last executing test programs:

2m37.837780053s ago: executing program 0 (id=599):
socket$packet(0x11, 0x2, 0x300)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

2m36.595341371s ago: executing program 0 (id=601):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xfc, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002400)=@deltfilter={0x2c04, 0x2d, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xc}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xfe, 0xef}}, @TCA_RATE={0x6, 0x5, {0x10, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @filter_kind_options=@f_basic={{0xa}, {0x2ba4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x10}}, @TCA_BASIC_ACT={0x33c, 0x3, [@m_ct={0xd4, 0xa, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x8f, 0x6, "eba44a7f2caf2f9b3a2cf9e0c05814ec37d6cd1d620819d8d427f783b0107708fed75d7a6bb8da5ae79b0edec4a18c3493958dbb4ca9282f2d2d30ac5ac0af05eec2b36c37126d47259d0fdcfc601677844ef20405202c3d03da972f9c55a29f3d3e7ccc92e358f34af17966c7b10a70d0e712894bd75ec45fffd6c23730494f825085343c3bb7ab6018aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x11c, 0x5, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x5, 0x0, 0x9, 0x5}, 0x1}}]}, {0xce, 0x6, "be7943323bef0b9ed2ad94732d8cba22ffe5669384289bba6b88113b66e1aa29cf590efdc11eb1f341c6ceca407d8e88d282d97d78ea23a401576e7160d22730bccad4332b71c5c0205909f2f061f9fbfa3ac6d04ac8f7e3905f213258a720309010330bf4719c93bd00ab11837e7555d85565552ec83eb9521c37e50b85333fdc255f7240c31e67361d9496930b3e123017718f7d77e759e84feb5a53e52d73c7317efde6e99259aaf7b8025e5e29ed47073fc94a10fdf826f5f0b372229a35adda1db43691593d4bcc"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x148, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x623}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x102, 0x6, "eeeae999adbdcfb7eb5026b1018d11f96d007c9973d8c6b4be0397980c78008fc66d3caa630e61c4bf37751c9426bef35f6fd6b1c3b70795eed7609c5289a9fb0fd50d3cbd30b3d017c62c82169d450f88e2bbd864dc1a8d86e261b7e9cc47f6ca5e5db9e62d632e4c26922a63410aa0adf4eee8ee5664deec468c53c85d35405e2527810ff2bb8d16bb4e89391648ecf7e2a0344236866832aacf00fbc4148aa2363c82d924e6320ab9e99d4df5027cb74710656d1a8dc24f1efa4b245e6ba63b967a6a89d0ebd11aee021f502331f7f3503989f0acee3c190a83f01e84c33bf8acc2ef0ede4d57d83cedbef29e02739628155df5c037bfab4fdf10901f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}, @TCA_BASIC_ACT={0x8c, 0x3, [@m_simple={0x88, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x4, 0x7, 0xb}}]}, {0x44, 0x6, "8a39c511e8a9226dab434d43eaa042fc38afb1bbc6e78e65a7bea02388b06de1bdd4f81503e1baf5c452f6455760b636051c035727fb89a7061e46808a01e21d"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xe}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x4}}, @TCA_BASIC_ACT={0x10c, 0x3, [@m_mpls={0x108, 0x1c, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x737cc}, @TCA_MPLS_LABEL={0x8, 0x5, 0x390ab}]}, {0xbb, 0x6, "f732098203894d1f61e465fbecd1db00a4d33e433d3e6992da776a0986dc4fd776812c10bcc6dd700e6f6c9feab797eb83b382f0475578a0e84890b1eac79ff9a28f6e28dcc01bb0550100cf48bd34c67655d3e4680432e9742c1932f08d3bc2d519649a03bafd5ef5a50d66b955e1d1f7987c135a04b03ed2f9e3b394cd279519e9f29fb4d7dd70011510eb1a23ad7afd84e484efda69911af48b3a8af5800c43d1bfa95987830131125882e2c47ee1d7fd54ec24dc8a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_ACT={0x15a8, 0x3, [@m_mirred={0x10c, 0x1c, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x20000000, 0x9, 0x3}, 0x3}}]}, {0xbd, 0x6, "df6fde733bfb54a033fea15186c74a1916fb2eadfa0fbbadf7ae9f6fbd3cb95b652f2d3871595cba7777910681ef0e937a4f7118944978277a0cfb59dc4bb6f95bff1b2b1248b22ee6ec8701e50daa7314919e22eb42ab4a97b38ae41b5ea43f99dba669fe4624ce2c350d7e5c33a9c47c764903c42c3fe29e781f6d3ac5c1a6e10a3be0a44285a8778bd773d7c8844f8ed73a010724b6efb0e73a37362e5cda0ac00788de1c9a6cafde6dd7338c69e8066390e9b173fe80d6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x10c4, 0x16, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x81, 0x6, 0x7, 0x40, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x2, 0x7, 0x0, 0x1}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x7, 0xff, 0x8a, 0x3ff}, {0x8001, 0xb6, 0x8}, {0x9, 0x3, 0x7, 0x4b10b841}, {0x6, 0xe0, 0x90, 0x5}, {0xf, 0xfb, 0x8, 0x929c}, {0x579, 0x3, 0x2, 0x2}, {0x9, 0x6, 0x6, 0x8}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0x26, 0x8, 0x5c7a}, {0x3, 0x1, 0xb, 0x80000001}, {0x3, 0x4, 0x9, 0x80000000}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xd0, 0x3, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x81, 0x6, "3a0d7119cd496bd4f9f61fc637ec6c9d7ed0aa2a602e23e8634816c201b9c0e6e4bfbe84496193d06b28e13fc76b581b136983d8f5ab502c49887248d1566f193bd36d18f14d8c17b1d68c652b6fcb8c14ffee23d773fe3e23c5261d05ac587cdcfac3bf02662fbc22963b704fd6920cd7c576d54822e9b3eb3ec0a6de"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x114, 0x0, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xca4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x600}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xc6, 0x6, "db1baa2feb4b6f86b4a70bc1a23b18b80234c6df9c72285bcc9c8688cf597e2f0536795a8897fcccc2ff31698467b1dd6830f3015399224c866b3dca256bde6753bd7bac29a8eea93bbdc612e4f029c347e19dd418a86302ffdaa70f20688c1474f788597c7a7776375e21d5f0cf731e0f126c8aad2912e29b349289751ad444fdbc9b1b5883d8d7da3e0a3888e1b5ecaedb06e9bb862b2e8adb46aa978804658c799422286d23b3d7ed9ad90a73f78b9edd72305e4c2a01131f5d4e13e2b854d5fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x84, 0x1b4e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x4, 0x20000000, 0x4, 0x81}}]}, {0x3e, 0x6, "67fa37180f768b8c83f7ff75775a712a195cb3b7e7cf7310bda7498abe1daa1802c0d854e7b4d9db9201dd98758f9e40a37067f163f96de53e16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xf8, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x623}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0xa0d, 0xff, 0xffffffffffffffff, 0xf7, 0x800}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7505}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x652}]}, {0x84, 0x6, "344a992a895c658ecc866ee681d2162982523f701fd154c4a0b318ac1f939622e35a360f0dccb0fc91d470c92d0e8fdad82536217dbbcb690671297850aa58acae1b02d0a870965cf0b888225565100ed3e9dec4e25bf15e9e6e1d88c860db0ec6581872b30535869e414b0d6b9fddb6ebf6a11ea296e4ce71cf7d5f0b639af8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x74, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0x41, 0x6, "c3593e102203217d7681fc0bb2d69bcbdb4e97a4d815ad0050e228ac2af9e445a05fbddf1e48f45c907220e55dc1be9d57438f0762403cd4b70bb49a19"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}, @TCA_BASIC_ACT={0x1104, 0x3, [@m_vlan={0x98, 0x10, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4ad, 0x1, 0x10000000, 0x48000000, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x404}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xa, 0xc, 0x10000000, 0x1ff, 0x77}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x1068, 0x14, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0xe7b53466eee6eb21}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x2c04}}, 0x0)

2m36.012233069s ago: executing program 0 (id=604):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000100000080"], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
syz_usb_connect(0x5, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ef10020c80a1034f9b60000000109027c0001fa24000209040800010e0100fe202406"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94)

2m33.682042359s ago: executing program 0 (id=608):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

2m31.692351692s ago: executing program 0 (id=611):
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x1e, 0x201}, 0x18}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$admmidi(0x0, 0x80000000020, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mbind(&(0x7f0000022000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0x5, 0x6, 0x0)
setresuid(0xee01, 0x0, 0x0)

2m27.121757037s ago: executing program 0 (id=616):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = semget(0x0, 0x3, 0x0)
r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0xb00)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000280))
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x6])
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
sendto$inet6(r5, &(0x7f0000000180)="a7", 0x1, 0x4c898, &(0x7f0000000040)={0xa, 0x4e24, 0xfcb, @loopback, 0xc5f}, 0x1c)

2m11.114035947s ago: executing program 32 (id=616):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = semget(0x0, 0x3, 0x0)
r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0xb00)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000280))
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x6])
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
sendto$inet6(r5, &(0x7f0000000180)="a7", 0x1, 0x4c898, &(0x7f0000000040)={0xa, 0x4e24, 0xfcb, @loopback, 0xc5f}, 0x1c)

35.203654161s ago: executing program 3 (id=757):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x102000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6)

33.53190256s ago: executing program 3 (id=759):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001a400)=""/102384, 0x18ff0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0xbc, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x40002}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xf, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x7ffd, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

30.36172345s ago: executing program 3 (id=762):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @mcast1, 0xf}, 0x1c)
syz_usb_connect$uac2(0x0, 0xa6, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000401e04203040000102030109029400030198900e080b0101010c200009040000000101200009240106000a1c00500c240303000039020809008007240c18080009090401000001"], 0x0)
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='truste#D#\x00'])
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
r2 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108)
r3 = dup3(r2, r1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110)
r4 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f00000003c0)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_remount}, {@discard}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfd, 0x0, &(0x7f0000000d40))

24.86478031s ago: executing program 1 (id=767):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

23.989171827s ago: executing program 3 (id=768):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

20.877382508s ago: executing program 2 (id=771):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000180)=0x10000000005)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f000001a400)=""/102384, 0x18ff0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0xbc, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x40002}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xf, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x7ffd, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
accept4$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0xc00)

20.429651123s ago: executing program 1 (id=773):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="001f88"], 0x0, 0x0, 0x0, 0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x24, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80, 0x2e, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x400, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x600}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c)

18.493028966s ago: executing program 3 (id=775):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x24, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f000001a400)=""/102384, 0x18ff0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80, 0x2e, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x400, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x600}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)

18.194081826s ago: executing program 1 (id=776):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @mcast1, 0xf}, 0x1c)
syz_usb_connect$uac2(0x0, 0xa6, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000401e04203040000102030109029400030198900e080b0101010c200009040000000101200009240106000a1c00500c240303000039020809008007240c18080009090401000001"], 0x0)
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='truste#D#\x00'])
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
r2 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108)
r3 = dup3(r2, r1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110)
r4 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f00000003c0)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_remount}, {@discard}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfd, 0x0, &(0x7f0000000d40))

15.232815842s ago: executing program 3 (id=777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

13.646240517s ago: executing program 4 (id=779):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x102000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)}}], 0x2, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x78)

12.583821835s ago: executing program 4 (id=780):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000010c0)='./bus\x00', 0x82, &(0x7f0000000440)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRESHEX, @ANYBLOB="2c71756f74612c64697361626c655f6578740800000000000000792c6572726f72733d636f6e74696eb0d9b4ee7f11856f40ede475652c6e6f696e6c696e655f78617474722c70726a71756f74613d215c"], 0x21, 0x1059a, &(0x7f0000010640)="$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")
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (fail_nth: 2)

11.581295663s ago: executing program 2 (id=781):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

11.251859158s ago: executing program 4 (id=782):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x9, 0x2, 0xfffd, 0xffffffffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x1fd, 0x8, 0x28, 0x80200005, 0x1})
ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0x5)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[], 0x254}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0x100003, 0x2, 0x7fffffff, 0x40, 0x9, 0x8000, 0xf1, 0x6, 0x80ffa, 0x2, 0xd, 0x8504, 0x1003, 0x3, 0xf, 0x10000, 0xffff7fff, 0x7ffffffd, 0x1ff, 0x9e3, 0x13c3, 0x7fff, 0x8, 0x2, 0x1, 0x3, 0x5, 0x4, 0xfffffffe, 0x4, 0x7ffd]})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000180)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r7, 0x742f, 0x77ae, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r11=>0x0})
sendto$packet(r4, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @multicast}, 0x6e)

11.096732224s ago: executing program 2 (id=783):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x102000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6)

10.013416065s ago: executing program 2 (id=784):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="001f88"], 0x0, 0x0, 0x0, 0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x24, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80, 0x2e, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x400, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x600}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c)

7.212700133s ago: executing program 2 (id=785):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001a400)=""/102384, 0x18ff0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

6.534922997s ago: executing program 4 (id=786):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x41040, 0x0)

6.212545291s ago: executing program 1 (id=787):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001a400)=""/102384, 0x18ff0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0xbc, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x40002}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xf, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x7ffd, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

4.622638407s ago: executing program 2 (id=788):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x102000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)}}], 0x2, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x78)

3.908186507s ago: executing program 4 (id=789):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000180)=0x10000000005)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f000001a400)=""/102384, 0x18ff0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0xbc, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x40002}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xf, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x7ffd, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
accept4$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0xc00)

2.522215019s ago: executing program 1 (id=790):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001a400)=""/102384, 0x18ff0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0xbc, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x40002}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xf, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x7ffd, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)

169.123252ms ago: executing program 4 (id=791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)

159.742424ms ago: executing program 33 (id=777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

0s ago: executing program 1 (id=793):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="001f88"], 0x0, 0x0, 0x0, 0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x24, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80, 0x2e, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x400, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x600}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c)

kernel console output (not intermixed with test programs):

0000000 r/w without journal. Quota mode: none.
[  453.627465][ T8550] FAULT_INJECTION: forcing a failure.
[  453.627465][ T8550] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.640899][ T8550] CPU: 1 PID: 8550 Comm: syz.3.412 Not tainted syzkaller #0
[  453.648409][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  453.658519][ T8550] Call Trace:
[  453.661840][ T8550]  <TASK>
[  453.664845][ T8550]  dump_stack_lvl+0x18c/0x250
[  453.669606][ T8550]  ? show_regs_print_info+0x20/0x20
[  453.675049][ T8550]  ? load_image+0x420/0x420
[  453.679607][ T8550]  ? __might_fault+0xaa/0x120
[  453.684369][ T8550]  ? __lock_acquire+0x7d40/0x7d40
[  453.689452][ T8550]  ? __up_read+0x2b6/0x6b0
[  453.693924][ T8550]  should_fail_ex+0x39d/0x4d0
[  453.698668][ T8550]  _copy_to_user+0x2f/0xa0
[  453.703164][ T8550]  __se_sys_move_pages+0x15fe/0x18f0
[  453.708505][ T8550]  ? file_end_write+0x159/0x250
[  453.713591][ T8550]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  453.719273][ T8550]  ? __x64_sys_move_pages+0xf0/0xf0
[  453.724520][ T8550]  ? __fget_files+0x28/0x4b0
[  453.729193][ T8550]  ? lock_chain_count+0x20/0x20
[  453.734188][ T8550]  ? __x64_sys_move_pages+0x21/0xf0
[  453.739448][ T8550]  do_syscall_64+0x55/0xa0
[  453.743910][ T8550]  ? clear_bhb_loop+0x40/0x90
[  453.748643][ T8550]  ? clear_bhb_loop+0x40/0x90
[  453.753462][ T8550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  453.759415][ T8550] RIP: 0033:0x7f4567b9c819
[  453.763895][ T8550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.783643][ T8550] RSP: 002b:00007f4568aac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[  453.792142][ T8550] RAX: ffffffffffffffda RBX: 00007f4567e16090 RCX: 00007f4567b9c819
[  453.800272][ T8550] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000
[  453.808300][ T8550] RBP: 00007f4568aac090 R08: 0000200000000040 R09: 0000000000000000
[  453.816328][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.824345][ T8550] R13: 00007f4567e16128 R14: 00007f4567e16090 R15: 00007ffee6e244b8
[  453.832492][ T8550]  </TASK>
[  453.835656][    C1] vkms_vblank_simulate: vblank timer overrun
[  453.888097][    T9] usb 3-1: config 0 has no interfaces?
[  454.002853][    T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  454.012080][    T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  454.037192][    T9] usb 3-1: Manufacturer: syz
[  454.046501][    T9] usb 3-1: config 0 descriptor??
[  454.275442][    T9] usb 3-1: USB disconnect, device number 6
[  454.336499][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'.
[  454.401016][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.607659][ T8560] loop1: detected capacity change from 0 to 4096
[  454.623781][ T8560] ntfs: (device loop1): parse_options(): Unrecognized mount option 000000000000000000000030x00000000000000000000000000000000000300000000000000000000003.
[  454.910148][ T8567] loop3: detected capacity change from 0 to 128
[  454.961119][ T8560] loop1: detected capacity change from 0 to 1764
[  455.035871][ T8571] FAULT_INJECTION: forcing a failure.
[  455.035871][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.062501][ T8571] CPU: 1 PID: 8571 Comm: syz.2.418 Not tainted syzkaller #0
[  455.069884][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  455.080088][ T8571] Call Trace:
[  455.083430][ T8571]  <TASK>
[  455.086418][ T8571]  dump_stack_lvl+0x18c/0x250
[  455.091170][ T8571]  ? show_regs_print_info+0x20/0x20
[  455.096429][ T8571]  ? load_image+0x420/0x420
[  455.100996][ T8571]  ? __might_fault+0xaa/0x120
[  455.105728][ T8571]  ? __lock_acquire+0x7d40/0x7d40
[  455.110811][ T8571]  should_fail_ex+0x39d/0x4d0
[  455.115559][ T8571]  _copy_from_iter+0x1d9/0x12e0
[  455.120467][ T8571]  ? rcu_is_watching+0x15/0xb0
[  455.125290][ T8571]  ? __alloc_pages+0x27a/0x460
[  455.130114][ T8571]  ? copyout_mc+0x70/0x70
[  455.134512][ T8571]  ? tun_get_user+0x662/0x3ca0
[  455.139333][ T8571]  ? page_copy_sane+0x4e/0x270
[  455.144163][ T8571]  copy_page_from_iter+0x7b/0x100
[  455.149271][ T8571]  tun_get_user+0x1b7d/0x3ca0
[  455.154004][ T8571]  ? tun_get_user+0x662/0x3ca0
[  455.158835][ T8571]  ? rcu_read_unlock+0xa0/0xa0
[  455.163663][ T8571]  ? tun_get+0x1c/0x2e0
[  455.167872][ T8571]  ? __lock_acquire+0x7d40/0x7d40
[  455.172963][ T8571]  ? tun_get+0x1c/0x2e0
[  455.177189][ T8571]  tun_chr_write_iter+0x119/0x200
[  455.182273][ T8571]  vfs_write+0x46c/0x990
[  455.186580][ T8571]  ? file_end_write+0x250/0x250
[  455.191484][ T8571]  ? __fget_files+0x43d/0x4b0
[  455.196269][ T8571]  ? __fdget_pos+0x1d8/0x330
[  455.200927][ T8571]  ? ksys_write+0x75/0x260
[  455.205402][ T8571]  ksys_write+0x150/0x260
[  455.209844][ T8571]  ? __ia32_sys_read+0x90/0x90
[  455.214681][ T8571]  ? lockdep_hardirqs_on+0x98/0x150
[  455.219931][ T8571]  do_syscall_64+0x55/0xa0
[  455.224394][ T8571]  ? clear_bhb_loop+0x40/0x90
[  455.229119][ T8571]  ? clear_bhb_loop+0x40/0x90
[  455.233866][ T8571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  455.239820][ T8571] RIP: 0033:0x7f6f7d35d04e
[  455.244276][ T8571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  455.264026][ T8571] RSP: 002b:00007f6f7e21dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  455.272502][ T8571] RAX: ffffffffffffffda RBX: 00007f6f7e21e6c0 RCX: 00007f6f7d35d04e
[  455.280522][ T8571] RDX: 0000000000000032 RSI: 0000200000000000 RDI: 00000000000000c8
[  455.288545][ T8571] RBP: 00007f6f7e21e090 R08: 0000000000000000 R09: 0000000000000000
[  455.296539][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.304543][ T8571] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  455.312565][ T8571]  </TASK>
[  455.315661][    C1] vkms_vblank_simulate: vblank timer overrun
[  455.370437][    T9] usb 1-1: USB disconnect, device number 14
[  455.482279][ T2130] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  455.638689][ T8573] loop0: detected capacity change from 0 to 8192
[  455.657635][ T8573] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option ""
[  455.689844][ T2130] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  455.698900][ T2130] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  455.709477][ T2130] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  455.718579][ T2130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  455.729906][ T2130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  455.744602][ T2130] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  455.754080][ T2130] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  455.762538][ T2130] usb 4-1: Product: syz
[  455.782794][ T2130] usb 4-1: Manufacturer: syz
[  455.809425][ T2130] cdc_wdm 4-1:1.0: skipping garbage
[  455.831779][ T2130] cdc_wdm 4-1:1.0: skipping garbage
[  455.870637][ T2130] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  455.887599][ T2130] cdc_wdm 4-1:1.0: Unknown control protocol
[  456.012722][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.019504][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.025858][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.032481][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.038805][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.045418][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.052616][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.059233][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.065605][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.072225][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.078624][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.085542][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.092126][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.098776][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.105110][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.111834][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.118142][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.124781][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.131077][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  456.137881][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  456.145608][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  456.154788][   T28] usb 4-1: USB disconnect, device number 17
[  456.408241][ T8587] FAULT_INJECTION: forcing a failure.
[  456.408241][ T8587] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  456.463233][ T8587] CPU: 0 PID: 8587 Comm: syz.2.424 Not tainted syzkaller #0
[  456.470627][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  456.480761][ T8587] Call Trace:
[  456.484090][ T8587]  <TASK>
[  456.487065][ T8587]  dump_stack_lvl+0x18c/0x250
[  456.491816][ T8587]  ? show_regs_print_info+0x20/0x20
[  456.497072][ T8587]  ? load_image+0x420/0x420
[  456.501625][ T8587]  ? __might_fault+0xaa/0x120
[  456.506350][ T8587]  ? __lock_acquire+0x7d40/0x7d40
[  456.511429][ T8587]  should_fail_ex+0x39d/0x4d0
[  456.516170][ T8587]  _copy_to_user+0x2f/0xa0
[  456.520639][ T8587]  copy_siginfo_to_user+0x24/0xa0
[  456.525718][ T8587]  x64_setup_rt_frame+0x746/0xc40
[  456.530829][ T8587]  ? sigaltstack_size_valid+0x1e0/0x1e0
[  456.536545][ T8587]  ? arch_do_signal_or_restart+0x3b1/0x800
[  456.542411][ T8587]  arch_do_signal_or_restart+0x42c/0x800
[  456.548099][ T8587]  ? get_sigframe_size+0x20/0x20
[  456.553095][ T8587]  ? ksys_write+0x1fb/0x260
[  456.557639][ T8587]  ? exit_to_user_mode_loop+0x3b/0x110
[  456.563140][ T8587]  exit_to_user_mode_loop+0x70/0x110
[  456.568485][ T8587]  exit_to_user_mode_prepare+0xee/0x180
[  456.574066][ T8587]  syscall_exit_to_user_mode+0x1a/0x50
[  456.579572][ T8587]  do_syscall_64+0x61/0xa0
[  456.584017][ T8587]  ? clear_bhb_loop+0x40/0x90
[  456.588732][ T8587]  ? clear_bhb_loop+0x40/0x90
[  456.593491][ T8587]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  456.599424][ T8587] RIP: 0033:0x7f6f7d35d04e
[  456.603891][ T8587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  456.623546][ T8587] RSP: 002b:00007f6f7e21dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  456.631991][ T8587] RAX: 0000000000000001 RBX: 00007f6f7e21e6c0 RCX: 00007f6f7d35d04e
[  456.639988][ T8587] RDX: 0000000000000001 RSI: 00007f6f7e21e090 RDI: 0000000000000003
[  456.647982][ T8587] RBP: 00007f6f7e21e090 R08: 0000000000000000 R09: 0000000000000000
[  456.656005][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  456.664004][ T8587] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  456.672020][ T8587]  </TASK>
[  457.486844][ T8573] loop0: detected capacity change from 0 to 40427
[  458.149271][ T8573] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  458.172375][ T8573] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  458.207791][ T8573] F2FS-fs (loop0): invalid crc value
[  458.440462][ T8607] loop3: detected capacity change from 0 to 512
[  458.512597][ T8607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.592544][ T8607] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  458.675073][ T8612] FAULT_INJECTION: forcing a failure.
[  458.675073][ T8612] name failslab, interval 1, probability 0, space 0, times 0
[  458.691361][ T8612] CPU: 0 PID: 8612 Comm: syz.2.428 Not tainted syzkaller #0
[  458.698749][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  458.708874][ T8612] Call Trace:
[  458.712286][ T8612]  <TASK>
[  458.715254][ T8612]  dump_stack_lvl+0x18c/0x250
[  458.719998][ T8612]  ? show_regs_print_info+0x20/0x20
[  458.725245][ T8612]  ? lockdep_hardirqs_on+0x98/0x150
[  458.730495][ T8612]  ? asm_sysvec_call_function_single+0x1a/0x20
[  458.736706][ T8612]  should_fail_ex+0x39d/0x4d0
[  458.741427][ T8612]  should_failslab+0x9/0x20
[  458.746015][ T8612]  slab_pre_alloc_hook+0x59/0x310
[  458.751106][ T8612]  ? kvmalloc_node+0x70/0x180
[  458.755834][ T8612]  ? kvmalloc_node+0x70/0x180
[  458.760570][ T8612]  __kmem_cache_alloc_node+0x53/0x250
[  458.765989][ T8612]  ? kvmalloc_node+0x70/0x180
[  458.770706][ T8612]  __kmalloc_node+0xa4/0x230
[  458.775339][ T8612]  ? __might_fault+0xaa/0x120
[  458.780051][ T8612]  kvmalloc_node+0x70/0x180
[  458.784595][ T8612]  xt_alloc_table_info+0x3b/0xa0
[  458.789568][ T8612]  do_ipt_set_ctl+0x901/0xe00
[  458.794295][ T8612]  ? ipt_unregister_table_exit+0x230/0x230
[  458.800138][ T8612]  ? __lock_acquire+0x7d40/0x7d40
[  458.805202][ T8612]  ? rcu_is_watching+0x15/0xb0
[  458.809998][ T8612]  ? trace_contention_end+0x39/0xe0
[  458.815247][ T8612]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  458.820928][ T8612]  ? mutex_unlock+0x10/0x10
[  458.825658][ T8612]  ? asm_sysvec_call_function_single+0x1a/0x20
[  458.831850][ T8612]  ? aa_af_perm+0x330/0x330
[  458.836478][ T8612]  ? aa_sock_opt_perm+0x21/0x100
[  458.841454][ T8612]  ? aa_sock_opt_perm+0x3c/0x100
[  458.846442][ T8612]  nf_setsockopt+0x263/0x280
[  458.851077][ T8612]  ? sock_common_recvmsg+0x190/0x190
[  458.856491][ T8612]  do_sock_setsockopt+0x175/0x1a0
[  458.861545][ T8612]  ? __fdget+0x180/0x210
[  458.865830][ T8612]  __x64_sys_setsockopt+0x182/0x200
[  458.871063][ T8612]  do_syscall_64+0x55/0xa0
[  458.875518][ T8612]  ? clear_bhb_loop+0x40/0x90
[  458.880243][ T8612]  ? clear_bhb_loop+0x40/0x90
[  458.884973][ T8612]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  458.890989][ T8612] RIP: 0033:0x7f6f7d39c819
[  458.895530][ T8612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.915357][ T8612] RSP: 002b:00007f6f7e1fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  458.923815][ T8612] RAX: ffffffffffffffda RBX: 00007f6f7d616090 RCX: 00007f6f7d39c819
[  458.931830][ T8612] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006
[  458.939980][ T8612] RBP: 00007f6f7e1fd090 R08: 0000000000000538 R09: 0000000000000000
[  458.948001][ T8612] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[  458.956014][ T8612] R13: 00007f6f7d616128 R14: 00007f6f7d616090 R15: 00007fffc9dabe78
[  458.964037][ T8612]  </TASK>
[  459.307918][   T27] audit: type=1800 audit(1776056671.922:20): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.427" name="file1" dev="loop3" ino=15 res=0 errno=0
[  459.592614][ T8573] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  459.646673][ T8573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  460.301389][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.273753][ T8646] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  463.774012][ T8663] FAULT_INJECTION: forcing a failure.
[  463.774012][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  463.814909][ T8663] CPU: 1 PID: 8663 Comm: syz.2.442 Not tainted syzkaller #0
[  463.822302][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  463.832413][ T8663] Call Trace:
[  463.835761][ T8663]  <TASK>
[  463.838749][ T8663]  dump_stack_lvl+0x18c/0x250
[  463.843499][ T8663]  ? show_regs_print_info+0x20/0x20
[  463.848768][ T8663]  ? load_image+0x420/0x420
[  463.853336][ T8663]  ? __lock_acquire+0x7d40/0x7d40
[  463.858420][ T8663]  ? __kasan_slab_alloc+0x6c/0x80
[  463.863523][ T8663]  should_fail_ex+0x39d/0x4d0
[  463.868278][ T8663]  strncpy_from_user+0x36/0x2d0
[  463.873194][ T8663]  getname_flags+0xf6/0x500
[  463.877771][ T8663]  __x64_sys_unlinkat+0xae/0xe0
[  463.882692][ T8663]  do_syscall_64+0x55/0xa0
[  463.887167][ T8663]  ? clear_bhb_loop+0x40/0x90
[  463.891901][ T8663]  ? clear_bhb_loop+0x40/0x90
[  463.896808][ T8663]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  463.902786][ T8663] RIP: 0033:0x7f6f7d39c819
[  463.907288][ T8663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.926962][ T8663] RSP: 002b:00007f6f7e21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  463.935526][ T8663] RAX: ffffffffffffffda RBX: 00007f6f7d615fa0 RCX: 00007f6f7d39c819
[  463.943541][ T8663] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  463.951552][ T8663] RBP: 00007f6f7e21e090 R08: 0000000000000000 R09: 0000000000000000
[  463.959851][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  463.967868][ T8663] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  463.975955][ T8663]  </TASK>
[  464.016913][ T8660] loop3: detected capacity change from 0 to 40427
[  464.060203][ T8660] F2FS-fs (loop3): Unrecognized mount option "00000000000000000003" or missing value
[  464.118935][ T8660] overlayfs: workdir and upperdir must reside under the same mount
[  464.387502][ T8666] FAULT_INJECTION: forcing a failure.
[  464.387502][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.423086][ T8666] CPU: 0 PID: 8666 Comm: syz.2.443 Not tainted syzkaller #0
[  464.430516][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  464.440598][ T8666] Call Trace:
[  464.443894][ T8666]  <TASK>
[  464.446856][ T8666]  dump_stack_lvl+0x18c/0x250
[  464.451604][ T8666]  ? show_regs_print_info+0x20/0x20
[  464.456923][ T8666]  ? load_image+0x420/0x420
[  464.461474][ T8666]  ? __lock_acquire+0x7d40/0x7d40
[  464.466534][ T8666]  ? __kasan_slab_alloc+0x6c/0x80
[  464.471767][ T8666]  should_fail_ex+0x39d/0x4d0
[  464.476475][ T8666]  strncpy_from_user+0x36/0x2d0
[  464.481351][ T8666]  getname_flags+0xf6/0x500
[  464.485880][ T8666]  __x64_sys_unlinkat+0xae/0xe0
[  464.490754][ T8666]  do_syscall_64+0x55/0xa0
[  464.495221][ T8666]  ? clear_bhb_loop+0x40/0x90
[  464.499920][ T8666]  ? clear_bhb_loop+0x40/0x90
[  464.504616][ T8666]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.510538][ T8666] RIP: 0033:0x7f6f7d39c819
[  464.515026][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.534741][ T8666] RSP: 002b:00007f6f7e21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  464.543197][ T8666] RAX: ffffffffffffffda RBX: 00007f6f7d615fa0 RCX: 00007f6f7d39c819
[  464.551295][ T8666] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  464.559300][ T8666] RBP: 00007f6f7e21e090 R08: 0000000000000000 R09: 0000000000000000
[  464.567293][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.575280][ T8666] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  464.583280][ T8666]  </TASK>
[  465.127912][ T8668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  465.238781][ T8664] loop3: detected capacity change from 0 to 40427
[  465.270728][ T8664] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff
[  465.307495][ T8664] F2FS-fs (loop3): invalid crc value
[  465.350208][ T8664] F2FS-fs (loop3): Found nat_bits in checkpoint
[  465.469529][ T8664] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  465.482474][  T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  465.672360][  T788] usb 3-1: Using ep0 maxpacket: 32
[  465.698745][  T788] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.723122][  T788] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.744288][  T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  465.763804][  T788] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  465.786096][  T788] usb 3-1: Product: syz
[  465.799862][  T788] usb 3-1: Manufacturer: syz
[  465.823839][  T788] hub 3-1:4.0: USB hub found
[  466.088807][  T788] hub 3-1:4.0: 6 ports detected
[  466.095598][ T5796] syz-executor: attempt to access beyond end of device
[  466.095598][ T5796] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  466.124768][  T788] hub 3-1:4.0: insufficient power available to use all downstream ports
[  466.262303][ T5796] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  466.894107][ T8668] loop2: detected capacity change from 0 to 32768
[  467.169386][ T8668] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  467.306792][ T8668] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  467.356999][ T8668] XFS (loop2): Starting recovery (logdev: internal)
[  467.364520][  T788] hub 3-1:4.0: hub_hub_status failed (err = -32)
[  467.371344][  T788] hub 3-1:4.0: config failed, can't get hub status (err -32)
[  467.419191][ T8668] XFS (loop2): Ending recovery (logdev: internal)
[  467.522551][ T5878] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  467.823067][ T8695] loop3: detected capacity change from 0 to 256
[  467.833842][ T8695] exfat: Deprecated parameter 'utf8'
[  470.672393][ T8695] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  470.785431][    T9] usb 3-1: USB disconnect, device number 7
[  470.840590][ T5799] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  470.877080][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short
[  470.894896][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -71
[  470.910803][ T5878] usb 4-1: can't read configurations, error -71
[  471.115379][ T8697] loop0: detected capacity change from 0 to 1024
[  471.265895][ T8697] hfsplus: failed to load attributes file
[  471.501776][ T8703] loop1: detected capacity change from 0 to 1764
[  471.851020][ T8708] loop0: detected capacity change from 0 to 1764
[  472.653563][ T8731] FAULT_INJECTION: forcing a failure.
[  472.653563][ T8731] name failslab, interval 1, probability 0, space 0, times 0
[  472.682025][ T8729] netlink: 256 bytes leftover after parsing attributes in process `syz.1.460'.
[  472.682432][ T8731] CPU: 0 PID: 8731 Comm: syz.2.462 Not tainted syzkaller #0
[  472.691902][ T8729] netlink: 80 bytes leftover after parsing attributes in process `syz.1.460'.
[  472.698342][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  472.698358][ T8731] Call Trace:
[  472.698368][ T8731]  <TASK>
[  472.698377][ T8731]  dump_stack_lvl+0x18c/0x250
[  472.698421][ T8731]  ? show_regs_print_info+0x20/0x20
[  472.698454][ T8731]  ? load_image+0x420/0x420
[  472.698484][ T8731]  ? __might_sleep+0xe0/0xe0
[  472.698511][ T8731]  ? __lock_acquire+0x7d40/0x7d40
[  472.698542][ T8731]  should_fail_ex+0x39d/0x4d0
[  472.698578][ T8731]  should_failslab+0x9/0x20
[  472.698607][ T8731]  slab_pre_alloc_hook+0x59/0x310
[  472.698638][ T8731]  ? __might_sleep+0xe0/0xe0
[  472.698665][ T8731]  kmem_cache_alloc_node+0x60/0x320
[  472.698696][ T8731]  ? __alloc_skb+0x103/0x2c0
[  472.698720][ T8731]  __alloc_skb+0x103/0x2c0
[  472.781489][ T8731]  netlink_sendmsg+0x66a/0xbf0
[  472.786321][ T8731]  ? netlink_getsockopt+0x590/0x590
[  472.791672][ T8731]  ? aa_sock_msg_perm+0x94/0x150
[  472.796663][ T8731]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  472.801999][ T8731]  ? security_socket_sendmsg+0x80/0xa0
[  472.807518][ T8731]  ? netlink_getsockopt+0x590/0x590
[  472.812781][ T8731]  ____sys_sendmsg+0x5ba/0x960
[  472.817609][ T8731]  ? __asan_memset+0x22/0x40
[  472.822254][ T8731]  ? __sys_sendmsg_sock+0x30/0x30
[  472.827323][ T8731]  ? __import_iovec+0x5f2/0x850
[  472.832239][ T8731]  ? import_iovec+0x73/0xa0
[  472.836794][ T8731]  ___sys_sendmsg+0x2a6/0x360
[  472.841528][ T8731]  ? get_pid_task+0x20/0x1e0
[  472.846183][ T8731]  ? __sys_sendmsg+0x2a0/0x2a0
[  472.851022][ T8731]  ? __lock_acquire+0x7d40/0x7d40
[  472.856117][ T8731]  __se_sys_sendmsg+0x1c2/0x2b0
[  472.861042][ T8731]  ? __x64_sys_sendmsg+0x80/0x80
[  472.866051][ T8731]  ? lockdep_hardirqs_on+0x98/0x150
[  472.871312][ T8731]  do_syscall_64+0x55/0xa0
[  472.875775][ T8731]  ? clear_bhb_loop+0x40/0x90
[  472.880520][ T8731]  ? clear_bhb_loop+0x40/0x90
[  472.885253][ T8731]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  472.891237][ T8731] RIP: 0033:0x7f6f7d39c819
[  472.895691][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.915527][ T8731] RSP: 002b:00007f6f7e21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.924006][ T8731] RAX: ffffffffffffffda RBX: 00007f6f7d615fa0 RCX: 00007f6f7d39c819
[  472.932028][ T8731] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  472.940134][ T8731] RBP: 00007f6f7e21e090 R08: 0000000000000000 R09: 0000000000000000
[  472.948173][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.956251][ T8731] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  472.964313][ T8731]  </TASK>
[  473.052309][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  473.189711][ T8736] loop2: detected capacity change from 0 to 4096
[  473.197423][ T8736] ntfs3: Unknown parameter 'ÿÿÿÿ'
[  473.257573][ T7227] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  473.389334][ T8737] loop0: detected capacity change from 0 to 256
[  473.402496][ T8737] exfat: Deprecated parameter 'utf8'
[  473.630859][ T8737] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  474.564254][ T5802] Bluetooth: hci0: command 0x0406 tx timeout
[  475.240946][ T8742] FAULT_INJECTION: forcing a failure.
[  475.240946][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.368154][ T8742] CPU: 1 PID: 8742 Comm: syz.2.465 Not tainted syzkaller #0
[  475.375535][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  475.385783][ T8742] Call Trace:
[  475.389117][ T8742]  <TASK>
[  475.392098][ T8742]  dump_stack_lvl+0x18c/0x250
[  475.396860][ T8742]  ? show_regs_print_info+0x20/0x20
[  475.402218][ T8742]  ? load_image+0x420/0x420
[  475.406792][ T8742]  ? __might_fault+0xaa/0x120
[  475.411521][ T8742]  ? __lock_acquire+0x7d40/0x7d40
[  475.416599][ T8742]  should_fail_ex+0x39d/0x4d0
[  475.421347][ T8742]  _copy_from_user+0x2f/0xe0
[  475.426010][ T8742]  strndup_user+0xb7/0x150
[  475.430482][ T8742]  __se_sys_mount+0x9f/0x3d0
[  475.435133][ T8742]  ? __x64_sys_mount+0xc0/0xc0
[  475.439966][ T8742]  ? lockdep_hardirqs_on+0x98/0x150
[  475.445217][ T8742]  ? __x64_sys_mount+0x20/0xc0
[  475.450034][ T8742]  do_syscall_64+0x55/0xa0
[  475.454499][ T8742]  ? clear_bhb_loop+0x40/0x90
[  475.459229][ T8742]  ? clear_bhb_loop+0x40/0x90
[  475.463965][ T8742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.469919][ T8742] RIP: 0033:0x7f6f7d39c819
[  475.474388][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.494133][ T8742] RSP: 002b:00007f6f7e21e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  475.502602][ T8742] RAX: ffffffffffffffda RBX: 00007f6f7d615fa0 RCX: 00007f6f7d39c819
[  475.510637][ T8742] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000
[  475.518862][ T8742] RBP: 00007f6f7e21e090 R08: 0000200000000100 R09: 0000000000000000
[  475.526884][ T8742] R10: 0000000000800800 R11: 0000000000000246 R12: 0000000000000001
[  475.534914][ T8742] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  475.542970][ T8742]  </TASK>
[  476.165261][ T6113] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 90 seconds
[  476.176319][ T6113] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 90 seconds
[  476.189903][ T6113] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 90 seconds
[  476.201678][ T6113] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 90 seconds
[  476.292747][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  476.324235][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  476.331893][    T9] usb 1-1: can't read configurations, error -71
[  476.621504][ T8754] loop3: detected capacity change from 0 to 1764
[  477.112931][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.472'.
[  477.422322][ T5125] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  477.646812][ T5125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.659249][ T5125] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  477.683338][ T5125] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  477.694303][ T5125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  477.707405][ T5125] usb 4-1: SerialNumber: syz
[  478.024197][ T8763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.043932][ T8756] loop0: detected capacity change from 0 to 32768
[  478.053872][ T8763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.090395][ T8756] XFS: noikeep mount option is deprecated.
[  478.146228][ T8756] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  478.254160][ T5125] usb 4-1: 0:2 : does not exist
[  478.283974][ T5125] usb 4-1: USB disconnect, device number 20
[  478.357331][ T8756] XFS (loop0): Ending clean mount
[  478.398616][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.406156][ T8756] XFS (loop0): Quotacheck needed: Please wait.
[  478.544208][ T8756] XFS (loop0): Quotacheck: Done.
[  478.712688][ T8756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  478.825983][ T5797] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  478.920085][ T8798] loop1: detected capacity change from 0 to 1764
[  479.081136][ T5125] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  479.160063][ T8801] FAULT_INJECTION: forcing a failure.
[  479.160063][ T8801] name failslab, interval 1, probability 0, space 0, times 0
[  479.178211][ T8801] CPU: 1 PID: 8801 Comm: syz.1.482 Not tainted syzkaller #0
[  479.185573][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  479.195713][ T8801] Call Trace:
[  479.199038][ T8801]  <TASK>
[  479.202009][ T8801]  dump_stack_lvl+0x18c/0x250
[  479.206758][ T8801]  ? show_regs_print_info+0x20/0x20
[  479.212013][ T8801]  ? load_image+0x420/0x420
[  479.216574][ T8801]  ? __might_sleep+0xe0/0xe0
[  479.221226][ T8801]  ? __lock_acquire+0x7d40/0x7d40
[  479.226465][ T8801]  should_fail_ex+0x39d/0x4d0
[  479.231217][ T8801]  should_failslab+0x9/0x20
[  479.235783][ T8801]  slab_pre_alloc_hook+0x59/0x310
[  479.240869][ T8801]  ? __lock_acquire+0x7d40/0x7d40
[  479.246105][ T8801]  kmem_cache_alloc_node+0x60/0x320
[  479.251339][ T8801]  ? __alloc_skb+0x103/0x2c0
[  479.255987][ T8801]  __alloc_skb+0x103/0x2c0
[  479.260435][ T8801]  netlink_sendmsg+0x66a/0xbf0
[  479.265247][ T8801]  ? netlink_getsockopt+0x590/0x590
[  479.270486][ T8801]  ? aa_sock_msg_perm+0x94/0x150
[  479.275473][ T8801]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  479.280791][ T8801]  ? security_socket_sendmsg+0x80/0xa0
[  479.286286][ T8801]  ? netlink_getsockopt+0x590/0x590
[  479.291544][ T8801]  ____sys_sendmsg+0x5ba/0x960
[  479.296352][ T8801]  ? __asan_memset+0x22/0x40
[  479.300985][ T8801]  ? __sys_sendmsg_sock+0x30/0x30
[  479.306048][ T8801]  ? __import_iovec+0x5f2/0x850
[  479.310942][ T8801]  ? import_iovec+0x73/0xa0
[  479.315595][ T8801]  ___sys_sendmsg+0x2a6/0x360
[  479.320309][ T8801]  ? get_pid_task+0x20/0x1e0
[  479.324938][ T8801]  ? __sys_sendmsg+0x2a0/0x2a0
[  479.329779][ T8801]  ? __lock_acquire+0x7d40/0x7d40
[  479.334874][ T8801]  __se_sys_sendmsg+0x1c2/0x2b0
[  479.339756][ T8801]  ? __x64_sys_sendmsg+0x80/0x80
[  479.344744][ T8801]  ? lockdep_hardirqs_on+0x98/0x150
[  479.349982][ T8801]  do_syscall_64+0x55/0xa0
[  479.354446][ T8801]  ? clear_bhb_loop+0x40/0x90
[  479.359158][ T8801]  ? clear_bhb_loop+0x40/0x90
[  479.363878][ T8801]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  479.369979][ T8801] RIP: 0033:0x7f843179c819
[  479.374575][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.394222][ T8801] RSP: 002b:00007f8432579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.402688][ T8801] RAX: ffffffffffffffda RBX: 00007f8431a15fa0 RCX: 00007f843179c819
[  479.410712][ T8801] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  479.418810][ T8801] RBP: 00007f8432579090 R08: 0000000000000000 R09: 0000000000000000
[  479.426854][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.434863][ T8801] R13: 00007f8431a16038 R14: 00007f8431a15fa0 R15: 00007ffd10fa6378
[  479.443007][ T8801]  </TASK>
[  479.504210][ T5125] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  479.512857][ T5125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  479.523550][ T5125] usb 4-1: config 0 has no interface number 0
[  479.529760][ T5125] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  479.560531][ T5125] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  479.597874][ T5125] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  479.611152][ T5125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.619720][ T5125] usb 4-1: Product: syz
[  479.624274][ T5125] usb 4-1: Manufacturer: syz
[  479.628979][ T5125] usb 4-1: SerialNumber: syz
[  479.640658][ T5125] usb 4-1: config 0 descriptor??
[  479.835672][ T8806] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  479.918481][ T8809] loop1: detected capacity change from 0 to 128
[  479.975284][ T8809] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  480.066728][ T8809] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  480.195471][ T8809] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  480.299065][ T5798] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  480.586958][ T8817] loop1: detected capacity change from 0 to 8192
[  480.663646][ T7227] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  480.762777][ T5125] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  480.903814][ T8825] loop1: detected capacity change from 0 to 1764
[  480.942329][ T5125] usb 1-1: Using ep0 maxpacket: 16
[  480.950293][ T5125] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  480.978736][ T5125] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.993464][ T5125] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  481.020451][ T5125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.041258][ T5125] usb 1-1: config 0 descriptor??
[  481.929391][    T9] usb 4-1: USB disconnect, device number 21
[  483.779990][ T8843] loop1: detected capacity change from 0 to 2048
[  483.933009][ T8843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.984800][ T8843] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  484.209902][ T8841] loop3: detected capacity change from 0 to 32768
[  484.327944][ T8841] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  484.453749][ T8841] XFS (loop3): Ending clean mount
[  484.490018][ T8841] XFS (loop3): Quotacheck needed: Please wait.
[  484.497763][   T27] audit: type=1800 audit(1776056697.112:21): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.494" name="file2" dev="loop1" ino=16 res=0 errno=0
[  484.532544][ T8854] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  484.604706][ T8841] XFS (loop3): Quotacheck: Done.
[  484.689243][ T5796] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  484.731930][ T5125] usbhid 1-1:0.0: can't add hid device: -71
[  484.752344][ T5125] usbhid: probe of 1-1:0.0 failed with error -71
[  484.782646][ T5125] usb 1-1: USB disconnect, device number 17
[  485.194652][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.732305][   T28] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  486.917786][ T8883] FAULT_INJECTION: forcing a failure.
[  486.917786][ T8883] name failslab, interval 1, probability 0, space 0, times 0
[  486.930737][ T8883] CPU: 1 PID: 8883 Comm: syz.3.501 Not tainted syzkaller #0
[  486.938094][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  486.948264][ T8883] Call Trace:
[  486.951587][ T8883]  <TASK>
[  486.954571][ T8883]  dump_stack_lvl+0x18c/0x250
[  486.959338][ T8883]  ? show_regs_print_info+0x20/0x20
[  486.964612][ T8883]  ? load_image+0x420/0x420
[  486.969279][ T8883]  ? __lock_acquire+0x7d40/0x7d40
[  486.974368][ T8883]  should_fail_ex+0x39d/0x4d0
[  486.979207][ T8883]  should_failslab+0x9/0x20
[  486.983789][ T8883]  slab_pre_alloc_hook+0x59/0x310
[  486.988970][ T8883]  ? iovec_from_user+0x87/0x240
[  486.993886][ T8883]  ? iovec_from_user+0x87/0x240
[  486.998784][ T8883]  __kmem_cache_alloc_node+0x53/0x250
[  487.004202][ T8883]  ? iovec_from_user+0x87/0x240
[  487.009084][ T8883]  __kmalloc+0xa4/0x230
[  487.013280][ T8883]  iovec_from_user+0x87/0x240
[  487.018031][ T8883]  __import_iovec+0x13d/0x850
[  487.022749][ T8883]  import_iovec+0x73/0xa0
[  487.027117][ T8883]  do_pwritev+0x1fe/0x3a0
[  487.031485][ T8883]  ? do_preadv+0x390/0x390
[  487.035951][ T8883]  ? __fget_files+0x28/0x4b0
[  487.040590][ T8883]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  487.046692][ T8883]  ? lock_chain_count+0x20/0x20
[  487.051581][ T8883]  ? lockdep_hardirqs_on+0x98/0x150
[  487.056808][ T8883]  ? __x64_sys_pwritev2+0xbe/0x100
[  487.061967][ T8883]  do_syscall_64+0x55/0xa0
[  487.066529][ T8883]  ? clear_bhb_loop+0x40/0x90
[  487.071241][ T8883]  ? clear_bhb_loop+0x40/0x90
[  487.075988][ T8883]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  487.082006][ T8883] RIP: 0033:0x7f4567b9c819
[  487.086540][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.106270][ T8883] RSP: 002b:00007f4568acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  487.114722][ T8883] RAX: ffffffffffffffda RBX: 00007f4567e15fa0 RCX: 00007f4567b9c819
[  487.122749][ T8883] RDX: 0000000000000018 RSI: 0000200000000280 RDI: 0000000000000003
[  487.130752][ T8883] RBP: 00007f4568acd090 R08: 00000000000006af R09: 000000000000000a
[  487.138751][ T8883] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001
[  487.146750][ T8883] R13: 00007f4567e16038 R14: 00007f4567e15fa0 R15: 00007ffee6e244b8
[  487.154850][ T8883]  </TASK>
[  487.192437][ T5802] Bluetooth: hci0: command 0x0406 tx timeout
[  487.214247][ T8875] loop1: detected capacity change from 0 to 256
[  487.221411][ T8875] exfat: Deprecated parameter 'utf8'
[  487.243836][ T8875] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  487.302977][   T28] usb 2-1: unable to get BOS descriptor or descriptor too short
[  487.311786][   T28] usb 2-1: unable to read config index 0 descriptor/start: -71
[  487.332250][   T28] usb 2-1: can't read configurations, error -71
[  487.737826][ T8890] validate_nla: 45 callbacks suppressed
[  487.737850][ T8890] netlink: 'syz.3.503': attribute type 3 has an invalid length.
[  488.283578][ T8923] FAULT_INJECTION: forcing a failure.
[  488.283578][ T8923] name failslab, interval 1, probability 0, space 0, times 0
[  488.312395][ T8923] CPU: 1 PID: 8923 Comm: syz.3.506 Not tainted syzkaller #0
[  488.319882][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  488.330003][ T8923] Call Trace:
[  488.333337][ T8923]  <TASK>
[  488.336317][ T8923]  dump_stack_lvl+0x18c/0x250
[  488.341070][ T8923]  ? show_regs_print_info+0x20/0x20
[  488.346333][ T8923]  ? load_image+0x420/0x420
[  488.350898][ T8923]  ? __might_sleep+0xe0/0xe0
[  488.355552][ T8923]  ? __lock_acquire+0x7d40/0x7d40
[  488.360638][ T8923]  should_fail_ex+0x39d/0x4d0
[  488.365386][ T8923]  should_failslab+0x9/0x20
[  488.369948][ T8923]  slab_pre_alloc_hook+0x59/0x310
[  488.375041][ T8923]  ? __lock_acquire+0x7d40/0x7d40
[  488.380130][ T8923]  kmem_cache_alloc_node+0x60/0x320
[  488.385398][ T8923]  ? __alloc_skb+0x103/0x2c0
[  488.390142][ T8923]  __alloc_skb+0x103/0x2c0
[  488.394626][ T8923]  netlink_sendmsg+0x66a/0xbf0
[  488.399521][ T8923]  ? netlink_getsockopt+0x590/0x590
[  488.404787][ T8923]  ? aa_sock_msg_perm+0x94/0x150
[  488.409908][ T8923]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  488.415274][ T8923]  ? security_socket_sendmsg+0x80/0xa0
[  488.420788][ T8923]  ? netlink_getsockopt+0x590/0x590
[  488.426145][ T8923]  ____sys_sendmsg+0x5ba/0x960
[  488.430969][ T8923]  ? __asan_memset+0x22/0x40
[  488.435628][ T8923]  ? __sys_sendmsg_sock+0x30/0x30
[  488.440702][ T8923]  ? __import_iovec+0x5f2/0x850
[  488.445645][ T8923]  ? import_iovec+0x73/0xa0
[  488.450195][ T8923]  ___sys_sendmsg+0x2a6/0x360
[  488.454918][ T8923]  ? get_pid_task+0x20/0x1e0
[  488.459584][ T8923]  ? __sys_sendmsg+0x2a0/0x2a0
[  488.464422][ T8923]  ? __lock_acquire+0x7d40/0x7d40
[  488.469554][ T8923]  __se_sys_sendmsg+0x1c2/0x2b0
[  488.474456][ T8923]  ? __x64_sys_sendmsg+0x80/0x80
[  488.479490][ T8923]  ? lockdep_hardirqs_on+0x98/0x150
[  488.484863][ T8923]  do_syscall_64+0x55/0xa0
[  488.489332][ T8923]  ? clear_bhb_loop+0x40/0x90
[  488.494068][ T8923]  ? clear_bhb_loop+0x40/0x90
[  488.498812][ T8923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  488.504765][ T8923] RIP: 0033:0x7f4567b9c819
[  488.509229][ T8923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.528895][ T8923] RSP: 002b:00007f4568acd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.537374][ T8923] RAX: ffffffffffffffda RBX: 00007f4567e15fa0 RCX: 00007f4567b9c819
[  488.545399][ T8923] RDX: 0000000000040110 RSI: 0000200000000580 RDI: 0000000000000004
[  488.553432][ T8923] RBP: 00007f4568acd090 R08: 0000000000000000 R09: 0000000000000000
[  488.561459][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.569574][ T8923] R13: 00007f4567e16038 R14: 00007f4567e15fa0 R15: 00007ffee6e244b8
[  488.577626][ T8923]  </TASK>
[  488.641589][ T8925] loop1: detected capacity change from 0 to 128
[  488.843821][ T8930] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  489.244244][ T8940] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  493.586629][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  493.958861][ T8961] loop1: detected capacity change from 0 to 256
[  493.966101][ T8961] exfat: Deprecated parameter 'utf8'
[  493.986386][ T8961] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  494.033825][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  494.095648][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[  495.003143][    T9] usb 2-1: can't read configurations, error -71
[  495.236282][ T8967] nfs: Unknown parameter 'ÿÿÿÿ'
[  495.244335][ T8967] comedi comedi1: comedi_config --init_data is deprecated
[  495.614477][   T28] Process accounting resumed
[  496.079355][ T8972] Process accounting resumed
[  496.099447][ T8969] loop0: detected capacity change from 0 to 256
[  496.106820][ T8969] FAT-fs (loop0): Unrecognized mount option "ÿ0x000000000000ee000x00000000000000061844674407370955161500000000000000000000003" or missing value
[  496.178358][ T7227] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  496.215198][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'.
[  496.334748][ T8979] loop1: detected capacity change from 0 to 1764
[  497.058136][   T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  497.100218][   T28] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  497.112441][ T5810] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  497.294546][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.319446][ T5810] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  497.338885][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.365808][ T5810] usb 2-1: config 0 descriptor??
[  497.434354][ T8985] loop3: detected capacity change from 0 to 32768
[  497.465787][ T8985] (syz.3.519,8985,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fuþ·¬¡«åÆBll" or missing value
[  497.487755][ T8985] (syz.3.519,8985,1):ocfs2_fill_super:1178 ERROR: status = -22
[  498.683126][ T5810] usbhid 2-1:0.0: can't add hid device: -71
[  498.714965][ T5810] usbhid: probe of 2-1:0.0 failed with error -71
[  498.737066][ T5810] usb 2-1: USB disconnect, device number 16
[  499.253076][ T5810] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  499.462284][ T5810] usb 2-1: Using ep0 maxpacket: 32
[  499.469036][ T5810] usb 2-1: no configurations
[  499.476817][ T5810] usb 2-1: can't read configurations, error -22
[  499.652505][ T5810] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  499.827283][ T9011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.842646][ T5810] usb 2-1: Using ep0 maxpacket: 32
[  499.851131][ T5810] usb 2-1: no configurations
[  499.860252][ T5810] usb 2-1: can't read configurations, error -22
[  499.880348][ T5810] usb usb2-port1: attempt power cycle
[  500.071113][ T2130] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  500.157600][ T9011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.249894][ T9009] loop3: detected capacity change from 0 to 32768
[  500.290258][ T2130] usb 1-1: config 0 has no interfaces?
[  500.326904][ T9018] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  500.349045][ T2130] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  500.377529][ T2130] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  500.412292][ T2130] usb 1-1: Product: syz
[  500.424660][ T2130] usb 1-1: Manufacturer: syz
[  500.429358][ T2130] usb 1-1: SerialNumber: syz
[  500.460322][ T2130] usb 1-1: config 0 descriptor??
[  500.510704][ T9011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.919097][ T9011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.535601][ T9014] FAULT_INJECTION: forcing a failure.
[  501.535601][ T9014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.582404][ T9014] CPU: 0 PID: 9014 Comm: syz.0.525 Not tainted syzkaller #0
[  501.589869][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  501.599999][ T9014] Call Trace:
[  501.603337][ T9014]  <TASK>
[  501.606317][ T9014]  dump_stack_lvl+0x18c/0x250
[  501.611083][ T9014]  ? show_regs_print_info+0x20/0x20
[  501.616419][ T9014]  ? load_image+0x420/0x420
[  501.620974][ T9014]  ? __lock_acquire+0x7d40/0x7d40
[  501.626041][ T9014]  ? snprintf+0xe9/0x140
[  501.630318][ T9014]  should_fail_ex+0x39d/0x4d0
[  501.635068][ T9014]  _copy_to_user+0x2f/0xa0
[  501.639518][ T9014]  simple_read_from_buffer+0xe7/0x150
[  501.644955][ T9014]  proc_fail_nth_read+0x1e8/0x260
[  501.650193][ T9014]  ? proc_fault_inject_write+0x360/0x360
[  501.655864][ T9014]  ? fsnotify_perm+0x271/0x5e0
[  501.660660][ T9014]  ? proc_fault_inject_write+0x360/0x360
[  501.666335][ T9014]  vfs_read+0x28b/0x970
[  501.670535][ T9014]  ? kernel_read+0x1e0/0x1e0
[  501.675159][ T9014]  ? __fget_files+0x28/0x4b0
[  501.679788][ T9014]  ? __fget_files+0x28/0x4b0
[  501.684448][ T9014]  ? __fget_files+0x43d/0x4b0
[  501.689172][ T9014]  ? __fdget_pos+0x2a3/0x330
[  501.693795][ T9014]  ? ksys_read+0x75/0x260
[  501.698157][ T9014]  ksys_read+0x150/0x260
[  501.702449][ T9014]  ? vfs_write+0x990/0x990
[  501.706993][ T9014]  ? lockdep_hardirqs_on+0x98/0x150
[  501.712229][ T9014]  do_syscall_64+0x55/0xa0
[  501.716696][ T9014]  ? clear_bhb_loop+0x40/0x90
[  501.721421][ T9014]  ? clear_bhb_loop+0x40/0x90
[  501.726143][ T9014]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.732075][ T9014] RIP: 0033:0x7f22d6b5d04e
[  501.736526][ T9014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  501.756266][ T9014] RSP: 002b:00007f22d7a73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  501.764838][ T9014] RAX: ffffffffffffffda RBX: 00007f22d7a746c0 RCX: 00007f22d6b5d04e
[  501.772850][ T9014] RDX: 000000000000000f RSI: 00007f22d7a740a0 RDI: 0000000000000008
[  501.780859][ T9014] RBP: 00007f22d7a74090 R08: 0000000000000000 R09: 0000000000000000
[  501.788883][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.796891][ T9014] R13: 00007f22d6e16128 R14: 00007f22d6e16090 R15: 00007ffeecc0dc98
[  501.805102][ T9014]  </TASK>
[  501.808267][    C0] vkms_vblank_simulate: vblank timer overrun
[  501.882841][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  501.889238][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  502.752965][ T9011] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.812574][ T9011] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.875138][ T9011] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.970871][ T9011] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.080158][ T2130] usb 1-1: USB disconnect, device number 18
[  506.211361][ T9057] FAULT_INJECTION: forcing a failure.
[  506.211361][ T9057] name failslab, interval 1, probability 0, space 0, times 0
[  506.235399][ T9055] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  506.244178][ T6113] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 120 seconds
[  506.256610][ T6113] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 120 seconds
[  506.267991][ T6113] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 120 seconds
[  506.279435][ T6113] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 120 seconds
[  506.282471][ T9057] CPU: 0 PID: 9057 Comm: syz.3.529 Not tainted syzkaller #0
[  506.297848][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  506.308125][ T9057] Call Trace:
[  506.311459][ T9057]  <TASK>
[  506.314445][ T9057]  dump_stack_lvl+0x18c/0x250
[  506.319195][ T9057]  ? show_regs_print_info+0x20/0x20
[  506.324623][ T9057]  ? load_image+0x420/0x420
[  506.329198][ T9057]  ? __might_sleep+0xe0/0xe0
[  506.333853][ T9057]  ? __lock_acquire+0x7d40/0x7d40
[  506.338948][ T9057]  ? percpu_ref_put+0x12/0x100
[  506.343767][ T9057]  should_fail_ex+0x39d/0x4d0
[  506.348522][ T9057]  should_failslab+0x9/0x20
[  506.353101][ T9057]  slab_pre_alloc_hook+0x59/0x310
[  506.358205][ T9057]  kmem_cache_alloc+0x5a/0x2d0
[  506.363033][ T9057]  ? vm_area_dup+0x61/0x270
[  506.367607][ T9057]  vm_area_dup+0x61/0x270
[  506.372083][ T9057]  __split_vma+0x1b4/0xc60
[  506.376562][ T9057]  ? verify_lock_unused+0x140/0x140
[  506.381921][ T9057]  ? mmap_write_unlock+0x160/0x160
[  506.387122][ T9057]  do_vmi_align_munmap+0x32a/0x16d0
[  506.392397][ T9057]  ? do_vmi_munmap+0x2d0/0x2d0
[  506.397241][ T9057]  ? mtree_range_walk+0x674/0x7c0
[  506.402347][ T9057]  ? mas_find_setup+0x493/0x590
[  506.407270][ T9057]  do_vmi_munmap+0x252/0x2d0
[  506.412024][ T9057]  mmap_region+0x773/0x2000
[  506.416618][ T9057]  ? file_mmap_ok+0x170/0x170
[  506.421377][ T9057]  ? bpf_lsm_capable+0x9/0x10
[  506.426202][ T9057]  ? security_capable+0x89/0xb0
[  506.431145][ T9057]  ? file_mmap_ok+0x11c/0x170
[  506.435902][ T9057]  do_mmap+0x92c/0x10a0
[  506.440127][ T9057]  ? mlock_future_ok+0xf0/0xf0
[  506.444954][ T9057]  ? down_write+0x200/0x200
[  506.449514][ T9057]  vm_mmap_pgoff+0x1c4/0x3f0
[  506.454184][ T9057]  ? account_locked_vm+0x210/0x210
[  506.459356][ T9057]  ? __fget_files+0x28/0x4b0
[  506.464110][ T9057]  ksys_mmap_pgoff+0x520/0x700
[  506.468945][ T9057]  ? __x64_sys_mmap+0x7a/0x130
[  506.473779][ T9057]  do_syscall_64+0x55/0xa0
[  506.478258][ T9057]  ? clear_bhb_loop+0x40/0x90
[  506.483000][ T9057]  ? clear_bhb_loop+0x40/0x90
[  506.487738][ T9057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  506.493725][ T9057] RIP: 0033:0x7f4567b9c819
[  506.498189][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.517951][ T9057] RSP: 002b:00007f4568acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  506.526420][ T9057] RAX: ffffffffffffffda RBX: 00007f4567e15fa0 RCX: 00007f4567b9c819
[  506.534442][ T9057] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000
[  506.542446][ T9057] RBP: 00007f4568acd090 R08: 0000000000000003 R09: 0000010000000000
[  506.550457][ T9057] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  506.558536][ T9057] R13: 00007f4567e16038 R14: 00007f4567e15fa0 R15: 00007ffee6e244b8
[  506.566543][ T9057]  </TASK>
[  508.611585][ T9075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  508.721294][ T9083] SET target dimension over the limit!
[  511.282316][ T5804] Bluetooth: hci0: command 0x0406 tx timeout
[  511.724210][ T9106] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  511.747986][ T9087] loop2: detected capacity change from 0 to 32768
[  511.873518][ T9087] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  511.934126][ T9087] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR
[  511.945956][ T9087] XFS (loop2): log mount failed
[  511.962708][ T5867] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  512.182573][ T5867] usb 1-1: Using ep0 maxpacket: 16
[  512.285559][ T5867] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  512.309142][ T5867] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  512.340026][ T5867] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  512.368818][ T5867] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  512.389047][ T5867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  512.436709][ T5867] usb 1-1: config 0 has no interface number 0
[  512.443304][ T5867] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  513.291311][ T5867] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  513.302300][ T5867] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  513.315733][ T5867] usb 1-1: too many endpoints for config 0 interface 125 altsetting 48: 120, using maximum allowed: 30
[  513.411047][ T5867] usb 1-1: config 0 interface 125 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120
[  513.594427][ T5867] usb 1-1: config 0 interface 125 has no altsetting 0
[  513.622437][ T5867] usb 1-1: config 0 interface 125 has no altsetting 1
[  513.701732][ T5867] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  513.792336][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.800445][ T5867] usb 1-1: Product: syz
[  513.832291][ T5867] usb 1-1: Manufacturer: syz
[  513.842377][ T5867] usb 1-1: SerialNumber: syz
[  513.863401][ T5867] usb 1-1: config 0 descriptor??
[  514.683808][ T9127] input: syz1 as /devices/virtual/input/input8
[  514.834364][ T9128] FAULT_INJECTION: forcing a failure.
[  514.834364][ T9128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.849738][ T9128] CPU: 0 PID: 9128 Comm: syz.3.551 Not tainted syzkaller #0
[  514.857125][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  514.867432][ T9128] Call Trace:
[  514.870781][ T9128]  <TASK>
[  514.873771][ T9128]  dump_stack_lvl+0x18c/0x250
[  514.878508][ T9128]  ? show_regs_print_info+0x20/0x20
[  514.883738][ T9128]  ? load_image+0x420/0x420
[  514.888294][ T9128]  ? __might_fault+0xaa/0x120
[  514.893103][ T9128]  ? __lock_acquire+0x7d40/0x7d40
[  514.898277][ T9128]  should_fail_ex+0x39d/0x4d0
[  514.903078][ T9128]  _copy_from_user+0x2f/0xe0
[  514.907713][ T9128]  input_event_from_user+0xb2/0x290
[  514.912976][ T9128]  ? input_handlers_seq_show+0x160/0x160
[  514.918678][ T9128]  ? input_event+0x8c/0xc0
[  514.923385][ T9128]  uinput_write+0x285/0xfd0
[  514.928030][ T9128]  ? uinput_read+0xb50/0xb50
[  514.932755][ T9128]  ? common_file_perm+0x198/0x1f0
[  514.938035][ T9128]  ? fsnotify_perm+0x5d/0x5e0
[  514.942820][ T9128]  ? security_file_permission+0x79/0xa0
[  514.948468][ T9128]  ? uinput_read+0xb50/0xb50
[  514.953132][ T9128]  vfs_write+0x296/0x990
[  514.957470][ T9128]  ? file_end_write+0x250/0x250
[  514.962415][ T9128]  ? __fget_files+0x28/0x4b0
[  514.967062][ T9128]  ? __fget_files+0x28/0x4b0
[  514.971679][ T9128]  ? __fget_files+0x43d/0x4b0
[  514.976388][ T9128]  ? __fdget_pos+0x1d8/0x330
[  514.981028][ T9128]  ? ksys_write+0x75/0x260
[  514.985486][ T9128]  ksys_write+0x150/0x260
[  514.989875][ T9128]  ? __ia32_sys_read+0x90/0x90
[  514.994714][ T9128]  ? lockdep_hardirqs_on+0x98/0x150
[  514.999998][ T9128]  do_syscall_64+0x55/0xa0
[  515.004481][ T9128]  ? clear_bhb_loop+0x40/0x90
[  515.009230][ T9128]  ? clear_bhb_loop+0x40/0x90
[  515.013983][ T9128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  515.020030][ T9128] RIP: 0033:0x7f4567b9c819
[  515.024505][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.044339][ T9128] RSP: 002b:00007f4568a8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  515.052890][ T9128] RAX: ffffffffffffffda RBX: 00007f4567e16180 RCX: 00007f4567b9c819
[  515.061212][ T9128] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 0000000000000004
[  515.069665][ T9128] RBP: 00007f4568a8b090 R08: 0000000000000000 R09: 0000000000000000
[  515.077680][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.085712][ T9128] R13: 00007f4567e16218 R14: 00007f4567e16180 R15: 00007ffee6e244b8
[  515.093755][ T9128]  </TASK>
[  515.525725][  T788] usb 1-1: USB disconnect, device number 19
[  517.233105][ T9146] random: crng reseeded on system resumption
[  520.322342][ T2130] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  520.454376][ T9157] loop2: detected capacity change from 0 to 32768
[  520.528000][ T2130] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[  520.543475][ T2130] usb 4-1: config 150 has no interface number 0
[  520.563294][ T9157] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  520.573714][ T2130] usb 4-1: config 150 interface 204 has no altsetting 0
[  520.590670][ T2130] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  520.607438][ T2130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.616126][ T2130] usb 4-1: Product: syz
[  520.620436][ T2130] usb 4-1: Manufacturer: syz
[  520.632606][ T2130] usb 4-1: SerialNumber: syz
[  520.851524][ T2130] xr_serial 4-1:150.204: xr_serial converter detected
[  520.894956][ T9157] XFS (loop2): Ending clean mount
[  520.954368][ T2130] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  520.974988][ T2130] xr_serial: probe of ttyUSB0 failed with error -71
[  521.038819][ T2130] usb 4-1: USB disconnect, device number 22
[  521.070506][ T2130] xr_serial 4-1:150.204: device disconnected
[  521.082373][   T27] audit: type=1800 audit(1776056733.692:22): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.559" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  521.320239][ T9157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.559'.
[  521.397263][ T9182] capability: warning: `syz.3.562' uses deprecated v2 capabilities in a way that may be insecure
[  521.619131][ T5799] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  521.732374][ T5859] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  521.952444][ T5859] usb 4-1: Using ep0 maxpacket: 8
[  521.960226][ T5859] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  521.972389][ T5859] usb 4-1: config 0 has no interface number 0
[  521.978821][ T5859] usb 4-1: config 0 interface 128 has no altsetting 0
[  522.016743][ T5859] usb 4-1: string descriptor 0 read error: -22
[  522.023820][ T5859] usb 4-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00
[  522.042178][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.073299][ T5859] usb 4-1: config 0 descriptor??
[  522.104082][ T5859] usb-storage 4-1:0.128: USB Mass Storage device detected
[  522.288229][ T5859] usb 4-1: USB disconnect, device number 23
[  522.612941][ T9193] loop1: detected capacity change from 0 to 16
[  522.636929][ T9193] erofs: (device loop1): mounted with root inode @ nid 36.
[  522.688907][   T27] audit: type=1800 audit(1776056735.302:23): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.565" name="file1" dev="loop1" ino=86 res=0 errno=0
[  522.701402][ T9193] syz.1.565: attempt to access beyond end of device
[  522.701402][ T9193] loop1: rw=0, sector=1342177272, nr_sectors = 16 limit=16
[  522.756847][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'.
[  522.998206][ T9193] netlink: 92 bytes leftover after parsing attributes in process `syz.1.565'.
[  523.754242][ T9212] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  525.138866][ T9216] loop0: detected capacity change from 0 to 512
[  525.165902][ T9224] loop2: detected capacity change from 0 to 256
[  525.224333][ T9216] FAT-fs (loop0): Unrecognized mount option "ÿÿ" or missing value
[  525.294614][ T9224] FAT-fs (loop2): bogus number of FAT sectors
[  525.301264][ T9224] FAT-fs (loop2): Can't find a valid FAT filesystem
[  525.545129][ T9235] loop1: detected capacity change from 0 to 512
[  525.608441][ T9235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  525.670766][ T9235] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.578: bad orphan inode 131083
[  525.705818][ T9235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.817036][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.578'.
[  525.837718][ T9235] nbd: couldn't find a device at index 196608
[  526.011174][ T9245] FAULT_INJECTION: forcing a failure.
[  526.011174][ T9245] name failslab, interval 1, probability 0, space 0, times 0
[  526.029950][ T9245] CPU: 0 PID: 9245 Comm: syz.2.579 Not tainted syzkaller #0
[  526.037328][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  526.047437][ T9245] Call Trace:
[  526.050768][ T9245]  <TASK>
[  526.053763][ T9245]  dump_stack_lvl+0x18c/0x250
[  526.058514][ T9245]  ? show_regs_print_info+0x20/0x20
[  526.063777][ T9245]  ? load_image+0x420/0x420
[  526.068519][ T9245]  ? __might_sleep+0xe0/0xe0
[  526.073178][ T9245]  ? __lock_acquire+0x7d40/0x7d40
[  526.078348][ T9245]  should_fail_ex+0x39d/0x4d0
[  526.083109][ T9245]  should_failslab+0x9/0x20
[  526.087684][ T9245]  slab_pre_alloc_hook+0x59/0x310
[  526.092785][ T9245]  ? tomoyo_encode+0x28b/0x540
[  526.097607][ T9245]  ? tomoyo_encode+0x28b/0x540
[  526.102409][ T9245]  __kmem_cache_alloc_node+0x53/0x250
[  526.107835][ T9245]  ? tomoyo_encode+0x28b/0x540
[  526.112722][ T9245]  __kmalloc+0xa4/0x230
[  526.116943][ T9245]  tomoyo_encode+0x28b/0x540
[  526.121615][ T9245]  tomoyo_realpath_from_path+0x592/0x5d0
[  526.127306][ T9245]  tomoyo_path_number_perm+0x248/0x620
[  526.132818][ T9245]  ? tomoyo_path_number_perm+0x217/0x620
[  526.138511][ T9245]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  526.144042][ T9245]  ? ksys_write+0x1c4/0x260
[  526.148627][ T9245]  ? __fget_files+0x28/0x4b0
[  526.153271][ T9245]  ? __fget_files+0x28/0x4b0
[  526.158200][ T9245]  security_file_ioctl+0x70/0xa0
[  526.163196][ T9245]  __se_sys_ioctl+0x48/0x170
[  526.167833][ T9245]  do_syscall_64+0x55/0xa0
[  526.172276][ T9245]  ? clear_bhb_loop+0x40/0x90
[  526.176995][ T9245]  ? clear_bhb_loop+0x40/0x90
[  526.181718][ T9245]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.187661][ T9245] RIP: 0033:0x7f6f7d39c819
[  526.192133][ T9245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.211795][ T9245] RSP: 002b:00007f6f7e21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  526.220253][ T9245] RAX: ffffffffffffffda RBX: 00007f6f7d615fa0 RCX: 00007f6f7d39c819
[  526.228350][ T9245] RDX: 0000200000000080 RSI: 00000000000089e1 RDI: 0000000000000004
[  526.236440][ T9245] RBP: 00007f6f7e21e090 R08: 0000000000000000 R09: 0000000000000000
[  526.244445][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.252443][ T9245] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  526.260453][ T9245]  </TASK>
[  526.292703][ T9245] ERROR: Out of memory at tomoyo_realpath_from_path.
[  526.302218][ T9248] loop3: detected capacity change from 0 to 1764
[  526.314509][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.058306][ T9257] loop1: detected capacity change from 0 to 128
[  528.213721][ T9260] syz.2.584 (9260): /proc/9258/oom_adj is deprecated, please use /proc/9258/oom_score_adj instead.
[  528.308155][ T9260] FAULT_INJECTION: forcing a failure.
[  528.308155][ T9260] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.401947][ T9260] CPU: 1 PID: 9260 Comm: syz.2.584 Not tainted syzkaller #0
[  528.409336][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  528.419434][ T9260] Call Trace:
[  528.422753][ T9260]  <TASK>
[  528.425733][ T9260]  dump_stack_lvl+0x18c/0x250
[  528.430473][ T9260]  ? show_regs_print_info+0x20/0x20
[  528.435729][ T9260]  ? load_image+0x420/0x420
[  528.440289][ T9260]  ? __might_fault+0xaa/0x120
[  528.445051][ T9260]  ? __lock_acquire+0x7d40/0x7d40
[  528.450142][ T9260]  should_fail_ex+0x39d/0x4d0
[  528.454933][ T9260]  _copy_from_user+0x2f/0xe0
[  528.459580][ T9260]  oom_adj_write+0xe3/0x250
[  528.464134][ T9260]  ? trace_raw_output_contention_end+0xd0/0xd0
[  528.470340][ T9260]  ? oom_adj_read+0x2d0/0x2d0
[  528.475073][ T9260]  ? iov_iter_iovec_advance+0x1ef/0x290
[  528.480775][ T9260]  do_iter_write+0x4ea/0xc30
[  528.485433][ T9260]  ? oom_adj_read+0x2d0/0x2d0
[  528.490248][ T9260]  ? vfs_iter_write+0xa0/0xa0
[  528.494970][ T9260]  ? rcu_read_lock_any_held+0xb4/0x140
[  528.500476][ T9260]  ? rcu_read_lock_bh_held+0x100/0x100
[  528.505992][ T9260]  do_writev+0x27f/0x480
[  528.510297][ T9260]  ? do_readv+0x460/0x460
[  528.514763][ T9260]  ? __fget_files+0x28/0x4b0
[  528.519422][ T9260]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  528.525452][ T9260]  ? lock_chain_count+0x20/0x20
[  528.530352][ T9260]  ? lockdep_hardirqs_on+0x98/0x150
[  528.535600][ T9260]  do_syscall_64+0x55/0xa0
[  528.540057][ T9260]  ? clear_bhb_loop+0x40/0x90
[  528.544785][ T9260]  ? clear_bhb_loop+0x40/0x90
[  528.549517][ T9260]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  528.555455][ T9260] RIP: 0033:0x7f6f7d39c819
[  528.560018][ T9260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.579949][ T9260] RSP: 002b:00007f6f7e21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  528.588424][ T9260] RAX: ffffffffffffffda RBX: 00007f6f7d615fa0 RCX: 00007f6f7d39c819
[  528.596453][ T9260] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000009
[  528.604461][ T9260] RBP: 00007f6f7e21e090 R08: 0000000000000000 R09: 0000000000000000
[  528.612484][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.620512][ T9260] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  528.628721][ T9260]  </TASK>
[  529.381695][ T5859] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  529.562281][ T5859] usb 1-1: Using ep0 maxpacket: 32
[  529.636512][ T5859] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  529.647493][ T5859] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  529.657839][ T5859] usb 1-1: config 0 interface 0 has no altsetting 0
[  529.667579][ T5859] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  529.678001][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.686648][ T5859] usb 1-1: Product: syz
[  529.690885][ T5859] usb 1-1: Manufacturer: syz
[  529.695940][ T5859] usb 1-1: SerialNumber: syz
[  529.720973][ T5859] usb 1-1: config 0 descriptor??
[  531.720557][ T5859] gs_usb 1-1:0.0: Couldn't send data format (err=-110)
[  531.736901][ T5859] gs_usb: probe of 1-1:0.0 failed with error -110
[  531.888075][    T9] usb 1-1: USB disconnect, device number 20
[  532.357446][ T9278] loop0: detected capacity change from 0 to 64
[  532.763051][ T9292] loop3: detected capacity change from 0 to 1764
[  532.982241][  T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  533.264868][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[  533.707527][  T788] usb 3-1: Using ep0 maxpacket: 16
[  533.715077][  T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.725737][  T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  533.747506][  T788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  533.757103][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.765643][  T788] usb 3-1: Product: syz
[  533.770558][  T788] usb 3-1: Manufacturer: syz
[  533.780743][  T788] usb 3-1: SerialNumber: syz
[  534.288306][  T788] usb 3-1: 0:2 : does not exist
[  534.454984][  T788] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  534.520201][  T788] usb 3-1: USB disconnect, device number 8
[  535.287712][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  536.482305][ T9140] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 150 seconds
[  536.502241][ T9140] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 150 seconds
[  536.513466][ T9140] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 150 seconds
[  536.524745][ T9140] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 150 seconds
[  537.017729][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'.
[  537.382301][ T5867] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  537.632332][ T5867] usb 1-1: Using ep0 maxpacket: 32
[  537.645246][ T5867] usb 1-1: config 250 has an invalid interface number: 8 but max is 0
[  537.670745][ T5867] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  537.714422][ T5867] usb 1-1: config 250 has no interface number 0
[  537.870557][ T5867] usb 1-1: config 250 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  537.977083][ T5867] usb 1-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9
[  538.032482][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.388371][ T5867] usb 1-1: string descriptor 0 read error: -71
[  538.430758][ T5867] uvcvideo 1-1:250.8: Found Unit with invalid ID 0
[  538.437991][ T5867] usb 1-1: Found UVC 0.00 device <unnamed> (0ac8:3410)
[  538.445249][ T5867] usb 1-1: No valid video chain found.
[  538.465039][ T5867] usb 1-1: USB disconnect, device number 21
[  546.076726][ T9475] loop1: detected capacity change from 0 to 1764
[  546.759987][ T9481] loop3: detected capacity change from 0 to 164
[  548.034023][ T9489] netlink: 'syz.3.620': attribute type 1 has an invalid length.
[  548.092198][ T9489] netlink: 'syz.3.620': attribute type 2 has an invalid length.
[  548.100669][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'.
[  549.001238][ T9498] FAULT_INJECTION: forcing a failure.
[  549.001238][ T9498] name failslab, interval 1, probability 0, space 0, times 0
[  549.015860][ T9498] CPU: 0 PID: 9498 Comm: syz.2.618 Not tainted syzkaller #0
[  549.023229][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  549.033310][ T9498] Call Trace:
[  549.036612][ T9498]  <TASK>
[  549.039562][ T9498]  dump_stack_lvl+0x18c/0x250
[  549.044370][ T9498]  ? show_regs_print_info+0x20/0x20
[  549.049785][ T9498]  ? load_image+0x420/0x420
[  549.054326][ T9498]  ? __lock_acquire+0x7d40/0x7d40
[  549.059372][ T9498]  should_fail_ex+0x39d/0x4d0
[  549.064080][ T9498]  should_failslab+0x9/0x20
[  549.068709][ T9498]  slab_pre_alloc_hook+0x59/0x310
[  549.073756][ T9498]  ? __might_sleep+0xe0/0xe0
[  549.078365][ T9498]  ? dh_data_from_key+0x15e/0x270
[  549.083585][ T9498]  ? dh_data_from_key+0x15e/0x270
[  549.088624][ T9498]  __kmem_cache_alloc_node+0x53/0x250
[  549.094029][ T9498]  ? dh_data_from_key+0x15e/0x270
[  549.099070][ T9498]  __kmalloc_node_track_caller+0xa2/0x230
[  549.104906][ T9498]  kmemdup+0x2b/0x70
[  549.108823][ T9498]  dh_data_from_key+0x15e/0x270
[  549.113710][ T9498]  __keyctl_dh_compute+0x33d/0xce0
[  549.118859][ T9498]  ? keyctl_get_persistent+0x770/0x770
[  549.124447][ T9498]  ? __schedule+0x179f/0x45a0
[  549.129279][ T9498]  keyctl_dh_compute+0x125/0x180
[  549.134272][ T9498]  ? keyctl_dh_compute_kdf+0x220/0x220
[  549.139756][ T9498]  ? asan.module_dtor+0x20/0x20
[  549.144679][ T9498]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  549.150338][ T9498]  __se_sys_keyctl+0x456/0xb60
[  549.155141][ T9498]  ? __x64_sys_keyctl+0xc0/0xc0
[  549.160033][ T9498]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  549.166044][ T9498]  ? lock_chain_count+0x20/0x20
[  549.170933][ T9498]  ? asm_sysvec_call_function_single+0x1a/0x20
[  549.177110][ T9498]  ? lockdep_hardirqs_on+0x98/0x150
[  549.182325][ T9498]  ? asm_sysvec_call_function_single+0x1a/0x20
[  549.188500][ T9498]  ? __x64_sys_keyctl+0x20/0xc0
[  549.193365][ T9498]  do_syscall_64+0x55/0xa0
[  549.197816][ T9498]  ? clear_bhb_loop+0x40/0x90
[  549.202517][ T9498]  ? clear_bhb_loop+0x40/0x90
[  549.207220][ T9498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.213194][ T9498] RIP: 0033:0x7f6f7d39c819
[  549.217641][ T9498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.237275][ T9498] RSP: 002b:00007f6f7e1fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  549.245764][ T9498] RAX: ffffffffffffffda RBX: 00007f6f7d616090 RCX: 00007f6f7d39c819
[  549.253767][ T9498] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017
[  549.261750][ T9498] RBP: 00007f6f7e1fd090 R08: 0000000000000000 R09: 0000000000000000
[  549.269730][ T9498] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001
[  549.277715][ T9498] R13: 00007f6f7d616128 R14: 00007f6f7d616090 R15: 00007fffc9dabe78
[  549.285716][ T9498]  </TASK>
[  550.737911][ T9508] FAULT_INJECTION: forcing a failure.
[  550.737911][ T9508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  550.751840][ T9508] CPU: 1 PID: 9508 Comm: syz.1.623 Not tainted syzkaller #0
[  550.759186][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  550.769290][ T9508] Call Trace:
[  550.772637][ T9508]  <TASK>
[  550.775621][ T9508]  dump_stack_lvl+0x18c/0x250
[  550.780369][ T9508]  ? show_regs_print_info+0x20/0x20
[  550.785636][ T9508]  ? load_image+0x420/0x420
[  550.790204][ T9508]  ? __might_fault+0xaa/0x120
[  550.794947][ T9508]  ? __lock_acquire+0x7d40/0x7d40
[  550.800042][ T9508]  should_fail_ex+0x39d/0x4d0
[  550.804791][ T9508]  _copy_from_user+0x2f/0xe0
[  550.809545][ T9508]  sctp_setsockopt+0x19e/0x11e0
[  550.814473][ T9508]  ? sock_common_recvmsg+0x190/0x190
[  550.819832][ T9508]  do_sock_setsockopt+0x175/0x1a0
[  550.824920][ T9508]  ? __fdget+0x180/0x210
[  550.829320][ T9508]  __x64_sys_setsockopt+0x182/0x200
[  550.834591][ T9508]  do_syscall_64+0x55/0xa0
[  550.839115][ T9508]  ? clear_bhb_loop+0x40/0x90
[  550.844013][ T9508]  ? clear_bhb_loop+0x40/0x90
[  550.848765][ T9508]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  550.854740][ T9508] RIP: 0033:0x7f843179c819
[  550.859234][ T9508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  550.878903][ T9508] RSP: 002b:00007f842f9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  550.887379][ T9508] RAX: ffffffffffffffda RBX: 00007f8431a16180 RCX: 00007f843179c819
[  550.895497][ T9508] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005
[  550.903520][ T9508] RBP: 00007f842f9d5090 R08: 000000000000009c R09: 0000000000000000
[  550.911641][ T9508] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  550.919658][ T9508] R13: 00007f8431a16218 R14: 00007f8431a16180 R15: 00007ffd10fa6378
[  550.927690][ T9508]  </TASK>
[  551.925360][ T9514] loop3: detected capacity change from 0 to 1764
[  555.414977][ T9520] loop3: detected capacity change from 0 to 4096
[  555.436285][ T9520] ntfs: (device loop3): parse_options(): The disable_sparse option requires a boolean argument.
[  556.071310][ T9527] syz.3.630: attempt to access beyond end of device
[  556.071310][ T9527] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  556.104954][ T9527] efs: cannot read volume header
[  560.117485][ T9535] loop2: detected capacity change from 0 to 40427
[  560.752758][ T9548] loop1: detected capacity change from 0 to 1764
[  563.206034][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  563.212513][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  564.516060][ T9565] loop2: detected capacity change from 0 to 4096
[  564.551641][ T9565] ntfs: volume version 3.1.
[  564.585715][ T9565] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  564.596142][ T9565] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota.
[  564.605880][ T9565] ntfs: (device loop2): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  564.616921][ T9565] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  564.626885][ T9565] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  564.636956][ T9565] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  564.792963][ T9565] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1.  You might want to try to use the mount option nls=utf8.
[  564.811630][ T9565] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  565.718313][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  565.732676][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  565.742270][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  565.752971][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  565.773587][ T5802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  565.781068][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  566.799209][ T9588] netlink: 192 bytes leftover after parsing attributes in process `syz.2.648'.
[  566.827398][ T9588] loop2: detected capacity change from 0 to 7
[  566.852346][ T9588] Dev loop2: unable to read RDB block 7
[  566.858508][ T9588]  loop2: unable to read partition table
[  566.865512][ T9588] loop2: partition table beyond EOD, truncated
[  566.871771][ T9588] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  566.979637][ T9572] chnl_net:caif_netlink_parms(): no params data found
[  567.053289][ T9140] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 180 seconds
[  567.064269][ T9140] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 180 seconds
[  567.075797][ T9140] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 180 seconds
[  567.087219][ T9140] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 180 seconds
[  567.468398][ T9603] loop2: detected capacity change from 0 to 1764
[  567.983832][ T5804] Bluetooth: hci4: command tx timeout
[  568.240321][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.247829][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.255162][ T9572] bridge_slave_0: entered allmulticast mode
[  568.262814][ T9572] bridge_slave_0: entered promiscuous mode
[  568.274839][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.350838][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.423843][ T9572] bridge_slave_1: entered allmulticast mode
[  568.468986][ T9572] bridge_slave_1: entered promiscuous mode
[  568.517926][ T9614] FAULT_INJECTION: forcing a failure.
[  568.517926][ T9614] name failslab, interval 1, probability 0, space 0, times 0
[  568.602304][ T9614] CPU: 1 PID: 9614 Comm: syz.3.653 Not tainted syzkaller #0
[  568.609678][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  568.619780][ T9614] Call Trace:
[  568.623116][ T9614]  <TASK>
[  568.626096][ T9614]  dump_stack_lvl+0x18c/0x250
[  568.630853][ T9614]  ? show_regs_print_info+0x20/0x20
[  568.636144][ T9614]  ? load_image+0x420/0x420
[  568.640715][ T9614]  ? __might_sleep+0xe0/0xe0
[  568.645452][ T9614]  ? __lock_acquire+0x7d40/0x7d40
[  568.650534][ T9614]  ? prepend_path+0x4b/0x960
[  568.655179][ T9614]  should_fail_ex+0x39d/0x4d0
[  568.659931][ T9614]  should_failslab+0x9/0x20
[  568.664493][ T9614]  slab_pre_alloc_hook+0x59/0x310
[  568.669586][ T9614]  ? __asan_memcpy+0x40/0x70
[  568.674231][ T9614]  ? tomoyo_encode+0x28b/0x540
[  568.679388][ T9614]  ? tomoyo_encode+0x28b/0x540
[  568.684202][ T9614]  __kmem_cache_alloc_node+0x53/0x250
[  568.689636][ T9614]  ? prepend_path+0x4b/0x960
[  568.694727][ T9614]  ? tomoyo_encode+0x28b/0x540
[  568.699537][ T9614]  __kmalloc+0xa4/0x230
[  568.703782][ T9614]  tomoyo_encode+0x28b/0x540
[  568.708433][ T9614]  tomoyo_realpath_from_path+0x592/0x5d0
[  568.714133][ T9614]  tomoyo_path_number_perm+0x248/0x620
[  568.719656][ T9614]  ? tomoyo_path_number_perm+0x217/0x620
[  568.725353][ T9614]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  568.730872][ T9614]  ? ksys_write+0x1c4/0x260
[  568.735823][ T9614]  ? __fget_files+0x28/0x4b0
[  568.740469][ T9614]  ? __fget_files+0x28/0x4b0
[  568.745126][ T9614]  security_file_ioctl+0x70/0xa0
[  568.750151][ T9614]  __se_sys_ioctl+0x48/0x170
[  568.754815][ T9614]  do_syscall_64+0x55/0xa0
[  568.759304][ T9614]  ? clear_bhb_loop+0x40/0x90
[  568.764215][ T9614]  ? clear_bhb_loop+0x40/0x90
[  568.768956][ T9614]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  568.774917][ T9614] RIP: 0033:0x7f4567b9c819
[  568.779382][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.799042][ T9614] RSP: 002b:00007f4568acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  568.807529][ T9614] RAX: ffffffffffffffda RBX: 00007f4567e15fa0 RCX: 00007f4567b9c819
[  568.815910][ T9614] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[  568.823951][ T9614] RBP: 00007f4568acd090 R08: 0000000000000000 R09: 0000000000000000
[  568.831970][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.840029][ T9614] R13: 00007f4567e16038 R14: 00007f4567e15fa0 R15: 00007ffee6e244b8
[  568.848076][ T9614]  </TASK>
[  568.879453][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.893115][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.950241][ T9572] team0: Port device team_slave_0 added
[  568.961126][ T9572] team0: Port device team_slave_1 added
[  569.016553][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.025582][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.235692][ T9614] ERROR: Out of memory at tomoyo_realpath_from_path.
[  569.307966][ T9614] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  569.319564][ T9572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.970930][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.009554][ T9620] input: syz0 as /devices/virtual/input/input9
[  570.016126][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.097868][ T9572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.163282][ T5804] Bluetooth: hci4: command tx timeout
[  570.211344][ T9624] input: syz0 as /devices/virtual/input/input10
[  570.275289][ T9624] FAULT_INJECTION: forcing a failure.
[  570.275289][ T9624] name failslab, interval 1, probability 0, space 0, times 0
[  570.312347][ T9624] CPU: 0 PID: 9624 Comm: syz.3.655 Not tainted syzkaller #0
[  570.319722][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  570.329833][ T9624] Call Trace:
[  570.333165][ T9624]  <TASK>
[  570.336144][ T9624]  dump_stack_lvl+0x18c/0x250
[  570.340895][ T9624]  ? show_regs_print_info+0x20/0x20
[  570.346158][ T9624]  ? load_image+0x420/0x420
[  570.350722][ T9624]  ? __might_sleep+0xe0/0xe0
[  570.355441][ T9624]  ? __lock_acquire+0x7d40/0x7d40
[  570.360507][ T9624]  ? prepend_path+0x4b/0x960
[  570.365137][ T9624]  should_fail_ex+0x39d/0x4d0
[  570.369953][ T9624]  should_failslab+0x9/0x20
[  570.374514][ T9624]  slab_pre_alloc_hook+0x59/0x310
[  570.379578][ T9624]  ? __asan_memcpy+0x40/0x70
[  570.384206][ T9624]  ? tomoyo_encode+0x28b/0x540
[  570.389001][ T9624]  ? tomoyo_encode+0x28b/0x540
[  570.393806][ T9624]  __kmem_cache_alloc_node+0x53/0x250
[  570.399310][ T9624]  ? prepend_path+0x4b/0x960
[  570.403939][ T9624]  ? tomoyo_encode+0x28b/0x540
[  570.408734][ T9624]  __kmalloc+0xa4/0x230
[  570.412937][ T9624]  tomoyo_encode+0x28b/0x540
[  570.417576][ T9624]  tomoyo_realpath_from_path+0x592/0x5d0
[  570.423434][ T9624]  tomoyo_path_number_perm+0x248/0x620
[  570.428938][ T9624]  ? tomoyo_path_number_perm+0x217/0x620
[  570.434625][ T9624]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  570.440390][ T9624]  ? ksys_write+0x1c4/0x260
[  570.444960][ T9624]  ? __fget_files+0x28/0x4b0
[  570.449612][ T9624]  ? __fget_files+0x28/0x4b0
[  570.454269][ T9624]  security_file_ioctl+0x70/0xa0
[  570.459263][ T9624]  __se_sys_ioctl+0x48/0x170
[  570.463906][ T9624]  do_syscall_64+0x55/0xa0
[  570.468352][ T9624]  ? clear_bhb_loop+0x40/0x90
[  570.473066][ T9624]  ? clear_bhb_loop+0x40/0x90
[  570.477779][ T9624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  570.483702][ T9624] RIP: 0033:0x7f4567b9c819
[  570.488178][ T9624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  570.507904][ T9624] RSP: 002b:00007f4568acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  570.516355][ T9624] RAX: ffffffffffffffda RBX: 00007f4567e15fa0 RCX: 00007f4567b9c819
[  570.524355][ T9624] RDX: 0000200000000080 RSI: 0000000040044581 RDI: 0000000000000004
[  570.532366][ T9624] RBP: 00007f4568acd090 R08: 0000000000000000 R09: 0000000000000000
[  570.540370][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.548434][ T9624] R13: 00007f4567e16038 R14: 00007f4567e15fa0 R15: 00007ffee6e244b8
[  570.556458][ T9624]  </TASK>
[  570.651729][ T9572] hsr_slave_0: entered promiscuous mode
[  570.682638][ T9572] hsr_slave_1: entered promiscuous mode
[  570.697873][ T9572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.709748][ T9572] Cannot create hsr debugfs directory
[  570.928870][ T9624] ERROR: Out of memory at tomoyo_realpath_from_path.
[  573.287964][ T5804] Bluetooth: hci4: command tx timeout
[  573.902210][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  574.742340][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  574.782039][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.820055][ T9572] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  574.853440][    T9] usb 2-1: Product: syz
[  574.857712][    T9] usb 2-1: Manufacturer: syz
[  574.896512][    T9] usb 2-1: SerialNumber: syz
[  574.916366][    T9] r8152-cfgselector 2-1: config 0 descriptor??
[  574.963638][ T9572] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  575.046185][ T9572] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  575.120318][ T9572] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  575.130414][ T9673] FAULT_INJECTION: forcing a failure.
[  575.130414][ T9673] name failslab, interval 1, probability 0, space 0, times 0
[  575.172290][ T9673] CPU: 1 PID: 9673 Comm: syz.3.663 Not tainted syzkaller #0
[  575.179723][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  575.189837][ T9673] Call Trace:
[  575.193158][ T9673]  <TASK>
[  575.196123][ T9673]  dump_stack_lvl+0x18c/0x250
[  575.200854][ T9673]  ? show_regs_print_info+0x20/0x20
[  575.206093][ T9673]  ? load_image+0x420/0x420
[  575.210630][ T9673]  ? __might_sleep+0xe0/0xe0
[  575.215254][ T9673]  ? __lock_acquire+0x7d40/0x7d40
[  575.220515][ T9673]  should_fail_ex+0x39d/0x4d0
[  575.225235][ T9673]  should_failslab+0x9/0x20
[  575.229864][ T9673]  slab_pre_alloc_hook+0x59/0x310
[  575.234947][ T9673]  ? __lock_acquire+0x7d40/0x7d40
[  575.240012][ T9673]  kmem_cache_alloc_node+0x60/0x320
[  575.245254][ T9673]  ? __alloc_skb+0x103/0x2c0
[  575.249885][ T9673]  __alloc_skb+0x103/0x2c0
[  575.254336][ T9673]  netlink_sendmsg+0x66a/0xbf0
[  575.259149][ T9673]  ? netlink_getsockopt+0x590/0x590
[  575.264403][ T9673]  ? aa_sock_msg_perm+0x94/0x150
[  575.269385][ T9673]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  575.274748][ T9673]  ? security_socket_sendmsg+0x80/0xa0
[  575.280244][ T9673]  ? netlink_getsockopt+0x590/0x590
[  575.285485][ T9673]  ____sys_sendmsg+0x5ba/0x960
[  575.290299][ T9673]  ? __asan_memset+0x22/0x40
[  575.294935][ T9673]  ? __sys_sendmsg_sock+0x30/0x30
[  575.300000][ T9673]  ? __import_iovec+0x5f2/0x850
[  575.304894][ T9673]  ? import_iovec+0x73/0xa0
[  575.309453][ T9673]  ___sys_sendmsg+0x2a6/0x360
[  575.314169][ T9673]  ? get_pid_task+0x20/0x1e0
[  575.318806][ T9673]  ? __sys_sendmsg+0x2a0/0x2a0
[  575.323627][ T9673]  ? __lock_acquire+0x7d40/0x7d40
[  575.328720][ T9673]  __se_sys_sendmsg+0x1c2/0x2b0
[  575.333699][ T9673]  ? __x64_sys_sendmsg+0x80/0x80
[  575.338696][ T9673]  ? lockdep_hardirqs_on+0x98/0x150
[  575.343952][ T9673]  do_syscall_64+0x55/0xa0
[  575.348428][ T9673]  ? clear_bhb_loop+0x40/0x90
[  575.353145][ T9673]  ? clear_bhb_loop+0x40/0x90
[  575.357957][ T9673]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  575.363904][ T9673] RIP: 0033:0x7f4567b9c819
[  575.368369][ T9673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.388465][ T9673] RSP: 002b:00007f4568acd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  575.397017][ T9673] RAX: ffffffffffffffda RBX: 00007f4567e15fa0 RCX: 00007f4567b9c819
[  575.405025][ T9673] RDX: 0000000020000084 RSI: 00002000000001c0 RDI: 0000000000000003
[  575.413027][ T9673] RBP: 00007f4568acd090 R08: 0000000000000000 R09: 0000000000000000
[  575.421031][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.429226][ T9673] R13: 00007f4567e16038 R14: 00007f4567e15fa0 R15: 00007ffee6e244b8
[  575.437425][ T9673]  </TASK>
[  575.522508][ T5804] Bluetooth: hci4: command tx timeout
[  575.908741][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.962394][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.044274][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[  576.061310][    T9] r8152-cfgselector 2-1: USB disconnect, device number 20
[  576.085911][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.234808][ T9572] 8021q: adding VLAN 0 to HW filter on device team0
[  576.267205][ T9677] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  576.334098][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.342372][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.393658][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.400866][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.556753][ T9572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  576.836914][ T9683] loop1: detected capacity change from 0 to 256
[  577.351324][ T9689] input: syz0 as /devices/virtual/input/input11
[  577.389394][ T9693] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  577.399356][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.240853][ T9699] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  580.392287][ T5867] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  580.408744][ T9572] veth0_vlan: entered promiscuous mode
[  580.474284][ T9572] veth1_vlan: entered promiscuous mode
[  580.605754][ T5867] usb 2-1: no configurations
[  580.633066][ T5867] usb 2-1: can't read configurations, error -22
[  580.650248][ T9572] veth0_macvtap: entered promiscuous mode
[  580.707796][ T9572] veth1_macvtap: entered promiscuous mode
[  580.900966][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.911723][ T5867] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  580.925828][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.956724][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.022150][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.082219][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.102412][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.132810][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.146144][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.353836][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.384671][ T5867] usb 2-1: no configurations
[  581.389945][ T5867] usb 2-1: can't read configurations, error -22
[  581.396512][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.409353][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.422466][ T5867] usb usb2-port1: attempt power cycle
[  581.494159][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.549591][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.580111][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.631673][ T9731] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  581.631692][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.696821][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.732422][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.797764][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.847154][ T9572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.882501][ T9572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.892281][ T5867] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  581.932304][ T9572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.941107][ T9572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.976153][ T5867] usb 2-1: no configurations
[  581.980797][ T5867] usb 2-1: can't read configurations, error -22
[  582.182407][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  582.273565][ T5867] usb 2-1: no configurations
[  582.278243][ T5867] usb 2-1: can't read configurations, error -22
[  582.312094][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.328859][ T5867] usb usb2-port1: unable to enumerate USB device
[  582.354195][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.501406][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.516820][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.836938][ T9736] syz.2.677: attempt to access beyond end of device
[  582.836938][ T9736] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  582.850367][ T9736] efs: cannot read volume header
[  583.012580][ T9020] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  583.090622][ T9738] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  583.214483][ T9020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  583.268041][ T9020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.311878][ T9020] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  583.337872][ T9020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.335909][ T9020] usb 5-1: config 0 descriptor??
[  586.846586][ T9020] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0
[  592.512526][ T5878] usb 5-1: USB disconnect, device number 2
[  592.522870][ T9767] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  593.370734][ T9771] loop2: detected capacity change from 0 to 32768
[  593.449048][ T9771] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  593.829138][ T9790] FAULT_INJECTION: forcing a failure.
[  593.829138][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  593.842301][ T9790] CPU: 0 PID: 9790 Comm: syz.3.689 Not tainted syzkaller #0
[  593.849592][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  593.859657][ T9790] Call Trace:
[  593.862950][ T9790]  <TASK>
[  593.865892][ T9790]  dump_stack_lvl+0x18c/0x250
[  593.870589][ T9790]  ? show_regs_print_info+0x20/0x20
[  593.875801][ T9790]  ? load_image+0x420/0x420
[  593.880325][ T9790]  ? __lock_acquire+0x7d40/0x7d40
[  593.885392][ T9790]  ? snprintf+0xe9/0x140
[  593.889659][ T9790]  should_fail_ex+0x39d/0x4d0
[  593.894359][ T9790]  _copy_to_user+0x2f/0xa0
[  593.898794][ T9790]  simple_read_from_buffer+0xe7/0x150
[  593.904218][ T9790]  proc_fail_nth_read+0x1e8/0x260
[  593.909282][ T9790]  ? proc_fault_inject_write+0x360/0x360
[  593.914946][ T9790]  ? fsnotify_perm+0x271/0x5e0
[  593.919734][ T9790]  ? proc_fault_inject_write+0x360/0x360
[  593.925408][ T9790]  vfs_read+0x28b/0x970
[  593.929616][ T9790]  ? kernel_read+0x1e0/0x1e0
[  593.934230][ T9790]  ? __fget_files+0x28/0x4b0
[  593.938835][ T9790]  ? __fget_files+0x28/0x4b0
[  593.943447][ T9790]  ? __fget_files+0x43d/0x4b0
[  593.948175][ T9790]  ? __fdget_pos+0x2a3/0x330
[  593.952795][ T9790]  ? ksys_read+0x75/0x260
[  593.957158][ T9790]  ksys_read+0x150/0x260
[  593.961442][ T9790]  ? vfs_write+0x990/0x990
[  593.965893][ T9790]  ? lockdep_hardirqs_on+0x98/0x150
[  593.971150][ T9790]  do_syscall_64+0x55/0xa0
[  593.975605][ T9790]  ? clear_bhb_loop+0x40/0x90
[  593.980310][ T9790]  ? clear_bhb_loop+0x40/0x90
[  593.985050][ T9790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  593.990979][ T9790] RIP: 0033:0x7f4567b5d04e
[  593.995437][ T9790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  594.015096][ T9790] RSP: 002b:00007f4568accfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  594.023573][ T9790] RAX: ffffffffffffffda RBX: 00007f4568acd6c0 RCX: 00007f4567b5d04e
[  594.031592][ T9790] RDX: 000000000000000f RSI: 00007f4568acd0a0 RDI: 0000000000000005
[  594.039630][ T9790] RBP: 00007f4568acd090 R08: 0000000000000000 R09: 0000000000000000
[  594.047653][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  594.055658][ T9790] R13: 00007f4567e16038 R14: 00007f4567e15fa0 R15: 00007ffee6e244b8
[  594.063686][ T9790]  </TASK>
[  595.307048][ T9771] XFS (loop2): Ending clean mount
[  595.427150][ T9796] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  596.102174][   T27] audit: type=1800 audit(1776056807.962:24): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.686" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  596.739833][ T9808] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  597.504852][ T9140] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 210 seconds
[  597.515770][ T9140] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 210 seconds
[  597.526877][ T9140] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 210 seconds
[  597.537890][ T9140] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 210 seconds
[  597.553158][   T27] audit: type=1800 audit(1776056810.172:25): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.686" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  597.940402][ T5799] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  601.332806][ T9829] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  601.812581][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  602.068292][    T9] usb 5-1: config index 0 descriptor too short (expected 93, got 72)
[  602.154794][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  602.179502][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.227510][    T9] usb 5-1: Product: syz
[  602.231766][    T9] usb 5-1: Manufacturer: syz
[  602.272297][    T9] usb 5-1: SerialNumber: syz
[  602.304957][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  602.409470][ T5859] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  604.942785][ T9020] usb 5-1: USB disconnect, device number 3
[  606.661414][ T5859] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  606.669269][ T5859] ath9k_htc: Failed to initialize the device
[  606.702215][ T9020] usb 5-1: ath9k_htc: USB layer deinitialized
[  608.139735][ T9853] loop2: detected capacity change from 0 to 1764
[  608.620017][ T9846] loop4: detected capacity change from 0 to 32768
[  608.763801][ T9848] loop1: detected capacity change from 0 to 32768
[  608.995362][ T9846] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  609.073345][ T9848] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  609.641116][ T9846] XFS (loop4): Ending clean mount
[  609.679342][ T9848] XFS (loop1): Ending clean mount
[  609.757857][   T27] audit: type=1800 audit(1776056822.362:26): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.704" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  609.806548][ T9877] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  609.889623][   T27] audit: type=1800 audit(1776056822.502:27): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.705" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  612.761757][   T27] audit: type=1800 audit(1776056825.372:28): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.704" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  612.842685][   T27] audit: type=1800 audit(1776056825.462:29): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.705" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  615.272834][ T5798] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  615.308418][ T9572] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  615.439560][ T9902] loop3: detected capacity change from 0 to 4096
[  615.529437][ T9902] ntfs: volume version 3.1.
[  615.564807][ T9902] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  615.574806][ T9902] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota.
[  615.584482][ T9902] ntfs: (device loop3): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  615.595956][ T9902] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  615.606391][ T9902] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  615.616647][ T9902] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  615.698035][ T9902] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1.  You might want to try to use the mount option nls=utf8.
[  615.717080][ T9902] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  616.136380][ T9904] loop3: detected capacity change from 0 to 1764
[  624.663009][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  624.669394][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  625.575220][ T9937] loop2: detected capacity change from 0 to 32768
[  625.680248][ T9937] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  625.796417][ T9969] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  626.009940][ T9937] XFS (loop2): Ending clean mount
[  626.041454][   T27] audit: type=1800 audit(1776056838.652:30): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.720" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  626.717328][ T9979] FAULT_INJECTION: forcing a failure.
[  626.717328][ T9979] name failslab, interval 1, probability 0, space 0, times 0
[  626.731727][ T9979] CPU: 0 PID: 9979 Comm: syz.1.722 Not tainted syzkaller #0
[  626.739070][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  626.749201][ T9979] Call Trace:
[  626.752612][ T9979]  <TASK>
[  626.755618][ T9979]  dump_stack_lvl+0x18c/0x250
[  626.760359][ T9979]  ? show_regs_print_info+0x20/0x20
[  626.765607][ T9979]  ? load_image+0x420/0x420
[  626.770160][ T9979]  ? __lock_acquire+0x7d40/0x7d40
[  626.775239][ T9979]  ? lock_chain_count+0x20/0x20
[  626.780135][ T9979]  should_fail_ex+0x39d/0x4d0
[  626.784875][ T9979]  should_failslab+0x9/0x20
[  626.789426][ T9979]  slab_pre_alloc_hook+0x59/0x310
[  626.794507][ T9979]  kmem_cache_alloc_lru+0x4d/0x2d0
[  626.799669][ T9979]  ? sock_alloc_inode+0x28/0xc0
[  626.804577][ T9979]  sock_alloc_inode+0x28/0xc0
[  626.809299][ T9979]  ? sockfs_init_fs_context+0xb0/0xb0
[  626.814725][ T9979]  new_inode_pseudo+0x63/0x1d0
[  626.819567][ T9979]  __sock_create+0x12d/0x940
[  626.824220][ T9979]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  626.830254][ T9979]  __sys_socket+0xd7/0x1a0
[  626.834734][ T9979]  __x64_sys_socket+0x7a/0x90
[  626.839484][ T9979]  do_syscall_64+0x55/0xa0
[  626.843941][ T9979]  ? clear_bhb_loop+0x40/0x90
[  626.848668][ T9979]  ? clear_bhb_loop+0x40/0x90
[  626.853399][ T9979]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  626.859346][ T9979] RIP: 0033:0x7f843179e087
[  626.863810][ T9979] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.883467][ T9979] RSP: 002b:00007f842f9f4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  626.891936][ T9979] RAX: ffffffffffffffda RBX: 00007f8431a16090 RCX: 00007f843179e087
[  626.899960][ T9979] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  626.907984][ T9979] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  626.915997][ T9979] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000001
[  626.924014][ T9979] R13: 00007f8431a16128 R14: 00007f8431a16090 R15: 00007ffd10fa6378
[  626.932051][ T9979]  </TASK>
[  626.941335][ T9979] socket: no more sockets
[  627.994030][ T9140] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 240 seconds
[  628.004867][ T9140] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 240 seconds
[  628.015969][ T9140] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 240 seconds
[  628.027074][ T9140] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 240 seconds
[  628.063288][   T27] audit: type=1800 audit(1776056840.682:31): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.720" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  628.287460][ T5799] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  631.615143][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'.
[  631.662280][ T5867] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  631.806855][ T9999] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  633.307154][ T5867] usb 5-1: device descriptor read/64, error -71
[  633.908448][ T5867] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  634.102342][ T5867] usb 5-1: device descriptor read/64, error -71
[  634.382387][ T5867] usb usb5-port1: attempt power cycle
[  636.086893][T10016] loop4: detected capacity change from 0 to 8192
[  636.105297][T10019] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  636.129173][T10016] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  636.142907][T10016] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  636.152376][T10016] REISERFS (device loop4): using ordered data mode
[  636.160384][T10016] reiserfs: using flush barriers
[  636.250373][T10016] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  636.343055][T10016] REISERFS (device loop4): checking transaction log (loop4)
[  636.357421][T10016] REISERFS (device loop4): Using r5 hash to sort names
[  636.398911][T10016] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  638.682459][ T5867] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  644.077046][T10077] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  644.312208][ T5867] usb 2-1: device descriptor read/64, error -71
[  646.084824][ T5867] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  646.288577][ T5867] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  646.790913][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  646.825388][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  646.894832][ T5867] usb 2-1: SerialNumber: syz
[  646.985955][ T5867] usb 2-1: can't set config #1, error -71
[  647.033534][ T5867] usb 2-1: USB disconnect, device number 26
[  647.492421][ T9020] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  647.777169][ T9020] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  647.801178][ T9020] usb 3-1: config 0 has no interface number 0
[  647.912611][ T9020] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  648.046126][ T9020] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  648.155008][ T9020] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  648.284078][ T9020] usb 3-1: config 0 interface 2 has no altsetting 0
[  648.476670][ T9020] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[  648.562287][ T9020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.630481][ T9020] usb 3-1: Product: syz
[  648.639203][ T9020] usb 3-1: Manufacturer: syz
[  648.648847][ T9020] usb 3-1: SerialNumber: syz
[  648.678527][ T9020] usb 3-1: config 0 descriptor??
[  648.714339][T10087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  648.762456][T10087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  649.011814][ T9020] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  649.286591][ T9020] usb 3-1: USB disconnect, device number 9
[  649.410452][T10126] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  650.132423][ T5867] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  650.146346][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  651.531154][T10130] loop4: detected capacity change from 0 to 32768
[  652.039781][T10130] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  652.314633][T10140] loop1: detected capacity change from 0 to 256
[  652.372306][T10142] loop3: detected capacity change from 0 to 4096
[  652.454801][T10142] ntfs: volume version 3.1.
[  652.467915][T10142] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  652.478033][T10142] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota.
[  652.487807][T10142] ntfs: (device loop3): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  652.499097][T10142] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  652.509132][T10142] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  652.519239][T10142] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  652.613092][T10130] XFS (loop4): Starting recovery (logdev: internal)
[  652.639902][T10130] XFS (loop4): Ending recovery (logdev: internal)
[  652.833803][T10140] exfat: Deprecated parameter 'utf8'
[  652.840355][T10142] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1.  You might want to try to use the mount option nls=utf8.
[  652.859078][T10142] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  652.939464][ T9572] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  654.252958][T10140] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  654.386252][T10148] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  654.618773][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short
[  654.676501][ T5867] usb 2-1: unable to read config index 0 descriptor/start: -71
[  654.722310][ T5867] usb 2-1: can't read configurations, error -71
[  655.028281][T10152] loop3: detected capacity change from 0 to 1764
[  658.742450][ T9140] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 270 seconds
[  658.753714][ T9140] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 270 seconds
[  658.767397][ T9140] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 270 seconds
[  658.780158][ T9140] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 270 seconds
[  663.033406][T10219] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  664.262438][  T788] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  666.128191][T10223] loop3: detected capacity change from 0 to 256
[  666.230814][T10223] exfat: Deprecated parameter 'utf8'
[  668.294049][T10223] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  668.898099][  T788] usb 4-1: unable to get BOS descriptor or descriptor too short
[  668.956793][  T788] usb 4-1: unable to read config index 0 descriptor/start: -71
[  668.988023][  T788] usb 4-1: can't read configurations, error -71
[  670.531674][T10248] FAULT_INJECTION: forcing a failure.
[  670.531674][T10248] name failslab, interval 1, probability 0, space 0, times 0
[  670.562439][T10248] CPU: 1 PID: 10248 Comm: syz.2.769 Not tainted syzkaller #0
[  670.569907][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  670.580122][T10248] Call Trace:
[  670.583447][T10248]  <TASK>
[  670.586432][T10248]  dump_stack_lvl+0x18c/0x250
[  670.591170][T10248]  ? show_regs_print_info+0x20/0x20
[  670.596439][T10248]  ? load_image+0x420/0x420
[  670.600996][T10248]  ? __might_sleep+0xe0/0xe0
[  670.605652][T10248]  ? __lock_acquire+0x7d40/0x7d40
[  670.610729][T10248]  ? __lock_acquire+0x1273/0x7d40
[  670.615811][T10248]  should_fail_ex+0x39d/0x4d0
[  670.620546][T10248]  should_failslab+0x9/0x20
[  670.625110][T10248]  slab_pre_alloc_hook+0x59/0x310
[  670.630204][T10248]  kmem_cache_alloc_node+0x60/0x320
[  670.635467][T10248]  ? __alloc_skb+0x103/0x2c0
[  670.640123][T10248]  __alloc_skb+0x103/0x2c0
[  670.644588][T10248]  alloc_skb_with_frags+0xca/0x7b0
[  670.649779][T10248]  sock_alloc_send_pskb+0x883/0x9a0
[  670.655172][T10248]  ? sock_kzfree_s+0x50/0x50
[  670.659821][T10248]  ? dev_get_by_index+0x22/0x2d0
[  670.664804][T10248]  ? dev_get_by_index+0x22/0x2d0
[  670.669796][T10248]  packet_sendmsg+0x316e/0x4d70
[  670.674733][T10248]  ? __might_sleep+0xe0/0xe0
[  670.679392][T10248]  ? aa_sk_perm+0x83c/0x970
[  670.683969][T10248]  ? packet_getsockopt+0xad0/0xad0
[  670.689162][T10248]  ? __might_fault+0xaa/0x120
[  670.693893][T10248]  ? aa_sock_msg_perm+0x94/0x150
[  670.698889][T10248]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  670.704281][T10248]  ? security_socket_sendmsg+0x80/0xa0
[  670.710104][T10248]  __sys_sendto+0x4a9/0x6b0
[  670.714750][T10248]  ? __ia32_sys_getpeername+0x90/0x90
[  670.720209][T10248]  ? __fget_files+0x43d/0x4b0
[  670.725054][T10248]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  670.731095][T10248]  ? lock_chain_count+0x20/0x20
[  670.736089][T10248]  __x64_sys_sendto+0xde/0xf0
[  670.740815][T10248]  do_syscall_64+0x55/0xa0
[  670.745288][T10248]  ? clear_bhb_loop+0x40/0x90
[  670.750022][T10248]  ? clear_bhb_loop+0x40/0x90
[  670.754751][T10248]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.760701][T10248] RIP: 0033:0x7f6f7d39c819
[  670.765166][T10248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.784832][T10248] RSP: 002b:00007f6f7e21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  670.793309][T10248] RAX: ffffffffffffffda RBX: 00007f6f7d615fa0 RCX: 00007f6f7d39c819
[  670.801331][T10248] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000003
[  670.809391][T10248] RBP: 00007f6f7e21e090 R08: 0000200000000200 R09: 0000000000000014
[  670.817424][T10248] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  670.825444][T10248] R13: 00007f6f7d616038 R14: 00007f6f7d615fa0 R15: 00007fffc9dabe78
[  670.833490][T10248]  </TASK>
[  672.561551][T10261] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  677.679667][ T5140] udevd[5140]: worker [7223] /devices/virtual/block/nbd0 timeout; kill it
[  677.823518][ T5140] udevd[5140]: seq 11202 '/devices/virtual/block/nbd0' killed
[  681.380900][T10342] loop4: detected capacity change from 0 to 131072
[  681.432414][T10342] F2FS-fs (loop4): Test dummy encryption mode enabled
[  681.448949][T10342] F2FS-fs (loop4): invalid crc value
[  681.460635][T10342] F2FS-fs (loop4): Found nat_bits in checkpoint
[  681.534907][T10342] F2FS-fs (loop4): Start checkpoint disabled!
[  681.567549][T10342] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  681.576537][T10342] FAULT_INJECTION: forcing a failure.
[  681.576537][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.589692][T10342] CPU: 1 PID: 10342 Comm: syz.4.780 Not tainted syzkaller #0
[  681.597110][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  681.607182][T10342] Call Trace:
[  681.610503][T10342]  <TASK>
[  681.613444][T10342]  dump_stack_lvl+0x18c/0x250
[  681.618164][T10342]  ? show_regs_print_info+0x20/0x20
[  681.623385][T10342]  ? load_image+0x420/0x420
[  681.627947][T10342]  ? __might_fault+0xaa/0x120
[  681.632646][T10342]  ? __lock_acquire+0x7d40/0x7d40
[  681.637696][T10342]  ? __kasan_slab_alloc+0x6c/0x80
[  681.642868][T10342]  should_fail_ex+0x39d/0x4d0
[  681.647604][T10342]  strncpy_from_user+0x36/0x2d0
[  681.652521][T10342]  getname_flags+0xf6/0x500
[  681.657066][T10342]  __x64_sys_mknod+0x7b/0xa0
[  681.661683][T10342]  do_syscall_64+0x55/0xa0
[  681.666126][T10342]  ? clear_bhb_loop+0x40/0x90
[  681.670830][T10342]  ? clear_bhb_loop+0x40/0x90
[  681.675541][T10342]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.681460][T10342] RIP: 0033:0x7f437b39c819
[  681.685906][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.705544][T10342] RSP: 002b:00007f437c1e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  681.713989][T10342] RAX: ffffffffffffffda RBX: 00007f437b615fa0 RCX: 00007f437b39c819
[  681.721989][T10342] RDX: 0000000000000708 RSI: 0000000000008fff RDI: 0000200000000140
[  681.729987][T10342] RBP: 00007f437c1e9090 R08: 0000000000000000 R09: 0000000000000000
[  681.738077][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.746082][T10342] R13: 00007f437b616038 R14: 00007f437b615fa0 R15: 00007ffe84c37ed8
[  681.754205][T10342]  </TASK>
[  681.774922][   T23] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  682.754668][T10352] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28)
[  682.811976][T10355] loop1: detected capacity change from 0 to 256
[  683.077340][T10355] exfat: Deprecated parameter 'utf8'
[  683.294585][T10355] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  686.379010][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  686.390960][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  686.755151][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  688.548106][   T23] usb 2-1: unable to read config index 0 descriptor/start: -71
[  688.556428][   T23] usb 2-1: can't read configurations, error -71
[  688.592247][T10388] Bluetooth: hci4: command 0x0406 tx timeout
[  689.372274][ T9140] block nbd0: Possible stuck request ffff888022278000: control (read@0,1024B). Runtime 300 seconds
[  689.383411][ T9140] block nbd0: Possible stuck request ffff888022278200: control (read@1024,1024B). Runtime 300 seconds
[  689.394947][ T9140] block nbd0: Possible stuck request ffff888022278400: control (read@2048,1024B). Runtime 300 seconds
[  689.406384][ T9140] block nbd0: Possible stuck request ffff888022278600: control (read@3072,1024B). Runtime 300 seconds
[  694.771666][   T29] INFO: task syz.0.616:9476 blocked for more than 144 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  694.812231][   T29]       Not tainted syzkaller #0
[  694.844906][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  694.909749][   T29] task:syz.0.616       state:D stack:27880 pid:9476  ppid:5797   flags:0x00004004
[  694.967718][   T29] Call Trace:
[  694.984780][   T29]  <TASK>
[  695.035189][   T29]  __schedule+0x1553/0x45a0
[  695.039800][   T29]  ? asan.module_dtor+0x20/0x20
[  695.088478][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  695.152272][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  695.157857][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  695.232638][   T29]  schedule+0xbd/0x170
[  695.236839][   T29]  schedule_preempt_disabled+0x13/0x20
[  695.306058][   T29]  __mutex_lock+0x6a9/0xcc0
[  695.310661][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  695.412562][   T29]  ? blkdev_get_by_dev+0x121/0x600
[  695.417796][   T29]  ? mutex_lock_nested+0x20/0x20
[  695.512135][   T29]  ? iput+0x343/0x920
[  695.516216][   T29]  ? ilookup+0x1c4/0x200
[  695.556594][   T29]  ? disk_block_events+0xa7/0x120
[  695.632446][   T29]  ? blkdev_get_by_dev+0xf7/0x600
[  695.637576][   T29]  blkdev_get_by_dev+0x121/0x600
[  695.765281][   T29]  blkdev_open+0x152/0x360
[  695.802146][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[  695.806930][   T29]  do_dentry_open+0x8c6/0x1500
[  695.811785][   T29]  path_openat+0x27f1/0x3230
[  695.897776][   T29]  ? do_sys_openat2+0xda/0x1d0
[  695.917712][   T29]  ? verify_lock_unused+0x140/0x140
[  695.962555][   T29]  ? do_filp_open+0x430/0x430
[  695.967339][   T29]  ? __virt_addr_valid+0x18c/0x540
[  696.012187][   T29]  do_filp_open+0x1f5/0x430
[  696.016757][   T29]  ? vfs_tmpfile+0x490/0x490
[  696.021376][   T29]  ? _raw_spin_unlock+0x28/0x40
[  696.052205][   T29]  ? alloc_fd+0x58f/0x630
[  696.064023][   T29]  do_sys_openat2+0x134/0x1d0
[  696.068817][   T29]  ? do_sys_open+0xe0/0xe0
[  696.100527][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  696.110470][   T29]  ? lock_chain_count+0x20/0x20
[  696.132148][   T29]  ? lock_chain_count+0x20/0x20
[  696.137096][   T29]  __x64_sys_openat+0x139/0x160
[  696.142008][   T29]  do_syscall_64+0x55/0xa0
[  696.162259][   T29]  ? clear_bhb_loop+0x40/0x90
[  696.167126][   T29]  ? clear_bhb_loop+0x40/0x90
[  696.171863][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  696.202181][   T29] RIP: 0033:0x7f22d6b5d04e
[  696.206695][   T29] RSP: 002b:00007f22d7a94b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  696.221078][   T29] RAX: ffffffffffffffda RBX: 00007f22d7a956c0 RCX: 00007f22d6b5d04e
[  696.242156][   T29] RDX: 0000000000000b00 RSI: 00007f22d7a94c00 RDI: ffffffffffffff9c
[  696.262269][   T29] RBP: 00007f22d7a94c00 R08: 0000000000000000 R09: 0000000000000000
[  696.272208][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  696.292252][   T29] R13: 00007f22d6e16038 R14: 00007f22d6e15fa0 R15: 00007ffeecc0dc98
[  696.300308][   T29]  </TASK>
[  696.325562][   T29] 
[  696.325562][   T29] Showing all locks held in the system:
[  696.339820][   T29] 1 lock held by khungtaskd/29:
[  696.432140][   T29]  #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  696.452185][   T29] 3 locks held by klogd/5129:
[  696.456949][   T29] 2 locks held by getty/5528:
[  696.461711][   T29]  #0: ffff88814ca030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  696.479714][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  696.502367][   T29] 1 lock held by syz-executor/5796:
[  696.507648][   T29] 2 locks held by kworker/0:5/5859:
[  696.522125][   T29]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  696.543613][   T29]  #1: ffffc900049efd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  696.562212][   T29] 2 locks held by kworker/0:6/5878:
[  696.567470][   T29]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  696.605477][   T29]  #1: ffffc90004a8fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  696.637845][   T29] 3 locks held by kworker/u4:30/6037:
[  696.644244][   T29]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  696.656483][   T29]  #1: ffffc9000550fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  696.691651][   T29]  #2: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  696.704653][   T29] 1 lock held by udevd/7223:
[  696.709382][   T29]  #0: ffff8881417654c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  696.720302][   T29] 2 locks held by kworker/1:6/9020:
[  696.725852][   T29] 1 lock held by syz.0.616/9476:
[  696.730822][   T29]  #0: ffff8881417654c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  696.752265][   T29] 1 lock held by syz.3.759/10215:
[  696.757356][   T29] 1 lock held by syz.1.787/10413:
[  696.762869][   T29]  #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0
[  696.783176][   T29] 1 lock held by syz.4.789/10422:
[  696.788260][   T29]  #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0
[  696.822129][   T29] 2 locks held by syz.1.790/10424:
[  696.827313][   T29]  #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0
[  696.852174][   T29]  #1: ffffffff8d137a78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  696.872172][   T29] 1 lock held by syz.4.791/10430:
[  696.877266][   T29]  #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[  696.912134][   T29] 2 locks held by dhcpcd/10460:
[  696.917072][   T29]  #0: ffff888076cf0820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230
[  696.952180][   T29]  #1: ffffffff8d137a78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  696.972193][   T29] 
[  696.974580][   T29] =============================================
[  696.974580][   T29] 
[  697.618407][   T29] NMI backtrace for cpu 1
[  697.622827][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  697.630049][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  697.640127][   T29] Call Trace:
[  697.643415][   T29]  <TASK>
[  697.646356][   T29]  dump_stack_lvl+0x18c/0x250
[  697.651057][   T29]  ? show_regs_print_info+0x20/0x20
[  697.656286][   T29]  ? load_image+0x420/0x420
[  697.660813][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  697.665780][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  697.671943][   T29]  ? _printk+0xde/0x130
[  697.676138][   T29]  ? load_image+0x420/0x420
[  697.680697][   T29]  ? load_image+0x420/0x420
[  697.685254][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  697.691380][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  697.697404][   T29]  watchdog+0xf3d/0xf80
[  697.701598][   T29]  ? watchdog+0x1e1/0xf80
[  697.706003][   T29]  kthread+0x2fa/0x390
[  697.710102][   T29]  ? hungtask_pm_notify+0x90/0x90
[  697.715157][   T29]  ? kthread_blkcg+0xd0/0xd0
[  697.719776][   T29]  ret_from_fork+0x48/0x80
[  697.724266][   T29]  ? kthread_blkcg+0xd0/0xd0
[  697.728884][   T29]  ret_from_fork_asm+0x11/0x20
[  697.733702][   T29]  </TASK>
[  697.737858][   T29] Sending NMI from CPU 1 to CPUs 0:
[  697.743266][    C0] NMI backtrace for cpu 0
[  697.743277][    C0] CPU: 0 PID: 5799 Comm: syz-executor Not tainted syzkaller #0
[  697.743294][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  697.743304][    C0] RIP: 0010:debug_check_no_obj_freed+0x1ce/0x540
[  697.743336][    C0] Code: 00 00 48 ba 00 00 00 00 00 fc ff df ff c3 48 8b 04 24 48 89 c5 48 85 c0 0f 84 40 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 <74> 12 48 89 ef e8 68 08 ae fd 48 ba 00 00 00 00 00 fc ff df 48 8b
[  697.743351][    C0] RSP: 0018:ffffc9000462f7c8 EFLAGS: 00000046
[  697.743366][    C0] RAX: 1ffffffff2eb1cd7 RBX: 0000000000000000 RCX: 0000000000000001
[  697.743377][    C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000462f6a0
[  697.743389][    C0] RBP: ffff88814d838c78 R08: 0000000000000003 R09: 0000000000000004
[  697.743400][    C0] R10: dffffc0000000000 R11: fffff520008c5ed4 R12: ffff888068859000
[  697.743413][    C0] R13: ffff888068858000 R14: 1ffff11029b0718f R15: 0000000000000001
[  697.743425][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  697.743439][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  697.743450][    C0] CR2: 000055ff918c74b0 CR3: 000000007791c000 CR4: 00000000003506f0
[  697.743465][    C0] Call Trace:
[  697.743471][    C0]  <TASK>
[  697.743483][    C0]  free_unref_page_prepare+0x1da/0x8c0
[  697.743515][    C0]  free_unref_page+0x32/0x2e0
[  697.743543][    C0]  vfree+0x1a6/0x320
[  697.743566][    C0]  ? kcov_open+0x90/0x90
[  697.743587][    C0]  kcov_close+0x2b/0x50
[  697.743606][    C0]  __fput+0x234/0x970
[  697.743628][    C0]  task_work_run+0x1d4/0x260
[  697.743653][    C0]  ? task_work_cancel+0x220/0x220
[  697.743677][    C0]  ? do_exit+0x955/0x2460
[  697.743701][    C0]  ? kmem_cache_free+0xf8/0x270
[  697.743728][    C0]  do_exit+0x95a/0x2460
[  697.743765][    C0]  ? put_task_struct+0xc0/0xc0
[  697.743792][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  697.743811][    C0]  ? get_signal+0x1068/0x13f0
[  697.743827][    C0]  ? lock_chain_count+0x20/0x20
[  697.743846][    C0]  ? _raw_spin_lock_irq+0xbb/0xf0
[  697.743868][    C0]  do_group_exit+0x21b/0x2d0
[  697.743893][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  697.743915][    C0]  get_signal+0x12fc/0x13f0
[  697.743941][    C0]  arch_do_signal_or_restart+0xc2/0x800
[  697.743969][    C0]  ? do_unlinkat+0x529/0x590
[  697.743985][    C0]  ? get_sigframe_size+0x20/0x20
[  697.744017][    C0]  ? fsnotify_link_count+0xf0/0xf0
[  697.744035][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  697.744061][    C0]  exit_to_user_mode_loop+0x70/0x110
[  697.744085][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  697.744110][    C0]  syscall_exit_to_user_mode+0x1a/0x50
[  697.744130][    C0]  do_syscall_64+0x61/0xa0
[  697.744145][    C0]  ? clear_bhb_loop+0x40/0x90
[  697.744165][    C0]  ? clear_bhb_loop+0x40/0x90
[  697.744187][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.744208][    C0] RIP: 0033:0x7f6f7d39b907
[  697.744233][    C0] Code: Unable to access opcode bytes at 0x7f6f7d39b8dd.
[  697.744240][    C0] RSP: 002b:00007fffc9dab0e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  697.744256][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6f7d39b907
[  697.744266][    C0] RDX: 00007fffc9dab110 RSI: 00007fffc9dab1a0 RDI: 00007fffc9dab1a0
[  697.744278][    C0] RBP: 00007fffc9dab1a0 R08: 00007fffc9dac1a0 R09: 00000000ffffffff
[  697.744288][    C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffc9dac230
[  697.744299][    C0] R13: 00007f6f7d432048 R14: 00000000000a7ab4 R15: 00007fffc9dac270
[  697.744318][    C0]  </TASK>
[  698.630154][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  698.637097][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  698.644338][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  698.654458][   T29] Call Trace:
[  698.657789][   T29]  <TASK>
[  698.660764][   T29]  dump_stack_lvl+0x18c/0x250
[  698.665520][   T29]  ? show_regs_print_info+0x20/0x20
[  698.670774][   T29]  ? load_image+0x420/0x420
[  698.675499][   T29]  panic+0x2dc/0x730
[  698.679442][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  698.685146][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  698.689760][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  698.695398][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  698.701607][   T29]  watchdog+0xf7c/0xf80
[  698.705888][   T29]  ? watchdog+0x1e1/0xf80
[  698.710245][   T29]  kthread+0x2fa/0x390
[  698.714375][   T29]  ? hungtask_pm_notify+0x90/0x90
[  698.719436][   T29]  ? kthread_blkcg+0xd0/0xd0
[  698.724137][   T29]  ret_from_fork+0x48/0x80
[  698.728589][   T29]  ? kthread_blkcg+0xd0/0xd0
[  698.733214][   T29]  ret_from_fork_asm+0x11/0x20
[  698.738031][   T29]  </TASK>
[  698.741772][   T29] Kernel Offset: disabled
[  698.746116][   T29] Rebooting in 86400 seconds..