T6685] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  251.681078][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.188'.
[  251.681417][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.188'.
[  251.681456][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.188'.
[  254.326519][ T6714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.182'.
[  254.326815][ T6714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.182'.
[  254.326981][ T6714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.182'.
[  255.920467][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  255.920529][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  256.769769][ T6729] loop2: detected capacity change from 0 to 32768
[  256.928587][ T6737] netlink: 52 bytes leftover after parsing attributes in process `syz.4.191'.
[  256.928619][ T6737] netlink: 52 bytes leftover after parsing attributes in process `syz.4.191'.
[  256.928636][ T6737] netlink: 52 bytes leftover after parsing attributes in process `syz.4.191'.
[  257.631489][ T6729] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.700844][ T6729] XFS (loop2): Ending clean mount
[  259.387235][ T5640] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  259.891343][ T6755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.195'.
[  259.891372][ T6755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.195'.
[  259.891389][ T6755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.195'.
[  260.014585][ T6756] TCP: TCP_TX_DELAY enabled
[  260.054575][ T6756] netlink: 'syz.1.190': attribute type 3 has an invalid length.
[  260.441600][ T6762] loop1: detected capacity change from 0 to 256
[  260.454641][ T6762] exfat: Deprecated parameter 'namecase'
[  260.454747][ T6762] exfat: Deprecated parameter 'namecase'
[  260.535412][ T6762] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  261.107626][ T6775] netlink: 52 bytes leftover after parsing attributes in process `syz.5.199'.
[  261.108035][ T6775] netlink: 52 bytes leftover after parsing attributes in process `syz.5.199'.
[  261.108201][ T6775] netlink: 52 bytes leftover after parsing attributes in process `syz.5.199'.
[  264.199338][ T6786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.201'.
[  264.199440][ T6786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.201'.
[  264.199506][ T6786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.201'.
[  265.976450][ T6793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.205'.
[  265.976630][ T6793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.205'.
[  265.976668][ T6793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.205'.
[  267.584984][ T6800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.207'.
[  267.585016][ T6800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.207'.
[  267.585033][ T6800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.207'.
[  270.345414][ T6824] loop5: detected capacity change from 0 to 256
[  270.346280][ T6824] exfat: Deprecated parameter 'namecase'
[  270.346372][ T6824] exfat: Deprecated parameter 'namecase'
[  272.018288][ T6824] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  272.159508][ T6829] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  272.840576][ T6839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.203'.
[  272.840609][ T6839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.203'.
[  272.840627][ T6839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.203'.
[  273.890659][ T6846] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  274.155088][ T6846] loop5: detected capacity change from 0 to 4096
[  274.452659][ T6846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.987016][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.923777][ T6858] netlink: 'syz.2.209': attribute type 3 has an invalid length.
[  277.186992][ T6857] netlink: 52 bytes leftover after parsing attributes in process `syz.5.215'.
[  277.187116][ T6857] netlink: 52 bytes leftover after parsing attributes in process `syz.5.215'.
[  277.187190][ T6857] netlink: 52 bytes leftover after parsing attributes in process `syz.5.215'.
[  278.405567][ T6870] loop5: detected capacity change from 0 to 4096
[  278.527980][ T6875] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.692216][ T6870] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  278.760351][ T6870] Remounting filesystem read-only
[  278.878998][ T5645] Bluetooth: hci3: command 0x1003 tx timeout
[  278.879076][ T5643] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  280.605254][ T6310] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  287.786360][ T6897] loop0: detected capacity change from 0 to 128
[  288.736390][ T6897] befs: (loop0): invalid blocksize: 16384
[  290.531069][ T6898] loop2: detected capacity change from 0 to 4096
[  290.578652][ T6898] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  290.600190][ T6898] EXT4-fs: failed to create workqueue
[  290.600207][ T6898] EXT4-fs (loop2): mount failed
[  292.572188][ T6922] gretap0: entered allmulticast mode
[  294.752575][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.4.237'.
[  294.752608][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.4.237'.
[  294.752774][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.4.237'.
[  299.087257][ T6941] netlink: 52 bytes leftover after parsing attributes in process `syz.1.229'.
[  299.087374][ T6941] netlink: 52 bytes leftover after parsing attributes in process `syz.1.229'.
[  299.087416][ T6941] netlink: 52 bytes leftover after parsing attributes in process `syz.1.229'.
[  300.017190][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.234'.
[  300.133470][ T6948] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  300.159425][ T6948] loop5: detected capacity change from 0 to 4096
[  300.283330][ T6948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.088633][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.980062][ T6963] loop4: detected capacity change from 0 to 32768
[  303.016426][ T6963] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  303.108437][ T6963] XFS (loop4): Ending clean mount
[  303.328733][ T5634] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  303.541090][ T6960] netlink: 52 bytes leftover after parsing attributes in process `syz.5.242'.
[  303.541208][ T6960] netlink: 52 bytes leftover after parsing attributes in process `syz.5.242'.
[  303.541250][ T6960] netlink: 52 bytes leftover after parsing attributes in process `syz.5.242'.
[  309.330084][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.5.249'.
[  309.330486][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.5.249'.
[  309.330508][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.5.249'.
[  310.444535][ T5643] Bluetooth: hci5: command 0x0406 tx timeout
[  310.576761][   T56] Bluetooth: hci3: command 0x1003 tx timeout
[  310.577092][ T5635] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  316.141286][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'.
[  316.266444][ T7012] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  316.621466][ T7012] loop4: detected capacity change from 0 to 4096
[  316.851791][ T7012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.377831][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  317.377905][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  317.677663][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.893414][ T7018] loop2: detected capacity change from 0 to 256
[  317.900411][ T7018] exfat: Deprecated parameter 'namecase'
[  317.900702][ T7018] exfat: Deprecated parameter 'namecase'
[  317.995169][ T7018] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  321.616132][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[  322.018230][ T7033] netlink: 52 bytes leftover after parsing attributes in process `syz.5.250'.
[  322.018314][ T7033] netlink: 52 bytes leftover after parsing attributes in process `syz.5.250'.
[  322.018359][ T7033] netlink: 52 bytes leftover after parsing attributes in process `syz.5.250'.
[  322.623237][ T7045] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  323.044136][ T7045] loop2: detected capacity change from 0 to 4096
[  323.334662][ T7045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.431202][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.604981][ T7067] loop0: detected capacity change from 0 to 128
[  327.678968][ T5635] Bluetooth: hci3: command 0x1003 tx timeout
[  327.678982][ T5645] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  328.755937][ T7069] overlayfs: failed to resolve './bus': -2
[  330.573995][ T5645] Bluetooth: hci4: command 0x0406 tx timeout
[  330.754517][ T7078] FAULT_INJECTION: forcing a failure.
[  330.754517][ T7078] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  330.754550][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.1.259 Not tainted syzkaller #0 PREEMPT(full) 
[  330.754574][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  330.754593][ T7078] Call Trace:
[  330.754602][ T7078]  <TASK>
[  330.754611][ T7078]  dump_stack_lvl+0xe8/0x150
[  330.754653][ T7078]  should_fail_ex+0x3eb/0x540
[  330.754690][ T7078]  _copy_to_user+0x31/0xb0
[  330.754729][ T7078]  simple_read_from_buffer+0xe1/0x170
[  330.754765][ T7078]  proc_fail_nth_read+0x1bb/0x230
[  330.754792][ T7078]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  330.754820][ T7078]  ? rw_verify_area+0x24a/0x4c0
[  330.754853][ T7078]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  330.754877][ T7078]  vfs_read+0x213/0xa80
[  330.754914][ T7078]  ? __pfx___mutex_lock+0x10/0x10
[  330.754942][ T7078]  ? __pfx_vfs_read+0x10/0x10
[  330.754975][ T7078]  ? __fget_files+0x2a/0x420
[  330.755002][ T7078]  ? __fget_files+0x3a2/0x420
[  330.755037][ T7078]  ? __fget_files+0x2a/0x420
[  330.755070][ T7078]  ? fdget+0x1ac/0x250
[  330.755106][ T7078]  ksys_read+0x150/0x270
[  330.755141][ T7078]  ? __pfx_ksys_read+0x10/0x10
[  330.755185][ T7078]  do_syscall_64+0x16a/0x530
[  330.755210][ T7078]  ? trace_irq_disable+0x3b/0x140
[  330.755240][ T7078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.755263][ T7078]  ? clear_bhb_loop+0x70/0xc0
[  330.755291][ T7078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.755313][ T7078] RIP: 0033:0x00007f234f56034e
[  330.755335][ T7078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  330.755353][ T7078] RSP: 002b:00007f234d7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  330.755377][ T7078] RAX: ffffffffffffffda RBX: 00007f234d7f66c0 RCX: 00007f234f56034e
[  330.755392][ T7078] RDX: 000000000000000f RSI: 00007f234d7f60a0 RDI: 0000000000000004
[  330.755406][ T7078] RBP: 00007f234d7f6090 R08: 0000000000000000 R09: 0000000000000000
[  330.755419][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  330.755432][ T7078] R13: 00007f234f826038 R14: 00007f234f825fa0 R15: 00007ffec5e0b708
[  330.755468][ T7078]  </TASK>
[  331.229309][ T7080] loop4: detected capacity change from 0 to 512
[  331.252985][ T7080] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  331.253065][ T7080] EXT4-fs (loop4): failed to open journal device unknown-block(8,1) -EBUSY
[  331.708037][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'.
[  331.939536][ T7084] loop4: detected capacity change from 0 to 4096
[  332.136195][ T7084] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  332.136246][ T7084] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  332.184830][ T7084] ntfs3(loop4): ino=5, "/" indx_read_ra
[  332.208409][ T7084] ntfs3(loop4): ino=5, "/" indx_read_ra
[  332.217708][ T7084] ntfs3(loop4): ino=5, "/" indx_read_ra
[  332.280493][   T14] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  332.291268][ T5634] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  332.291306][ T5634] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  332.291323][ T5634] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  332.292896][   T14] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  334.025453][ T7091] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  334.294602][ T7091] loop1: detected capacity change from 0 to 4096
[  334.486575][ T7091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.212425][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.217043][ T7117] loop0: detected capacity change from 0 to 128
[  341.971529][ T5635] Bluetooth: hci3: command 0x1003 tx timeout
[  342.006089][   T56] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  344.841490][ T7132] syz_tun: entered allmulticast mode
[  344.896178][ T7131] syz_tun: left allmulticast mode
[  346.574406][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'.
[  346.664636][ T7139] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  346.960619][ T7139] loop2: detected capacity change from 0 to 4096
[  347.093274][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.352178][ T7147] netlink: 52 bytes leftover after parsing attributes in process `syz.5.285'.
[  348.352293][ T7147] netlink: 52 bytes leftover after parsing attributes in process `syz.5.285'.
[  348.352335][ T7147] netlink: 52 bytes leftover after parsing attributes in process `syz.5.285'.
[  348.717782][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.455369][ T7154] netlink: 52 bytes leftover after parsing attributes in process `syz.5.287'.
[  349.455477][ T7154] netlink: 52 bytes leftover after parsing attributes in process `syz.5.287'.
[  349.455496][ T7154] netlink: 52 bytes leftover after parsing attributes in process `syz.5.287'.
[  350.919334][ T7158] loop2: detected capacity change from 0 to 128
[  351.008688][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'.
[  351.900325][ T7164] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  352.244125][ T7164] loop1: detected capacity change from 0 to 4096
[  352.477428][ T7164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.519354][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.050407][ T7177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.291'.
[  355.050747][ T7177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.291'.
[  355.050916][ T7177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.291'.
[  356.399173][ T5635] Bluetooth: hci3: command 0x1003 tx timeout
[  356.399270][   T56] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  357.794549][ T7188] 9p: Bad value for 'wfdno'
[  361.340182][ T7203] netlink: 52 bytes leftover after parsing attributes in process `syz.0.297'.
[  361.340653][ T7203] netlink: 52 bytes leftover after parsing attributes in process `syz.0.297'.
[  361.340702][ T7203] netlink: 52 bytes leftover after parsing attributes in process `syz.0.297'.
[  362.549050][ T5635] Bluetooth: hci3: command 0x1003 tx timeout
[  362.568861][   T56] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  364.105153][ T7215] netlink: 52 bytes leftover after parsing attributes in process `syz.0.299'.
[  364.105212][ T7215] netlink: 52 bytes leftover after parsing attributes in process `syz.0.299'.
[  364.105231][ T7215] netlink: 52 bytes leftover after parsing attributes in process `syz.0.299'.
[  367.285833][ T7225] FAULT_INJECTION: forcing a failure.
[  367.285833][ T7225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.285856][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.5.302 Not tainted syzkaller #0 PREEMPT(full) 
[  367.285880][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  367.285889][ T7225] Call Trace:
[  367.285895][ T7225]  <TASK>
[  367.285902][ T7225]  dump_stack_lvl+0xe8/0x150
[  367.285932][ T7225]  should_fail_ex+0x3eb/0x540
[  367.285958][ T7225]  _copy_to_user+0x31/0xb0
[  367.285983][ T7225]  bpf_verifier_vlog+0x496/0x900
[  367.286013][ T7225]  __btf_verifier_log+0xe2/0x140
[  367.286037][ T7225]  ? __pfx___btf_verifier_log+0x10/0x10
[  367.286060][ T7225]  ? btf_parse_hdr+0x1da/0x810
[  367.286082][ T7225]  btf_parse_hdr+0x2bd/0x810
[  367.286103][ T7225]  btf_new_fd+0x312/0x8f0
[  367.286122][ T7225]  __sys_bpf+0xe0c/0xe70
[  367.286143][ T7225]  ? __pfx___sys_bpf+0x10/0x10
[  367.286166][ T7225]  ? __fget_files+0x2a/0x420
[  367.286199][ T7225]  ? ksys_write+0x242/0x270
[  367.286223][ T7225]  ? __pfx_ksys_write+0x10/0x10
[  367.286249][ T7225]  __x64_sys_bpf+0xba/0xd0
[  367.286323][ T7225]  do_syscall_64+0x16a/0x530
[  367.286340][ T7225]  ? trace_irq_disable+0x3b/0x140
[  367.286379][ T7225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.286395][ T7225]  ? clear_bhb_loop+0x70/0xc0
[  367.286414][ T7225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.286429][ T7225] RIP: 0033:0x00007f7ff279fb19
[  367.286445][ T7225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.286457][ T7225] RSP: 002b:00007f7ff361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  367.286473][ T7225] RAX: ffffffffffffffda RBX: 00007f7ff2a26090 RCX: 00007f7ff279fb19
[  367.286484][ T7225] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012
[  367.286494][ T7225] RBP: 00007f7ff361f090 R08: 0000000000000000 R09: 0000000000000000
[  367.286504][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.286512][ T7225] R13: 00007f7ff2a26128 R14: 00007f7ff2a26090 R15: 00007ffc5777a608
[  367.286536][ T7225]  </TASK>
[  367.639004][ T7222] loop1: detected capacity change from 0 to 4096
[  367.785909][ T7227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.529124][ T5635] Bluetooth: hci3: command 0x1003 tx timeout
[  371.529268][   T56] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  372.097716][ T5746] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  372.262434][ T5746] usb 5-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  372.278951][ T5746] usb 5-1: config 3 has an invalid interface number: 106 but max is 2
[  372.278971][ T5746] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  372.278986][ T5746] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 3
[  372.279000][ T5746] usb 5-1: config 3 has no interface number 0
[  372.279029][ T5746] usb 5-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  372.279048][ T5746] usb 5-1: config 3 interface 106 has no altsetting 0
[  372.336219][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.336249][ T5746] usb 5-1: Product: syz
[  372.336264][ T5746] usb 5-1: Manufacturer: syz
[  372.336281][ T5746] usb 5-1: SerialNumber: syz
[  372.388322][ T5746] ttusbir 5-1:3.106: cannot find expected altsetting
[  373.657342][ T5746] usb 5-1: USB disconnect, device number 2
[  373.761231][ T7243] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  376.297684][ T7253] loop0: detected capacity change from 0 to 128
[  380.182627][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  380.182685][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  385.438957][ T5645] Bluetooth: hci3: command 0x1003 tx timeout
[  385.439065][   T56] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  387.386344][ T5635] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  390.162397][ T5643] Bluetooth: hci5: command 0x0406 tx timeout
[  390.888923][ T5753] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  391.028234][ T7299] loop5: detected capacity change from 0 to 512
[  391.044298][ T5753] usb 2-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  391.059590][ T5753] usb 2-1: config 3 has an invalid interface number: 106 but max is 2
[  391.059620][ T5753] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  391.059640][ T5753] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3
[  391.059662][ T5753] usb 2-1: config 3 has no interface number 0
[  391.059703][ T5753] usb 2-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  391.059731][ T5753] usb 2-1: config 3 interface 106 has no altsetting 0
[  391.125764][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.125785][ T5753] usb 2-1: Product: syz
[  391.125796][ T5753] usb 2-1: Manufacturer: syz
[  391.125806][ T5753] usb 2-1: SerialNumber: syz
[  391.172661][ T7299] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.315: corrupted in-inode xattr: invalid ea_ino
[  391.172699][ T7299] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  391.174931][ T7299] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.315: couldn't read orphan inode 15 (err -117)
[  391.174965][ T7299] loop5: lost filesystem error report for type 5 error -117
[  391.229566][ T7299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.235485][ T5753] ttusbir 2-1:3.106: cannot find expected altsetting
[  391.416209][ T5774] usb 2-1: USB disconnect, device number 3
[  392.900401][ T5645] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  393.771478][ T7299] kexec: Could not allocate control_code_buffer
[  393.917469][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.885516][ T7336] loop4: detected capacity change from 0 to 4096
[  400.919405][ T7340] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  403.203605][ T7354] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  403.428199][ T7355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.320'.
[  403.428220][ T7355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.320'.
[  403.428231][ T7355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.320'.
[  404.397910][ T7354] loop5: detected capacity change from 0 to 4096
[  404.508017][   T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  404.589519][ T7354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.943452][   T32] usb 5-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  404.997693][   T32] usb 5-1: config 3 has an invalid interface number: 106 but max is 2
[  404.997727][   T32] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  404.997748][   T32] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 3
[  404.997769][   T32] usb 5-1: config 3 has no interface number 0
[  404.997812][   T32] usb 5-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  404.997841][   T32] usb 5-1: config 3 interface 106 has no altsetting 0
[  405.217353][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.217385][   T32] usb 5-1: Product: syz
[  405.217401][   T32] usb 5-1: Manufacturer: syz
[  405.217417][   T32] usb 5-1: SerialNumber: syz
[  405.261633][   T32] ttusbir 5-1:3.106: cannot find expected altsetting
[  405.294234][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.502363][ T5753] usb 5-1: USB disconnect, device number 3
[  405.551038][ T7363] netlink: 'syz.5.335': attribute type 62 has an invalid length.
[  407.629488][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  407.726222][ T7380] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  408.009213][ T7380] loop1: detected capacity change from 0 to 4096
[  408.223888][ T7380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.819314][ T5642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.933874][ T7389] FAULT_INJECTION: forcing a failure.
[  408.933874][ T7389] name failslab, interval 1, probability 0, space 0, times 0
[  408.933908][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.2.342 Not tainted syzkaller #0 PREEMPT(full) 
[  408.933933][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  408.933946][ T7389] Call Trace:
[  408.933955][ T7389]  <TASK>
[  408.933964][ T7389]  dump_stack_lvl+0xe8/0x150
[  408.934005][ T7389]  should_fail_ex+0x3eb/0x540
[  408.934040][ T7389]  ? __alloc_skb+0x1db/0x7a0
[  408.934071][ T7389]  should_failslab+0xa8/0x100
[  408.934095][ T7389]  ? __alloc_skb+0x1db/0x7a0
[  408.934123][ T7389]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  408.934151][ T7389]  ? __alloc_skb+0x18d/0x7a0
[  408.934182][ T7389]  ? __alloc_skb+0x1db/0x7a0
[  408.934230][ T7389]  __alloc_skb+0x1db/0x7a0
[  408.934267][ T7389]  netlink_ack+0x136/0xb30
[  408.934295][ T7389]  ? __pfx_genl_rcv_msg+0x10/0x10
[  408.934318][ T7389]  ? __pfx_batadv_post_doit+0x10/0x10
[  408.934356][ T7389]  ? __asan_memcpy+0x40/0x70
[  408.934392][ T7389]  netlink_rcv_skb+0x2a4/0x4a0
[  408.934423][ T7389]  ? __pfx_genl_rcv_msg+0x10/0x10
[  408.934447][ T7389]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  408.934494][ T7389]  ? down_read+0x2b9/0x320
[  408.934528][ T7389]  genl_rcv+0x28/0x40
[  408.934549][ T7389]  netlink_unicast+0x8ef/0xa80
[  408.934595][ T7389]  netlink_sendmsg+0x7f0/0xb20
[  408.934632][ T7389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.934667][ T7389]  ? aa_sock_msg_perm+0x144/0x210
[  408.934699][ T7389]  ? apparmor_socket_sendmsg+0x98/0x360
[  408.934723][ T7389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  408.934753][ T7389]  sock_sendmsg_nosec+0x14e/0x190
[  408.934783][ T7389]  ____sys_sendmsg+0x54e/0x850
[  408.934824][ T7389]  ? __pfx_____sys_sendmsg+0x10/0x10
[  408.934870][ T7389]  ? import_iovec+0x73/0xa0
[  408.934907][ T7389]  ___sys_sendmsg+0x2a6/0x360
[  408.934926][ T7389]  ? __lock_acquire+0x747/0x2de0
[  408.934960][ T7389]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.935023][ T7389]  ? __fget_files+0x3a2/0x420
[  408.935051][ T7389]  ? __fget_files+0x2a/0x420
[  408.935091][ T7389]  __x64_sys_sendmsg+0x1b1/0x290
[  408.935116][ T7389]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  408.935162][ T7389]  do_syscall_64+0x16a/0x530
[  408.935187][ T7389]  ? trace_irq_disable+0x3b/0x140
[  408.935224][ T7389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.935247][ T7389]  ? clear_bhb_loop+0x70/0xc0
[  408.935274][ T7389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.935296][ T7389] RIP: 0033:0x00007fa9ea79fb19
[  408.935319][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.935337][ T7389] RSP: 002b:00007fa9e89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.935360][ T7389] RAX: ffffffffffffffda RBX: 00007fa9eaa25fa0 RCX: 00007fa9ea79fb19
[  408.935376][ T7389] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000003
[  408.935390][ T7389] RBP: 00007fa9e89f6090 R08: 0000000000000000 R09: 0000000000000000
[  408.935404][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.935417][ T7389] R13: 00007fa9eaa26038 R14: 00007fa9eaa25fa0 R15: 00007ffdba8f4648
[  408.935453][ T7389]  </TASK>
[  409.134016][ T5645] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  409.134124][ T5635] Bluetooth: hci3: command 0x1003 tx timeout
[  414.490892][ T5645] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  416.899360][ T7420] FAULT_INJECTION: forcing a failure.
[  416.899360][ T7420] name failslab, interval 1, probability 0, space 0, times 0
[  416.899405][ T7420] CPU: 1 UID: 0 PID: 7420 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) 
[  416.899430][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  416.899443][ T7420] Call Trace:
[  416.899451][ T7420]  <TASK>
[  416.899460][ T7420]  dump_stack_lvl+0xe8/0x150
[  416.899510][ T7420]  should_fail_ex+0x3eb/0x540
[  416.899547][ T7420]  should_failslab+0xa8/0x100
[  416.899572][ T7420]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  416.899602][ T7420]  ? trace_kmem_cache_alloc+0x29/0xe0
[  416.899628][ T7420]  ? nf_ct_ext_add+0x1b6/0x3f0
[  416.899654][ T7420]  ? nf_ct_ext_add+0x1b6/0x3f0
[  416.899685][ T7420]  ? nf_ct_ext_add+0x1b6/0x3f0
[  416.899714][ T7420]  krealloc_node_align_noprof+0x19a/0x390
[  416.899753][ T7420]  nf_ct_ext_add+0x1b6/0x3f0
[  416.899786][ T7420]  ctnetlink_new_conntrack+0x12bc/0x2940
[  416.899820][ T7420]  ? ctnetlink_new_conntrack+0x74f/0x2940
[  416.899856][ T7420]  ? __pfx_ctnetlink_new_conntrack+0x10/0x10
[  416.899886][ T7420]  ? __pfx___mutex_trylock_common+0x10/0x10
[  416.899924][ T7420]  ? rcu_is_watching+0x16/0xb0
[  416.899957][ T7420]  ? trace_contention_end+0x3d/0x140
[  416.899994][ T7420]  ? __mutex_lock+0x305/0x15a0
[  416.900022][ T7420]  ? lock_acquire+0x115/0x350
[  416.900063][ T7420]  ? __pfx___mutex_lock+0x10/0x10
[  416.900113][ T7420]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  416.900143][ T7420]  ? nfnetlink_rcv_msg+0x228/0x12b0
[  416.900192][ T7420]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  416.900262][ T7420]  ? hook_capable+0x1c3/0x5e0
[  416.900300][ T7420]  netlink_rcv_skb+0x226/0x4a0
[  416.900335][ T7420]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  416.900366][ T7420]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  416.900408][ T7420]  ? bpf_lsm_capable+0x9/0x20
[  416.900429][ T7420]  ? security_capable+0x7e/0x2c0
[  416.900462][ T7420]  nfnetlink_rcv+0x2b9/0x28c0
[  416.900505][ T7420]  ? __dev_queue_xmit+0x29b/0x3920
[  416.900534][ T7420]  ? __local_bh_enable_ip+0xd6/0x140
[  416.900566][ T7420]  ? lockdep_hardirqs_on+0x7b/0x110
[  416.900590][ T7420]  ? __dev_queue_xmit+0x29b/0x3920
[  416.900612][ T7420]  ? __local_bh_enable_ip+0xd6/0x140
[  416.900642][ T7420]  ? __dev_queue_xmit+0x29b/0x3920
[  416.900664][ T7420]  ? __dev_queue_xmit+0x1efb/0x3920
[  416.900694][ T7420]  ? __dev_queue_xmit+0x29b/0x3920
[  416.900726][ T7420]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  416.900764][ T7420]  ? __pfx___dev_queue_xmit+0x10/0x10
[  416.900800][ T7420]  ? __copy_skb_header+0xa3/0x4a0
[  416.900824][ T7420]  ? __asan_memcpy+0x40/0x70
[  416.900852][ T7420]  ? __skb_clone+0x5c/0x760
[  416.900879][ T7420]  ? __skb_clone+0x4a2/0x760
[  416.900914][ T7420]  ? skb_clone+0x246/0x3a0
[  416.900941][ T7420]  ? __netlink_deliver_tap+0x681/0x6e0
[  416.900969][ T7420]  ? netlink_deliver_tap+0x2e/0x1b0
[  416.901007][ T7420]  ? netlink_deliver_tap+0x2e/0x1b0
[  416.901042][ T7420]  ? netlink_deliver_tap+0x2e/0x1b0
[  416.901078][ T7420]  netlink_unicast+0x8ef/0xa80
[  416.901142][ T7420]  netlink_sendmsg+0x7f0/0xb20
[  416.901181][ T7420]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.901216][ T7420]  ? aa_sock_msg_perm+0x144/0x210
[  416.901247][ T7420]  ? apparmor_socket_sendmsg+0x98/0x360
[  416.901273][ T7420]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.901302][ T7420]  sock_sendmsg_nosec+0x14e/0x190
[  416.901334][ T7420]  ____sys_sendmsg+0x54e/0x850
[  416.901375][ T7420]  ? __pfx_____sys_sendmsg+0x10/0x10
[  416.901421][ T7420]  ? import_iovec+0x73/0xa0
[  416.901456][ T7420]  ___sys_sendmsg+0x2a6/0x360
[  416.901476][ T7420]  ? __lock_acquire+0x747/0x2de0
[  416.901517][ T7420]  ? __pfx____sys_sendmsg+0x10/0x10
[  416.901581][ T7420]  ? __fget_files+0x3a2/0x420
[  416.901610][ T7420]  ? __fget_files+0x2a/0x420
[  416.901650][ T7420]  __x64_sys_sendmsg+0x1b1/0x290
[  416.901676][ T7420]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  416.901722][ T7420]  do_syscall_64+0x16a/0x530
[  416.901748][ T7420]  ? trace_irq_disable+0x3b/0x140
[  416.901778][ T7420]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.901801][ T7420]  ? clear_bhb_loop+0x70/0xc0
[  416.901829][ T7420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.901852][ T7420] RIP: 0033:0x00007fa9ea79fb19
[  416.901875][ T7420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.901894][ T7420] RSP: 002b:00007fa9e89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.901917][ T7420] RAX: ffffffffffffffda RBX: 00007fa9eaa25fa0 RCX: 00007fa9ea79fb19
[  416.901934][ T7420] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  416.901949][ T7420] RBP: 00007fa9e89f6090 R08: 0000000000000000 R09: 0000000000000000
[  416.901963][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.901976][ T7420] R13: 00007fa9eaa26038 R14: 00007fa9eaa25fa0 R15: 00007ffdba8f4648
[  416.902013][ T7420]  </TASK>
[  420.249637][ T7430] loop4: detected capacity change from 0 to 8192
[  420.365748][   T33] kauditd_printk_skb: 45 callbacks suppressed
[  420.365765][   T33] audit: type=1800 audit(1793873663.352:59): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.348" name="bus" dev="loop4" ino=7 res=0 errno=-22
[  420.461270][   T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  420.674221][   T32] usb 1-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  420.676460][   T32] usb 1-1: config 3 has an invalid interface number: 106 but max is 2
[  420.676492][   T32] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  420.676512][   T32] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 3
[  420.676536][   T32] usb 1-1: config 3 has no interface number 0
[  420.676578][   T32] usb 1-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  420.676609][   T32] usb 1-1: config 3 interface 106 has no altsetting 0
[  420.756990][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.757019][   T32] usb 1-1: Product: syz
[  420.757030][   T32] usb 1-1: Manufacturer: syz
[  420.757040][   T32] usb 1-1: SerialNumber: syz
[  420.807365][   T32] ttusbir 1-1:3.106: cannot find expected altsetting
[  421.594755][ T5766] usb 1-1: USB disconnect, device number 2
[  425.639250][   T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  427.111755][ T5635] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  427.116743][   T33] audit: type=1400 audit(1793873669.202:60): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=7474 comm="syz.4.360" name="p" offset=79
[  427.320751][   T32] usb 1-1: Using ep0 maxpacket: 32
[  427.345177][   T32] usb 1-1: unable to get BOS descriptor or descriptor too short
[  427.345249][   T32] usb 1-1: New USB device found: idVendor=1286, idProduct=2044, bcdDevice=b8.d5
[  427.358460][   T32] usb 1-1: config 11 has an invalid interface number: 212 but max is 0
[  427.358493][   T32] usb 1-1: config 11 has no interface number 0
[  427.358526][   T32] usb 1-1: config 11 interface 212 has no altsetting 0
[  427.404766][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.404798][   T32] usb 1-1: Product: syz
[  427.404814][   T32] usb 1-1: Manufacturer: syz
[  427.404830][   T32] usb 1-1: SerialNumber: syz
[  427.742086][   T32] usb 1-1: USB disconnect, device number 3
[  428.620872][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'.
[  428.698207][ T7492] FAULT_INJECTION: forcing a failure.
[  428.698207][ T7492] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.698261][ T7492] CPU: 1 UID: 0 PID: 7492 Comm: syz.5.363 Not tainted syzkaller #0 PREEMPT(full) 
[  428.698286][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  428.698304][ T7492] Call Trace:
[  428.698312][ T7492]  <TASK>
[  428.698322][ T7492]  dump_stack_lvl+0xe8/0x150
[  428.698364][ T7492]  should_fail_ex+0x3eb/0x540
[  428.698401][ T7492]  _copy_from_user+0x2d/0xb0
[  428.698435][ T7492]  ___sys_recvmsg+0x173/0x5a0
[  428.698459][ T7492]  ? lockdep_hardirqs_on+0x7b/0x110
[  428.698488][ T7492]  ? __pfx____sys_recvmsg+0x10/0x10
[  428.698551][ T7492]  do_recvmmsg+0x31a/0x800
[  428.698584][ T7492]  ? __pfx_do_recvmmsg+0x10/0x10
[  428.698612][ T7492]  ? do_futex+0x3e7/0x4e0
[  428.698643][ T7492]  ? __sys_connect+0x3a1/0x450
[  428.698686][ T7492]  __x64_sys_recvmmsg+0x198/0x250
[  428.698712][ T7492]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  428.698761][ T7492]  do_syscall_64+0x16a/0x530
[  428.698786][ T7492]  ? trace_irq_disable+0x3b/0x140
[  428.698816][ T7492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.698839][ T7492]  ? clear_bhb_loop+0x70/0xc0
[  428.698866][ T7492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.698895][ T7492] RIP: 0033:0x00007f7ff279fb19
[  428.698918][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.698937][ T7492] RSP: 002b:00007f7ff3640028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  428.698962][ T7492] RAX: ffffffffffffffda RBX: 00007f7ff2a25fa0 RCX: 00007f7ff279fb19
[  428.698978][ T7492] RDX: 0000000000010106 RSI: 0000200000000400 RDI: 0000000000000006
[  428.698993][ T7492] RBP: 00007f7ff2837b70 R08: 0000000000000000 R09: 0000000000000000
[  428.699006][ T7492] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  428.699020][ T7492] R13: 00007f7ff2a26038 R14: 00007f7ff2a25fa0 R15: 00007ffc5777a608
[  428.699055][ T7492]  </TASK>
[  431.318002][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'.
[  433.125954][ T7509] loop5: detected capacity change from 0 to 4096
[  433.471406][ T7509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.180335][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.373484][ T7521] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  435.522597][ T5645] Bluetooth: hci3: command 0x1003 tx timeout
[  435.522707][ T5635] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  436.597256][ T5766] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  436.751392][ T5766] usb 5-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  436.762478][ T5766] usb 5-1: config 3 has an invalid interface number: 106 but max is 2
[  436.762573][ T5766] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  436.762634][ T5766] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 3
[  436.762689][ T5766] usb 5-1: config 3 has no interface number 0
[  436.762798][ T5766] usb 5-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  436.762872][ T5766] usb 5-1: config 3 interface 106 has no altsetting 0
[  436.781849][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.781926][ T5766] usb 5-1: Product: syz
[  436.781969][ T5766] usb 5-1: Manufacturer: syz
[  436.782010][ T5766] usb 5-1: SerialNumber: syz
[  436.905158][ T5766] ttusbir 5-1:3.106: cannot find expected altsetting
[  437.228220][   T10] usb 5-1: USB disconnect, device number 4
[  438.238891][ T5635] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  438.386511][ T7551] loop4: detected capacity change from 0 to 512
[  438.400466][ T7551] EXT4-fs: Ignoring removed oldalloc option
[  438.402592][ T7551] EXT4-fs (loop4): Test dummy encryption mode enabled
[  438.495209][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.712485][ T7549] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  441.242916][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  441.242977][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  441.320437][ T7549] fscrypt: AES-256-XTS using blk-crypto-fallback
[  441.385983][ T7567] tun0: tun_chr_ioctl cmd 1074025675
[  441.386001][ T7567] tun0: persist enabled
[  441.401706][ T7567] tun0: tun_chr_ioctl cmd 1074025675
[  441.401724][ T7567] tun0: persist enabled
[  443.063639][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.900717][ T5635] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  448.594474][ T7595] loop2: detected capacity change from 0 to 256
[  448.606685][ T7595] exfat: Deprecated parameter 'namecase'
[  448.606791][ T7595] exfat: Deprecated parameter 'namecase'
[  448.705939][ T7595] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  451.825220][ T7603] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  452.394230][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'.
[  455.576796][ T5831] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  455.743727][ T5831] usb 6-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  455.747438][ T5831] usb 6-1: config 3 has an invalid interface number: 106 but max is 2
[  455.747512][ T5831] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  455.747573][ T5831] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 3
[  455.747636][ T5831] usb 6-1: config 3 has no interface number 0
[  455.747742][ T5831] usb 6-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  455.747816][ T5831] usb 6-1: config 3 interface 106 has no altsetting 0
[  455.839008][ T5643] Bluetooth: hci3: command 0x1003 tx timeout
[  455.839111][ T5645] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  455.938537][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.970662][ T5831] usb 6-1: can't set config #3, error -71
[  456.027349][ T5831] usb 6-1: USB disconnect, device number 2
[  456.330564][ T7627] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  456.659398][ T7627] loop5: detected capacity change from 0 to 4096
[  456.843123][ T7627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.221731][ T7634] loop2: detected capacity change from 0 to 512
[  458.224762][ T7634] EXT4-fs: Ignoring removed bh option
[  458.616202][ T5643] Bluetooth: hci6: command 0x1003 tx timeout
[  458.616338][ T5635] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  458.693515][ T7634] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  458.693536][ T7634] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  458.693551][ T7634] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  458.723786][ T7634] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.387: invalid indirect mapped block 2048 (level 1)
[  458.723818][ T7634] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  458.737533][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  458.737562][    C0] EXT4-fs (loop2): initial error at time 1793873701: ext4_free_branches:1040: inode 11
[  458.737598][    C0] EXT4-fs (loop2): last error at time 1793873701: ext4_free_branches:1040: inode 11
[  458.751800][ T7634] EXT4-fs (loop2): Remounting filesystem read-only
[  458.751963][ T7634] EXT4-fs (loop2): 1 truncate cleaned up
[  458.753191][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.996544][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.069516][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.358542][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.392'.
[  459.456586][ T7643] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  459.738605][ T7643] loop5: detected capacity change from 0 to 4096
[  459.922369][ T7643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.379705][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.775773][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.0.396'.
[  460.775888][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.0.396'.
[  460.775934][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.0.396'.
[  465.018901][ T7663] loop2: detected capacity change from 0 to 128
[  466.100153][   T32] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  466.443743][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.2.401'.
[  466.443948][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.2.401'.
[  466.444166][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.2.401'.
[  467.698202][   T32] usb 2-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  467.712889][   T32] usb 2-1: config 3 has an invalid interface number: 106 but max is 2
[  467.712921][   T32] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  467.712943][   T32] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3
[  467.712966][   T32] usb 2-1: config 3 has no interface number 0
[  467.713008][   T32] usb 2-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  467.713037][   T32] usb 2-1: config 3 interface 106 has no altsetting 0
[  467.715372][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.715400][   T32] usb 2-1: Product: syz
[  467.715415][   T32] usb 2-1: Manufacturer: syz
[  467.715430][   T32] usb 2-1: SerialNumber: syz
[  467.830116][   T32] ttusbir 2-1:3.106: cannot find expected altsetting
[  469.547378][ T5767] usb 2-1: USB disconnect, device number 4
[  471.765875][ T7682] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  475.079278][ T7691] netlink: 56 bytes leftover after parsing attributes in process `syz.2.402'.
[  475.268182][ T7695] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  475.579237][ T7695] loop5: detected capacity change from 0 to 4096
[  475.851034][ T7695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.829915][ T5645] Bluetooth: hci3: command 0x1003 tx timeout
[  477.830046][ T5635] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  479.124637][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.523527][ T7709] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  479.853950][ T7709] loop4: detected capacity change from 0 to 4096
[  480.112001][ T7709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.545701][ T7717] afs: Unknown parameter 'dy'
[  482.783797][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.729889][ T5766] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  484.788866][   T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  484.883594][ T5766] usb 3-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=25.19
[  484.891225][ T5766] usb 3-1: config 3 has an invalid interface number: 106 but max is 2
[  484.891297][ T5766] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  484.891354][ T5766] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 3
[  484.891409][ T5766] usb 3-1: config 3 has no interface number 0
[  484.891547][ T5766] usb 3-1: config 3 interface 106 altsetting 1 endpoint 0xF has invalid maxpacket 258, setting to 64
[  484.891640][ T5766] usb 3-1: config 3 interface 106 has no altsetting 0
[  484.952352][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.952373][ T5766] usb 3-1: Product: syz
[  484.952384][ T5766] usb 3-1: Manufacturer: syz
[  484.952394][ T5766] usb 3-1: SerialNumber: syz
[  485.014266][   T32] usb 5-1: New USB device found: idVendor=0458, idProduct=5013, bcdDevice=0.40
[  485.042302][   T32] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[  485.042339][   T32] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  485.042358][   T32] usb 5-1: config 1 interface 0 has no altsetting 0
[  485.084727][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.084754][   T32] usb 5-1: Product: syz
[  485.084765][   T32] usb 5-1: Manufacturer: syz
[  485.084775][   T32] usb 5-1: SerialNumber: syz
[  485.136743][ T5766] ttusbir 3-1:3.106: cannot find expected altsetting
[  485.368357][ T5767] usb 3-1: USB disconnect, device number 5
[  486.873599][   T32] usbhid 5-1:1.0: can't add hid device: -71
[  486.873781][   T32] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  486.895523][   T32] usb 5-1: USB disconnect, device number 5
[  487.601994][ T7730] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  490.858922][ T5767] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  491.062626][ T5767] usb 1-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  491.090261][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.090291][ T5767] usb 1-1: Product: syz
[  491.090307][ T5767] usb 1-1: Manufacturer: syz
[  491.090338][ T5767] usb 1-1: SerialNumber: syz
[  491.127141][ T5767] usb 1-1: config 0 descriptor??
[  491.350258][ T5767] usb 1-1: ignoring: probably an ADSL modem
[  491.628937][   T32] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  491.764894][ T5767] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  491.780890][   T32] usb 6-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01
[  491.798324][   T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  491.798366][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.884769][   T32] as10x_usb: device has been detected
[  491.885468][   T32] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  492.084518][   T32] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  492.182709][ T7747] ------------[ cut here ]------------
[  492.182722][ T7747] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  492.182737][ T7747] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#1: syz.5.416/7747
[  492.205384][ T7747] Modules linked in:
[  492.209460][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.5.416 Not tainted syzkaller #0 PREEMPT(full) 
[  492.218896][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  492.229123][ T7747] RIP: 0010:__mutex_lock+0x1331/0x15a0
[  492.234608][ T7747] Code: 66 be 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d d3 68 b3 05 00 75 13 48 8d 3d d6 67 b6 05 48 c7 c6 00 28 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[  492.254726][ T7747] RSP: 0018:ffffc90002dcf6a0 EFLAGS: 00010246
[  492.260897][ T7747] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807ec45dc0
[  492.269023][ T7747] RDX: 0000000000000000 RSI: ffffffff8c2d2800 RDI: ffffffff91c16600
[  492.277035][ T7747] RBP: ffffc90002dcf840 R08: ffffffff91be66f3 R09: 1ffffffff237ccde
[  492.285161][ T7747] R10: dffffc0000000000 R11: fffffbfff237ccdf R12: ffff88807ed76010
[  492.293214][ T7747] R13: 0000000000000000 R14: 1ffff920005b9ee8 R15: 0000000000000000
[  492.301854][ T7747] FS:  00007f7ff35bc6c0(0000) GS:ffff8881234f9000(0000) knlGS:0000000000000000
[  492.311244][ T7747] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  492.317860][ T7747] CR2: 00007f7ff35bbff8 CR3: 0000000057a92000 CR4: 00000000003526f0
[  492.326193][ T7747] Call Trace:
[  492.329568][ T7747]  <TASK>
[  492.332553][ T7747]  ? __lock_acquire+0x747/0x2de0
[  492.337536][ T7747]  ? as102_stream_ctrl+0x27/0xc0
[  492.342530][ T7747]  ? trace_contention_end+0x3d/0x140
[  492.347839][ T7747]  ? __pfx___mutex_lock+0x10/0x10
[  492.352932][ T7747]  ? __mutex_lock+0x305/0x15a0
[  492.357759][ T7747]  ? __mutex_unlock_slowpath+0x731/0x900
[  492.363454][ T7747]  ? lock_acquire+0x115/0x350
[  492.368175][ T7747]  as102_stream_ctrl+0x27/0xc0
[  492.372993][ T7747]  __dvb_frontend_open+0x2e9/0xca0
[  492.378118][ T7747]  ? dvb_frontend_open+0x1ce/0x870
[  492.383321][ T7747]  ? down_read+0x2b9/0x320
[  492.387751][ T7747]  ? __pfx_dvb_frontend_open+0x10/0x10
[  492.393263][ T7747]  dvb_device_open+0x24f/0x340
[  492.398641][ T7747]  chrdev_open+0x4d9/0x600
[  492.403826][ T7747]  ? __pfx_chrdev_open+0x10/0x10
[  492.408955][ T7747]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  492.415305][ T7747]  ? devcgroup_check_permission+0x31/0x8f0
[  492.421154][ T7747]  ? __pfx_chrdev_open+0x10/0x10
[  492.426104][ T7747]  do_dentry_open+0x80e/0x1360
[  492.430939][ T7747]  vfs_open_consume+0x4a/0x350
[  492.435718][ T7747]  ? path_openat+0x16e1/0x20f0
[  492.440527][ T7747]  path_openat+0x16fc/0x20f0
[  492.445145][ T7747]  do_file_open+0x23e/0x4a0
[  492.449698][ T7747]  ? __pfx_do_file_open+0x10/0x10
[  492.454787][ T7747]  ? _raw_spin_unlock+0x28/0x50
[  492.459668][ T7747]  ? alloc_fd+0x6af/0x760
[  492.464013][ T7747]  do_sys_openat2+0x115/0x200
[  492.468773][ T7747]  ? _raw_spin_unlock_irq+0x2e/0x50
[  492.473999][ T7747]  ? __pfx_do_sys_openat2+0x10/0x10
[  492.479233][ T7747]  ? do_user_addr_fault+0xd3f/0x1480
[  492.484533][ T7747]  __x64_sys_openat+0x138/0x170
[  492.489430][ T7747]  do_syscall_64+0x16a/0x530
[  492.494058][ T7747]  ? trace_irq_disable+0x3b/0x140
[  492.499173][ T7747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.505698][ T7747]  ? clear_bhb_loop+0x70/0xc0
[  492.510822][ T7747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.516754][ T7747] RIP: 0033:0x00007f7ff276034e
[  492.521559][ T7747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  492.541245][ T7747] RSP: 002b:00007f7ff35bbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  492.549709][ T7747] RAX: ffffffffffffffda RBX: 00007f7ff35bc6c0 RCX: 00007f7ff276034e
[  492.557693][ T7747] RDX: 0000000000000802 RSI: 00007f7ff35bbc00 RDI: ffffffffffffff9c
[  492.565732][ T7747] RBP: 00007f7ff35bbc00 R08: 0000000000000000 R09: 0000000000000000
[  492.573786][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  492.581825][ T7747] R13: 00007f7ff2a263f8 R14: 00007f7ff2a26360 R15: 00007ffc5777a608
[  492.589857][ T7747]  </TASK>
[  492.592912][ T7747] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  492.600200][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.5.416 Not tainted syzkaller #0 PREEMPT(full) 
[  492.609404][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  492.619469][ T7747] Call Trace:
[  492.622757][ T7747]  <TASK>
[  492.625695][ T7747]  vpanic+0x26f/0x710
[  492.629689][ T7747]  panic+0xc5/0xd0
[  492.633428][ T7747]  ? __pfx_panic+0x10/0x10
[  492.637875][ T7747]  __warn+0x315/0x4c0
[  492.641868][ T7747]  ? __mutex_lock+0x132a/0x15a0
[  492.646792][ T7747]  ? __mutex_lock+0x132a/0x15a0
[  492.651660][ T7747]  __report_bug+0x276/0x570
[  492.656202][ T7747]  ? __mutex_lock+0x132a/0x15a0
[  492.661073][ T7747]  ? __pfx___report_bug+0x10/0x10
[  492.666112][ T7747]  ? __lock_acquire+0x747/0x2de0
[  492.671066][ T7747]  report_bug_entry+0x19b/0x290
[  492.675936][ T7747]  ? __mutex_lock+0x1331/0x15a0
[  492.680807][ T7747]  ? __mutex_lock+0x1336/0x15a0
[  492.685662][ T7747]  handle_bug+0xce/0x200
[  492.689917][ T7747]  exc_invalid_op+0x1a/0x50
[  492.694435][ T7747]  asm_exc_invalid_op+0x1a/0x20
[  492.699292][ T7747] RIP: 0010:__mutex_lock+0x1331/0x15a0
[  492.704765][ T7747] Code: 66 be 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d d3 68 b3 05 00 75 13 48 8d 3d d6 67 b6 05 48 c7 c6 00 28 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[  492.724385][ T7747] RSP: 0018:ffffc90002dcf6a0 EFLAGS: 00010246
[  492.730488][ T7747] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807ec45dc0
[  492.738493][ T7747] RDX: 0000000000000000 RSI: ffffffff8c2d2800 RDI: ffffffff91c16600
[  492.746468][ T7747] RBP: ffffc90002dcf840 R08: ffffffff91be66f3 R09: 1ffffffff237ccde
[  492.754554][ T7747] R10: dffffc0000000000 R11: fffffbfff237ccdf R12: ffff88807ed76010
[  492.762562][ T7747] R13: 0000000000000000 R14: 1ffff920005b9ee8 R15: 0000000000000000
[  492.770570][ T7747]  ? __lock_acquire+0x747/0x2de0
[  492.775522][ T7747]  ? as102_stream_ctrl+0x27/0xc0
[  492.780463][ T7747]  ? trace_contention_end+0x3d/0x140
[  492.785761][ T7747]  ? __pfx___mutex_lock+0x10/0x10
[  492.790794][ T7747]  ? __mutex_lock+0x305/0x15a0
[  492.795575][ T7747]  ? __mutex_unlock_slowpath+0x731/0x900
[  492.801248][ T7747]  ? lock_acquire+0x115/0x350
[  492.805953][ T7747]  as102_stream_ctrl+0x27/0xc0
[  492.810727][ T7747]  __dvb_frontend_open+0x2e9/0xca0
[  492.815848][ T7747]  ? dvb_frontend_open+0x1ce/0x870
[  492.820963][ T7747]  ? down_read+0x2b9/0x320
[  492.825405][ T7747]  ? __pfx_dvb_frontend_open+0x10/0x10
[  492.830882][ T7747]  dvb_device_open+0x24f/0x340
[  492.835686][ T7747]  chrdev_open+0x4d9/0x600
[  492.840127][ T7747]  ? __pfx_chrdev_open+0x10/0x10
[  492.845070][ T7747]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  492.851407][ T7747]  ? devcgroup_check_permission+0x31/0x8f0
[  492.857265][ T7747]  ? __pfx_chrdev_open+0x10/0x10
[  492.862225][ T7747]  do_dentry_open+0x80e/0x1360
[  492.867002][ T7747]  vfs_open_consume+0x4a/0x350
[  492.871800][ T7747]  ? path_openat+0x16e1/0x20f0
[  492.876612][ T7747]  path_openat+0x16fc/0x20f0
[  492.881223][ T7747]  do_file_open+0x23e/0x4a0
[  492.885741][ T7747]  ? __pfx_do_file_open+0x10/0x10
[  492.890789][ T7747]  ? _raw_spin_unlock+0x28/0x50
[  492.895643][ T7747]  ? alloc_fd+0x6af/0x760
[  492.899986][ T7747]  do_sys_openat2+0x115/0x200
[  492.904700][ T7747]  ? _raw_spin_unlock_irq+0x2e/0x50
[  492.909908][ T7747]  ? __pfx_do_sys_openat2+0x10/0x10
[  492.915149][ T7747]  ? do_user_addr_fault+0xd3f/0x1480
[  492.920451][ T7747]  __x64_sys_openat+0x138/0x170
[  492.925319][ T7747]  do_syscall_64+0x16a/0x530
[  492.929916][ T7747]  ? trace_irq_disable+0x3b/0x140
[  492.934953][ T7747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.941030][ T7747]  ? clear_bhb_loop+0x70/0xc0
[  492.945740][ T7747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.951636][ T7747] RIP: 0033:0x00007f7ff276034e
[  492.956404][ T7747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  492.976033][ T7747] RSP: 002b:00007f7ff35bbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  492.984452][ T7747] RAX: ffffffffffffffda RBX: 00007f7ff35bc6c0 RCX: 00007f7ff276034e
[  492.992461][ T7747] RDX: 0000000000000802 RSI: 00007f7ff35bbc00 RDI: ffffffffffffff9c
[  493.000480][ T7747] RBP: 00007f7ff35bbc00 R08: 0000000000000000 R09: 0000000000000000
[  493.008471][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  493.016464][ T7747] R13: 00007f7ff2a263f8 R14: 00007f7ff2a26360 R15: 00007ffc5777a608
[  493.024478][ T7747]  </TASK>
[  493.028160][ T7747] Kernel Offset: disabled
[  493.032511][ T7747] Rebooting in 86400 seconds..