last executing test programs:

2m57.997462342s ago: executing program 3 (id=17):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000002c0)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0xc0, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800423600b200640000061190787f000001ac1414319406718d3c15441c9253e000000200000007ac1e01010000000200000000800000008612008501000003cb000972672d306b48d84e204e24006a907804000000090000000700000000000000570a27df428124f58342d4fd36d20904918ed03506201da7ef35a891bddffa30672955317f2839e3dd5e8ddd9cb181ce1976a93f89dac7d6866c8622f7373ecd3564bf11ab1ec7d3d0402089c03ecab2fbba"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x10891, &(0x7f00000001c0)={[{@flushoncommit}, {@nodatacow}, {@datasum}, {@noenospc_debug}, {@treelog}, {@nobarrier}, {@barrier}, {@datasum}, {@ref_verify}, {@rescue={'rescue', 0x3d, 'ignoredatacsums'}}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@subvolid={'subvolid', 0x3d, 0x9}}, {@discard_async}, {@commit={'commit', 0x3d, 0x5278}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x1e9, &(0x7f0000000980)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}})
setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11, 0x10012, r6, 0x654b3000)
openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})

2m48.923640567s ago: executing program 3 (id=28):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000003000000000000085a374000080000009cfb33f9abca523d950000000000000000000000ed22f7642802de18879b61111ff3626f8483b76b1ca7994d47c99be3d3085e9dd22f40eae40dd0f6d54058ff806a8999d500f80a341fce10"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socket(0x10, 0x2, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xfffffffffffffffd, 0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x61)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_open_dev$vcsu(0x0, 0xffff, 0x400)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$sock_buf(r8, 0x1, 0x52, &(0x7f0000000080)=""/5, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0x401}}, 0x1, 0x7ff}, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0x0, &(0x7f0000000440))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

2m43.419946773s ago: executing program 3 (id=32):
r0 = msgget$private(0x0, 0x420)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/235)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000140)=""/160)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x5, 0xd40, 0xf927}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x4, 0x2, 0xe, 0xb}, {0x3, 0x3, 0xc}], 0x10, 0x1cf69297}, 0x94)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000480)=r2)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r2, r3}, 0xc)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', <r5=>0x0, 0x20, 0x7, 0x9, 0x4, {{0x1d, 0x4, 0x0, 0x38, 0x74, 0x64, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp_prespec={0x44, 0x2c, 0xe0, 0x3, 0x7, [{@empty, 0x3}, {@multicast1, 0xfffffffb}, {@empty, 0x10000}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x9c, 0x1, 0xd, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@multicast2}, {@rand_addr=0x64010102, 0x9}, {@local, 0x401}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000640)={'gretap0\x00', <r6=>r5, 0x700, 0x20, 0x4, 0x8, {{0xa, 0x4, 0x3, 0x5, 0x28, 0x68, 0x0, 0x10, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@ssrr={0x89, 0x13, 0x10, [@loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000840)=0x8000)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', 0x0, r3, 0x3, 0x4, 0x1}, 0x50)
gettid()
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x381800, 0x0)
ioctl$BLKRESETZONE(r10, 0x40101283, &(0x7f0000000940)={0x1, 0x9})
syz_open_dev$vbi(&(0x7f0000000980), 0x1, 0x2)
ioctl$SNDCTL_DSP_GETCAPS(r3, 0x8004500f, &(0x7f00000009c0))
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x1a, &(0x7f0000000a00)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ldst={0x1, 0x1, 0x1, 0x8, 0x0, 0x8, 0x8}, @ldst={0x0, 0x3, 0x0, 0x5, 0x6, 0x40, 0x8}], &(0x7f0000000b00)='syzkaller\x00', 0x1, 0x13, &(0x7f0000000b40)=""/19, 0x41100, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x8, 0x7fffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[r9], &(0x7f0000000c40)=[{0x4, 0x1, 0xf, 0x7}, {0x5, 0x2, 0x4, 0x1}, {0x4, 0x4, 0x2, 0x3}], 0x10, 0x6}, 0x94)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x14, &(0x7f0000000d40)=@raw=[@alu={0x4, 0x1, 0xa, 0x1, 0xf, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x8b}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfa1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000e00)='syzkaller\x00', 0xc2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000e40)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[r9, r9], &(0x7f0000000f00)=[{0x1, 0x5, 0xb, 0x6}, {0x2, 0x4, 0x9, 0x9}, {0x3, 0x3, 0x6, 0x3}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r11, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000001040)=[0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r13=>0x0, 0x31, &(0x7f00000010c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x34, 0x8, 0x8, &(0x7f0000001180)}}, 0x10)
r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001300)={r12, r5, 0x25, 0x4, @val=@target_btf_id=r13}, 0x14)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000001340)=0x10, 0x4)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001380)=""/243)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xd8, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x64}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc0041}, 0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000001640)={'rose0\x00', 0x1})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001700)={{r14}, 0x0, 0x0, @inherit={0x50, &(0x7f0000001680)={0x0, 0x1, 0x4, 0x7, {0x8, 0x200, 0x9, 0x7, 0xfffffffffffffffd}, [0x7fff]}}, @subvolid=0x1})

2m43.004921321s ago: executing program 3 (id=34):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004280)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000004380)=0xe8)
getgroups(0x1, &(0x7f00000043c0)=[<r1=>0xee01])
r2 = syz_open_dev$video4linux(&(0x7f0000004400), 0x7, 0x400080)
r3 = syz_open_dev$radio(&(0x7f0000004440), 0x3, 0x2)
r4 = dup(0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004480)='pids.current\x00', 0x0, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004680)=@bpf_lsm={0x1d, 0x17, &(0x7f00000044c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x88}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x2, 0x6, 0x0, 0x8, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000045c0)={0x3, 0x1, 0x80000001, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000004600)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000004640)=[{0x2, 0x1, 0x2}], 0x10, 0x9}, 0x94)
r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
r9 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)={0x40000000})
ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)=0xb3a8)
write$char_usb(r8, &(0x7f0000000040)="e2", 0x2778)
r10 = socket$key(0xf, 0x3, 0x2)
r11 = socket$phonet(0x23, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000004740)={{0x1, 0x1, 0x18, <r12=>0xffffffffffffffff, {0x4f28}}, './file0\x00'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004780)=<r13=>0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000047c0)=<r14=>0x0)
r15 = socket$inet_icmp(0x2, 0x2, 0x1)
r16 = inotify_init1(0x80800)
inotify_add_watch(r16, &(0x7f0000000040)='.\x00', 0xc0000484)
r17 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = socket$inet_icmp(0x2, 0x2, 0x1)
r19 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f00000008c0)="7b4f523280b5bfb4935cbad616e34f9aa4f6d13b19ee186e1d2e7fc49fe40d9a98ced027b076f73511103642dad5685185f26d4c6ae2968aa92c7235ac78630271ce1f8503a42d0a53da8350742200553611343e85cbfe08dad4e1cd849138646f4883c315ef4256ebd4f5bf12483071ccc229dc6eda7d17ec03d45e4d82ba0f4d17f8ddf7a52933805207aec32c86e86567db506e639ae9a4089d856541b457b2350a1c4f7b6f2654cffcbfb249c03dc31b8a397e2819bf3f766b1f", 0xbc}, {&(0x7f0000000980)="aacc2ec106227976ea76221ed2cebb029787318c653edb42e9dd86ee028b4713a24f3d1101ae754b45d67636a1f5ca4eeee77be1d274a0f3028442970fce25ff49373adaca4b8568cc74a7b99324539fae7ba1829c1b11e159b426d8f96817e26552869e3167f81c3f17af31309008584d614b0fde477b97e9cd765ed64bcd3702abbd6141f5be41ebbd8ee9f15fc1bb96c0954aaafbc8f884233ae815ca649d41623c8b658fae921a47cdd2c869c2be95758676c79aaa7812a67efa082f67fbcad0ed78e96eea1eced174d03a58b1c4ec8629f5421e2bae4f92e6f2b2fdf6d3d598adb7c1494e34275e771701304a4935c4", 0xf2}, {&(0x7f00000002c0)}, {&(0x7f0000000a80)="46e1feb5081f238730dd614d52a83818363978f5edbbca6949ce3ed9fd26065a3d924e6979bd1900d2ffde07acbbfe353fccf67f65b7bf53127a0de880ee18f0fccfcf7cb4867d6050d30d93b8a4a14b2b51b76b836f43220deebaf45001f9bf54535b4937d14f30d8eda19db6c77b0ffce84a1be83fdcb96a7ac50311cb1d6a1a4d2f4a7f2be94aa4096787332a2624bc4ee33b75deee5c29bf110bafbcbda7daea71186d2e167e36e512c7", 0xac}, {&(0x7f0000000bc0)="7c8be1de10fff91afe42383477a554a71caf49c69171ad765c576446ae273d91e08a23dcc0d4de98b881bd3d39e2cc0575c7fb44a97cb3bcb435baa6aff9e74b35012a163667d4fe4c09e6cdec3c8d47560efc40459b9368afb97e48fd0defeba4981ad7bec851509553f3073dbb2c265004390dd7427076d9b660c71cd0a2503ada909afd2da644026539da2e751055e8d947697ce5a76b170548852937fb5d3f45cbcc8f2efe47bb236b5e4712e0bd608aa1bcd6366762edee", 0xba}, {&(0x7f0000000c80)="17c978e43576722e17f3d3e7b80a7907dc910964ed83d64da630537f08a78cc7b1871662419083d13f4a79d83120ea39fbd41d28a9fee5f20a9add3794649adb5735258a1c81a4043dc0cec5f9d868aee3db401431b1b9d77916db7f51c8d766df9d70e6345f7af7227a05c3bea27425f5a3d47bad0081b30ba2159b643e1e7f2fa10df03255e436093e6e5274cb0451aac2dfcf593c122b01cb7240ae4672337beb1f629ddcce08ae5d51fd243ff40f98b868fe4a1614dfee2f4d1b65416bf0", 0xc0}, {&(0x7f00000007c0)="f5217909482ff3346260e0560a3afb50a0cdc0824cfb2379199a13f19c78c4447d47515e6aac30f1a1dc404086d285a7a3204481d4af5285789985b9b0ef4af9f39a0396aa9200d0acbc2c", 0x4b}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="c7c1b173e32051a24779e218148da4ee73c4273a3f9b30af33a99bb3257eee946f0c4bb7b536dee63a178a2b82588b9a8794ff9cd48347fa310d21c858f0491774a33ffb7b60c2f67f268b368fa9c20e059c1b061caadf4d5ed20eb4f2c1fabcf72eebac6abe0dbae75da650a52cc8d225ef762f0e6431682c375ab986b135902f641f89d65c5e542a8c8920c1c88ce3c6bd717fdc6e8c93d0c7849ba8f343b8d98088b9bc0e06a25c0ae8e0e11065d378afc1e6fd9d7c9a46e87f10b7fe45c68f54ed877cce8dcc6161", 0xca}, {&(0x7f0000000300)="9af4b4628c289f6126190177ff4b245a0f63b8bcd71674ca8339106e9585bfc58ac89c9a070ed23768ed58540f0fbbd9910f3eccccd6ec3aabe3844c8517394b", 0x40}], 0xa, &(0x7f0000004100)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8, 0x1}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f00000041c0)="1f267ba50fd4ecd64e4eff874df2e092228ad4fc5ec50959fde8351efac9e2267d6f0ccdd7a7b7545e0cb2b8ec69dc377ec8cb78684b77d4e911f4ea5901a0df7d6cb7355c0f52ffca159a95", 0x4c}], 0x1, &(0x7f0000004800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, r1}}}, @rights={{0x38, 0x1, 0x1, [r2, r3, r4, r5, r6, r7, r8, r10, r11, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r15, r16, r17, r18, r19]}}], 0xc8, 0x4811}}], 0x2, 0x2000c015)
r20 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
ioctl$I2C_TIMEOUT(r20, 0x702, 0x7fffffffffffffff)

2m41.910075022s ago: executing program 0 (id=38):
syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1118, &(0x7f0000002480)="$eJzs2LFqFF0UB/D/ndl8XwRhZOyn0VoMWwumUNjWxkI7EQQbcUFQ8hA2voFvkRew0LxCSCtapLATRjY7F+MaENEIgd+P3Zl7DmfumSnPDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzMkk8ludokfc01+XK5JMNwsDhKMtT8lfdtk5J7jxfLO8/nd5dJ2pPy8iApzaqkJOl3rm33837e7/SXsnv9w/Llq6djl2xN25QMOTz+q19R6qXdyAEAAADJ+Me6vHmxuevsjE7/nVN/AAAA4FfO40wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HeM3fd1XxdNkpIMw8HiKMlwxnNbJz8AAADgIihp8rD7eZQv0zHAx/11/GzK1vzkdpNZ3nZ7r//ZCwMAAMAF9GQ//58Kxxqcnsi/jmuruft+Zuv5e7sO4rfe1bob0/3zbtImubnR6/B471H9l7HND50BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAb+zAgQAAAACAIH/rQS4AAAAAAAAAAAAAAAAAAAAAAAAAYKgAAAD//+zz4sE=")

2m41.767233875s ago: executing program 3 (id=40):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x7f97, @loopback={0x0, 0xac14140c}, 0xff000000, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e4ff000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = getpid()
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000})
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000004c06dd4a00000040000000000000c5", @ANYRES32, @ANYBLOB='\x00'/21], 0x37)
rename(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r5, 0x2f, 0x0, 0x2000000}, 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0xfffffffa, 0x0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x80}, 0x50)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)

2m41.461998341s ago: executing program 0 (id=41):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x29}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

2m40.392623101s ago: executing program 3 (id=43):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r1, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0)

2m39.565842907s ago: executing program 32 (id=43):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r1, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0)

2m38.833388771s ago: executing program 0 (id=47):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x101, 0x0, 0x1a14, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}]}, 0x64}}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)

2m37.718932122s ago: executing program 0 (id=52):
syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0)
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0xc090, &(0x7f0000002700)=ANY=[], 0x1, 0x27c, &(0x7f0000000480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000000))

2m37.482505137s ago: executing program 0 (id=53):
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000001c0)={0x0, 0x3}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x6}, 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, 0x0, 0x0)
socket$kcm(0x25, 0x1, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000001280), 0x6)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000340)={0x3, 0x8, {}, {}, 0xffffffff, 0x2})
sendmsg$nl_generic(r4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='i2c_reply\x00', r5, 0x0, 0xf09}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

2m35.76059979s ago: executing program 0 (id=56):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r4 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x149440)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = dup3(r6, r5, 0x80000)
ioctl$NBD_SET_SOCK(r4, 0xab00, r7)
ioctl$NBD_CLEAR_SOCK(r4, 0xab04)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
open(0x0, 0x64842, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x490, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)

2m19.644138891s ago: executing program 33 (id=56):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r4 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x149440)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = dup3(r6, r5, 0x80000)
ioctl$NBD_SET_SOCK(r4, 0xab00, r7)
ioctl$NBD_CLEAR_SOCK(r4, 0xab04)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
open(0x0, 0x64842, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x490, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)

1m49.700832527s ago: executing program 1 (id=138):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003880)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @loopback}, 0x1c, 0x0}}], 0x1, 0x24044084)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)

1m49.511382401s ago: executing program 1 (id=140):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40048c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)
shutdown(r2, 0x0)

1m38.707689129s ago: executing program 1 (id=159):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000002c0))

1m37.278560857s ago: executing program 1 (id=165):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mount(0x0, 0x0, 0x0, 0x1a0c000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x179, &(0x7f00000003c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r3)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, 0x0, 0x64000)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1m33.695887586s ago: executing program 1 (id=173):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
kcmp(r6, r5, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
epoll_create(0x7)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0xcb30, 0x1, 0x6, 0x6, 0x7}, 0x14)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x408, 0xffffffff, 0x278, 0x98, 0x278, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4000000, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x1b8, 0x1e0, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}, {0xfc}}, @common=@unspec=@comment={{0x120}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "53a0", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

1m32.711095295s ago: executing program 1 (id=176):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x180)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x800, 0x325)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x2, 0x3000, 0x1000, &(0x7f0000ff3000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x16, 0x0, 0x0)

1m31.199302134s ago: executing program 34 (id=176):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x180)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x800, 0x325)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x2, 0x3000, 0x1000, &(0x7f0000ff3000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x16, 0x0, 0x0)

15.247900517s ago: executing program 2 (id=317):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=@flushpolicy={0x240, 0x1d, 0x100, 0x70bd28, 0x25dfdbfd, "", [@sa={0xe4, 0x6, {{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x3, 0x4e22, 0x5, 0x2, 0x0, 0x0, 0xc, 0x0, r5}, {@in=@remote, 0x4d2, 0x2b}, @in=@multicast1, {0x81, 0x700000000000, 0x2, 0xe, 0x0, 0xd, 0x1, 0x6}, {0x8001, 0x47, 0x594c, 0x9}, {0x7f, 0x6, 0xffffffff}, 0x70bd2d, 0x3505, 0xa, 0x2, 0x4, 0x4}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tfcpad={0x8, 0x16, 0x9}, @algo_crypt={0x132, 0x2, {{'xchacha12-arm\x00'}, 0x750, "af5c195362c5b9c843ef9adf0fa7f1d2b69fed64cbec9bd0882fef0406af61561b1bdc794f0497f7f1b3b462976a415b2761fa1631b8390d0d70cc2254e19159e7799c8585bb96387048374df2174689510ff81dcc4f0f87bb85a0bc75659f6ca8f1ed9e6c1e66afc4d62b72c4848fffd25ec748fe995f5e809ef136b8e0c0302858cb9532f5f85b3c3871b1d4359420d8edf348410a4a6169d86e4ff8f08f28a28bbb04d91ec9653bbc6bd3c4c27b21dfcc644f18d075ed4def7821520c7d19696add8c9891b77d355825701f919f118342c19076d5729c71fb71ffc92b60335566e4777977fa46205a"}}]}, 0x240}, 0x1, 0x0, 0x0, 0x24000005}, 0x8080)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002140)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x23db}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0)

14.157838228s ago: executing program 2 (id=319):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x101, 0x0, 0x1a14, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}]}, 0x64}}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x1e, 0x4, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0, 0x80000000}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

11.036092168s ago: executing program 2 (id=321):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1608440, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000003300)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x0, &(0x7f0000000c40))
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000d9bffc), 0x4)

11.027529778s ago: executing program 7 (id=331):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800001e7400560023", @ANYRES32=0x0], 0x18}}, 0x20008050)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2b2040, 0x156)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x4}, 0x14)
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@rand_addr=0x64010100, @private=0xa010100, r4}, 0xc)

10.840780381s ago: executing program 5 (id=322):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r2, 0xfff8}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @multicast2}}, 0xf228, 0x2, 0x4, 0x3, 0xe}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r2, 0x9}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt(r3, 0x84, 0x14, &(0x7f0000000400)="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", 0x19d)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x7fff})
fcntl$lock(r7, 0x26, &(0x7f00000002c0))
close(r7)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)
r9 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'dvmrp1\x00', 0x600})

9.922137889s ago: executing program 7 (id=324):
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
timerfd_create(0x9, 0x80800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @rand_addr=0x64010101}}}})
sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/173, 0xad}], 0x1, 0x4})
io_uring_enter(r5, 0x100847c0, 0x16a8, 0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@shortname_lower}, {@fat=@nocase}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {}, {@uni_xlateno}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@fat=@showexec}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@shortname_winnt}, {@shortname_win95}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}]}, 0x1, 0x386, &(0x7f0000000980)="$eJzs3U9rXFUUAPCTNJmk0XSyEEFFvNSNboYkfoEGaUEMKLEj1YXwaiY6zGsmzBsiU0S7c+vnKC7dCeIXyEL37txl47KL0pHMn/ydVKzNDNHfD8I78+49effmZR5n8zj7d76/19iai62sHdM3UkxHxPSjiKVe1Dc1OE734lIc9yDeLt/5/fWPPvn0/bX19ZsbKd1au/3Oakrp2hs/f/X1D9d/ab/w8Y/XfpqLvaXP9v9c/WPv5b1X9p/c/rJepHqRtpvtlKW7zWY7u5vX0ma9aFRS+jCvZUUt1beLWuvE+Fbe3NnppGx7c3Fhp1UripRtd1Kj1kntZmq3Oin7Iqtvp0qlkhYXgr9Tfbixka314/mnzLsxrgVxAVqttWwqYubsSPXhJNYDAExWv/4vKs9a/5eea/0/G+r/cTpe//NfdVD/lwbf35PU/wAAAAAAAAAAAAAAcBk86nbL3W63PDx25wYDg88TXh4X7Mz9P/Uz6fVxsY69uDd8PagakX+3W+1/WNuKeuRRi+Uox+ODx8JQP7713vrN5dSzFIv3vt2t7lbj+q8R1Ssn81eiHEuj81f6+ekwPw6Os7FwPH81yvHS6PzVkfmleOvNY/mVKMdvn0cz8tjsPd6O8r9ZSendD9ZP5c/15gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/1BJQ69Fv+/9bjXiauwO+vdXjiYsneyP388/7K+/HOV4PLo///LI/vwz8erMZPcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENF534jy/Naa1zBsOd/70xpGJyfNdWf/uDU0NUY45rzvDb9vH7hk263e1FLnf/nWXMR0ciuxFj/mK2iMxvxtDvYHfyX/Ptrvdjb4LlzDvY/7r1fjmBSTyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYnKOm35NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJNUdO43sjyvtUoR0QsOzzxDMBURZ4fOvfj8WLcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwKfwVAAD//1daCJg=")

9.054432516s ago: executing program 4 (id=325):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (fail_nth: 3)

8.526103046s ago: executing program 5 (id=326):
syz_open_dev$dri(0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffb4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
personality(0x5000004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x0, 0x7, 0x9}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x1414, 0x211, 0x0, 0x25dfdbff}, 0x10}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier')
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
socket(0x1e, 0x4, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0)

8.508475426s ago: executing program 6 (id=327):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil)
mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000680)={[{@fat=@flush}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@tz_utc}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_win95}]}, 0x1, 0x356, &(0x7f0000000200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
socket$kcm(0x21, 0x2, 0xa)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000840)
lseek(0xffffffffffffffff, 0xfffffffffffffff7, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff033188442697df5014f00800", 0x0, 0x414, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.408341698s ago: executing program 4 (id=328):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
recvmmsg(r5, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=@flushpolicy={0x204, 0x1d, 0x100, 0x70bd28, 0x25dfdbfd, "", [@sa={0xe4, 0x6, {{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x3, 0x4e22, 0x5, 0x2, 0x0, 0x0, 0xc, 0x0, r7}, {@in=@remote, 0x4d2, 0x2b}, @in=@multicast1, {0x81, 0x700000000000, 0x2, 0xe, 0x0, 0xd, 0x1, 0x6}, {0x8001, 0x47, 0x594c, 0x9}, {0x7f, 0x6, 0xffffffff}, 0x70bd2d, 0x3505, 0xa, 0x2, 0x4, 0x4}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tfcpad={0x8, 0x16, 0x9}, @algo_crypt={0xf8, 0x2, {{'xchacha12-arm\x00'}, 0x580, "af5c195362c5b9c843ef9adf0fa7f1d2b69fed64cbec9bd0882fef0406af61561b1bdc794f0497f7f1b3b462976a415b2761fa1631b8390d0d70cc2254e19159e7799c8585bb96387048374df2174689510ff81dcc4f0f87bb85a0bc75659f6ca8f1ed9e6c1e66afc4d62b72c4848fffd25ec748fe995f5e809ef136b8e0c0302858cb9532f5f85b3c3871b1d4359420d8edf348410a4a6169d86e4ff8f08f28a28bbb04d91ec9653bbc6bd3c4c27b21"}}]}, 0x204}, 0x1, 0x0, 0x0, 0x24000005}, 0x8080)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002140)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x23db}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000)
recvmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0)

7.26702772s ago: executing program 4 (id=329):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=@flushpolicy={0x240, 0x1d, 0x100, 0x70bd28, 0x25dfdbfd, "", [@sa={0xe4, 0x6, {{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x3, 0x4e22, 0x5, 0x2, 0x0, 0x0, 0xc, 0x0, r5}, {@in=@remote, 0x4d2, 0x2b}, @in=@multicast1, {0x81, 0x700000000000, 0x2, 0xe, 0x0, 0xd, 0x1, 0x6}, {0x8001, 0x47, 0x594c, 0x9}, {0x7f, 0x6, 0xffffffff}, 0x70bd2d, 0x3505, 0xa, 0x2, 0x4, 0x4}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tfcpad={0x8, 0x16, 0x9}, @algo_crypt={0x132, 0x2, {{'xchacha12-arm\x00'}, 0x750, "af5c195362c5b9c843ef9adf0fa7f1d2b69fed64cbec9bd0882fef0406af61561b1bdc794f0497f7f1b3b462976a415b2761fa1631b8390d0d70cc2254e19159e7799c8585bb96387048374df2174689510ff81dcc4f0f87bb85a0bc75659f6ca8f1ed9e6c1e66afc4d62b72c4848fffd25ec748fe995f5e809ef136b8e0c0302858cb9532f5f85b3c3871b1d4359420d8edf348410a4a6169d86e4ff8f08f28a28bbb04d91ec9653bbc6bd3c4c27b21dfcc644f18d075ed4def7821520c7d19696add8c9891b77d355825701f919f118342c19076d5729c71fb71ffc92b60335566e4777977fa46205a"}}]}, 0x240}, 0x1, 0x0, 0x0, 0x24000005}, 0x8080)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002140)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x23db}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0)

6.968874926s ago: executing program 7 (id=330):
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x10}}, 0x8000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_pidfd_open(0x0, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000240)=0x2, 0x4)

6.277828549s ago: executing program 5 (id=332):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x101, 0x0, 0x1a14, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}]}, 0x64}}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x1e, 0x4, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0, 0x80000000}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6.173894911s ago: executing program 4 (id=333):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800001e7400560023", @ANYRES32=0x0], 0x18}}, 0x20008050)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (fail_nth: 3)

5.843041608s ago: executing program 2 (id=334):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)

4.66560333s ago: executing program 4 (id=335):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x9, 0x0)
mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

4.665054671s ago: executing program 7 (id=336):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x416400)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=@newtaction={0x160, 0x30, 0x1, 0x70bd29, 0x5e00, {}, [{0x14c, 0x1, [@m_ct={0x40, 0xf, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x108, 0x1, 0x0, 0x0, {{0x5}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x7}}}]}, {0xc3, 0x6, "8e2da6780b81a4ca08463f180781a477cc38f5b7e289880eff458c6e75ce3cb187eb9b39e4cf7bdeef15c980488338fc13ecb5a83359af7bbeb1bff219210d7d7b96e1b5396fe8193675e8b6b98f1617037b884d3d565851f385ab93c8d621227b0395a9cd3637557ede6c035a0623e59d60cb2ce199cace48f3bdd582dda460b9ae427d1dd9ea24142e65022700ee6cc6f53994516d08e1accfc07e77a2333aca7ab4b02b1cc3599ef8b48a3299e2a3bfb0a53118ddf9e69787fa7a3ec8d3"}, {0xc}, {0xc}}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@rfm={0x25, 0x4, "a25bdf4342fa0aa5eb12a58d656b90f3"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x2)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/85, 0x55}, {&(0x7f0000000740)=""/158, 0x9e}, {&(0x7f0000001100)=""/210, 0xd2}], 0x3, &(0x7f0000001380)=""/151, 0x97}, 0xf3}, {{&(0x7f00000009c0)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/197, 0xc5}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/177, 0xb1}, {&(0x7f0000000c80)=""/170, 0xaa}, {&(0x7f00000004c0)=""/2, 0x2}], 0x6, &(0x7f0000000e40)=""/81, 0x51}, 0x8f5}, {{&(0x7f0000000840)=@ax25={{0x3, @bcast}, [@remote, @default, @bcast, @remote, @netrom, @netrom, @bcast, @rose]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/102, 0x66}, {&(0x7f0000000640)=""/46, 0x2e}], 0x2, &(0x7f0000000f80)=""/141, 0x8d}, 0x2}], 0x3, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRESOCT=r5, @ANYRESDEC=r6], 0x3c}, 0x1, 0x0, 0x0, 0xeca66a4056a31917}, 0x8014)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)

4.606942192s ago: executing program 6 (id=337):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
r1 = epoll_create1(0x80000) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x5)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@barrier}, {@jqfmt_vfsv0}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") (async)
r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@check_strict}, {@utf8}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@rodir}]}, 0x9, 0x27b, &(0x7f0000000640)="$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") (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000005c0)="fc2a95e9f72afc39e5439a9bb86409da101985db445a64bf8cb62285c87e2392585d416da98f95639f4301af5650dbef6d86379e4b0cd16fad57bb", 0x3b}], 0x1, &(0x7f0000000b00)=[@rights={{0x28, 0x1, 0x1, [r0, r6, r0, r4, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0xc0, 0x20000800}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r8 = socket$inet(0x2, 0x801, 0x0)
listen(r8, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r9, 0x0, 0x7ffff000, 0x0) (async)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r3, r3}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'streebog512\x00'}}) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
r10 = epoll_create1(0x80000)
r11 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r11, 0x80f86406, &(0x7f00000001c0)=""/187) (async)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r2, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async)
epoll_wait(r10, &(0x7f0000000280)=[{}], 0x1, 0x4000005) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

4.317293887s ago: executing program 2 (id=338):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000003"], 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r4, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3)
socket$kcm(0xa, 0x2, 0x3a)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x20000009, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x2}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000)
r12 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

3.937755884s ago: executing program 6 (id=339):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x7f97, @loopback={0x0, 0xac14140c}, 0xff000000, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e4ff000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = getpid()
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000})
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000004c06dd4a00000040000000000000c5", @ANYRES32, @ANYBLOB='\x00'/21], 0x37)
rename(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00')
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r5, 0x2f, 0x0, 0x2000000}, 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f040000000000"], 0x0, 0x28}, 0x28)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0xfffffffa, 0x0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x80}, 0x50)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)

3.937279594s ago: executing program 4 (id=340):
r0 = socket(0xa, 0x3, 0x7)
socket(0x2, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpgid(0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000080))
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r6)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x0, 0x7}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)
sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)=@llc={0x1a, 0x121, 0xd, 0x1, 0xcf, 0x7, @random="886520865122"}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="0f37328e4b199149f4df0f83159f1a924cf0607ea194f1", 0x17}, {&(0x7f00000000c0)="8441b977311c36aad9a961ac7b864a7f1de130f48665bd9fda3ffa4e056be66e9ff9795783b0c36974c673555b7496b85e81adf5c0f0059df852596bd2a89dcf74d190f71a8e3ebf8907a2c756723530b0477a55131fff0ad213ef43522d3aba3fc9910b1c094a05072f24f0a467bd64a31533a7c544479bceac317e4f1c373fda13959811af64c5f213bb389739ce26430f6bf337a19d08dada6d68ca8bf83ad5fbbfdabca210a0242a8eb48d31a2ea2b37f3c842a462c5b4b856273057f27170a3f42723b546248c3e70672526fb2abdd68ef81f76538d396a16f9b1", 0xdd}, {&(0x7f00000001c0)="188ee5497fa3905285a1708e2e347e8f47338c109776b1ec94737fc7d21266a305765c9a8cd1849957f386878bb9c11b8ae2eef641163b02c2562d973342e663cbcb1ec6a92c9ea756a7a9fdf8f5122566e37ca09ce3", 0x56}], 0x3}}], 0x1, 0x0)

3.859043806s ago: executing program 5 (id=341):
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
timerfd_create(0x9, 0x80800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @rand_addr=0x64010101}}}})
sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/173, 0xad}], 0x1, 0x4})
io_uring_enter(r5, 0x100847c0, 0x16a8, 0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@shortname_lower}, {@fat=@nocase}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {}, {@uni_xlateno}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@fat=@showexec}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@shortname_winnt}, {@shortname_win95}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}]}, 0x1, 0x386, &(0x7f0000000980)="$eJzs3U9rXFUUAPCTNJmk0XSyEEFFvNSNboYkfoEGaUEMKLEj1YXwaiY6zGsmzBsiU0S7c+vnKC7dCeIXyEL37txl47KL0pHMn/ydVKzNDNHfD8I78+49effmZR5n8zj7d76/19iai62sHdM3UkxHxPSjiKVe1Dc1OE734lIc9yDeLt/5/fWPPvn0/bX19ZsbKd1au/3Oakrp2hs/f/X1D9d/ab/w8Y/XfpqLvaXP9v9c/WPv5b1X9p/c/rJepHqRtpvtlKW7zWY7u5vX0ma9aFRS+jCvZUUt1beLWuvE+Fbe3NnppGx7c3Fhp1UripRtd1Kj1kntZmq3Oin7Iqtvp0qlkhYXgr9Tfbixka314/mnzLsxrgVxAVqttWwqYubsSPXhJNYDAExWv/4vKs9a/5eea/0/G+r/cTpe//NfdVD/lwbf35PU/wAAAAAAAAAAAAAAcBk86nbL3W63PDx25wYDg88TXh4X7Mz9P/Uz6fVxsY69uDd8PagakX+3W+1/WNuKeuRRi+Uox+ODx8JQP7713vrN5dSzFIv3vt2t7lbj+q8R1Ssn81eiHEuj81f6+ekwPw6Os7FwPH81yvHS6PzVkfmleOvNY/mVKMdvn0cz8tjsPd6O8r9ZSendD9ZP5c/15gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/1BJQ69Fv+/9bjXiauwO+vdXjiYsneyP388/7K+/HOV4PLo///LI/vwz8erMZPcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENF534jy/Naa1zBsOd/70xpGJyfNdWf/uDU0NUY45rzvDb9vH7hk263e1FLnf/nWXMR0ciuxFj/mK2iMxvxtDvYHfyX/Ptrvdjb4LlzDvY/7r1fjmBSTyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYnKOm35NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJNUdO43sjyvtUoR0QsOzzxDMBURZ4fOvfj8WLcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwKfwVAAD//1daCJg=")

2.874493285s ago: executing program 6 (id=342):
syz_open_dev$dri(0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffb4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
personality(0x5000004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x0, 0x7, 0x9}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x1414, 0x211, 0x0, 0x25dfdbff}, 0x10}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier')
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
socket(0x1e, 0x4, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000040000080002400000000e08000640000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0)

2.128249249s ago: executing program 5 (id=343):
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff)
stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=@flushpolicy={0x240, 0x1d, 0x100, 0x70bd28, 0x25dfdbfd, "", [@sa={0xe4, 0x6, {{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x3, 0x4e22, 0x5, 0x2, 0x0, 0x0, 0xc, 0x0, r5}, {@in=@remote, 0x4d2, 0x2b}, @in=@multicast1, {0x81, 0x700000000000, 0x2, 0xe, 0x0, 0xd, 0x1, 0x6}, {0x8001, 0x47, 0x594c, 0x9}, {0x7f, 0x6, 0xffffffff}, 0x70bd2d, 0x3505, 0xa, 0x2, 0x4, 0x4}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tfcpad={0x8, 0x16, 0x9}, @algo_crypt={0x132, 0x2, {{'xchacha12-arm\x00'}, 0x750, "af5c195362c5b9c843ef9adf0fa7f1d2b69fed64cbec9bd0882fef0406af61561b1bdc794f0497f7f1b3b462976a415b2761fa1631b8390d0d70cc2254e19159e7799c8585bb96387048374df2174689510ff81dcc4f0f87bb85a0bc75659f6ca8f1ed9e6c1e66afc4d62b72c4848fffd25ec748fe995f5e809ef136b8e0c0302858cb9532f5f85b3c3871b1d4359420d8edf348410a4a6169d86e4ff8f08f28a28bbb04d91ec9653bbc6bd3c4c27b21dfcc644f18d075ed4def7821520c7d19696add8c9891b77d355825701f919f118342c19076d5729c71fb71ffc92b60335566e4777977fa46205a"}}]}, 0x240}, 0x1, 0x0, 0x0, 0x24000005}, 0x8080)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002140)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x23db}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000)
recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0)

1.969960972s ago: executing program 7 (id=344):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = memfd_secret(0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000007c0)={0xe, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/228, 0xe4}], &(0x7f0000000780)=[0x5, 0x6], 0x4}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020}, 0x2020)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000950000000000003d"], &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x8)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
io_setup(0x100, &(0x7f0000000000))

898.219823ms ago: executing program 5 (id=345):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x101, 0x0, 0x1a14, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}]}, 0x64}}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x1e, 0x4, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

744.861306ms ago: executing program 6 (id=346):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @control={0x3, 0x9, 0x3}}], 0xc4)
read$snapshot(r1, 0x0, 0xffffffbf)
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140))

118.499208ms ago: executing program 2 (id=347):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94246}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x48000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x61)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x30)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140))
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1008055, &(0x7f0000000780)=ANY=[], 0x5, 0x559d, &(0x7f000000c000)="$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")

54.026799ms ago: executing program 7 (id=348):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

0s ago: executing program 6 (id=349):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x27)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x3c}}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x20081)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x6e)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32={[0x0, 0x0, 0x673]}}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4, 0xa3}, {0x0, 0x4}, @time=@time={0x5, 0x2}}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0xffffffff, 0x800}}, {0x0, 0x0, 0x0, 0x7, @time={0x5, 0x6}, {}, {0x3, 0x4}, @addr={0xcd, 0x9}}, {0x0, 0x1, 0x0, 0x0, @time={0x7fffffff, 0x9}, {0x0, 0x3}, {0x0, 0x1}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @addr={0x2, 0xf}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {0x0, 0x3}, {}, @control={0x3, 0x9, 0x3}}], 0xc4)
read$snapshot(r1, 0x0, 0xffffffbf)
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140))

kernel console output (not intermixed with test programs):

9986][ T5182]  ? clear_bhb_loop+0x60/0xb0
[  173.374695][ T5182]  ? clear_bhb_loop+0x60/0xb0
[  173.379419][ T5182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.385662][ T5182] RIP: 0033:0x7f648fb8eba9
[  173.390118][ T5182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.410034][ T5182] RSP: 002b:00007f6490a79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  173.418501][ T5182] RAX: ffffffffffffffda RBX: 00007f648fdd5fa0 RCX: 00007f648fb8eba9
[  173.426511][ T5182] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005
[  173.434519][ T5182] RBP: 00007f6490a79090 R08: 0000000000000000 R09: 0000000000000000
[  173.442530][ T5182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.450918][ T5182] R13: 00007f648fdd6038 R14: 00007f648fdd5fa0 R15: 00007ffd1822a7e8
[  173.458950][ T5182]  </TASK>
[  173.463812][ T4330] m920x_read = error: -19
[  173.468226][ T4330] dvb-usb: error while querying for an remote control event.
[  173.530553][ T5139] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.539412][ T5139] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.814089][ T4330] m920x_read = error: -19
[  173.819773][ T4330] dvb-usb: error while querying for an remote control event.
[  173.860153][ T5188] loop4: detected capacity change from 0 to 1024
[  174.392392][ T4330] m920x_read = error: -19
[  174.396822][ T4330] dvb-usb: error while querying for an remote control event.
[  174.538597][ T4330] m920x_read = error: -19
[  174.543015][ T4330] dvb-usb: error while querying for an remote control event.
[  174.660834][ T4330] m920x_read = error: -19
[  174.665360][ T4330] dvb-usb: error while querying for an remote control event.
[  174.798517][ T4570] m920x_read = error: -19
[  174.830730][ T4570] dvb-usb: error while querying for an remote control event.
[  175.251219][ T4570] m920x_read = error: -19
[  175.255645][ T4570] dvb-usb: error while querying for an remote control event.
[  175.368618][ T4570] m920x_read = error: -19
[  175.373156][ T4570] dvb-usb: error while querying for an remote control event.
[  175.503909][ T4570] m920x_read = error: -19
[  175.503934][ T4570] dvb-usb: error while querying for an remote control event.
[  175.647061][ T4570] m920x_read = error: -19
[  175.647088][ T4570] dvb-usb: error while querying for an remote control event.
[  175.758528][  T951] m920x_read = error: -19
[  175.758547][  T951] dvb-usb: error while querying for an remote control event.
[  175.889239][ T4570] m920x_read = error: -19
[  175.889256][ T4570] dvb-usb: error while querying for an remote control event.
[  176.060534][  T951] m920x_read = error: -19
[  176.064947][  T951] dvb-usb: error while querying for an remote control event.
[  176.262390][  T951] m920x_read = error: -19
[  176.266887][  T951] dvb-usb: error while querying for an remote control event.
[  176.412598][ T4330] m920x_read = error: -19
[  176.417098][ T4330] dvb-usb: error while querying for an remote control event.
[  176.435799][ T5139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.565282][ T5139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.593594][  T951] m920x_read = error: -19
[  176.598098][  T951] dvb-usb: error while querying for an remote control event.
[  176.728478][ T4570] m920x_read = error: -19
[  176.733378][ T4570] dvb-usb: error while querying for an remote control event.
[  176.868294][ T4570] m920x_read = error: -19
[  176.872813][ T4570] dvb-usb: error while querying for an remote control event.
[  177.018481][ T4330] m920x_read = error: -19
[  177.022953][ T4330] dvb-usb: error while querying for an remote control event.
[  177.146376][ T4330] m920x_read = error: -19
[  177.151009][ T4330] dvb-usb: error while querying for an remote control event.
[  177.268648][ T4330] m920x_read = error: -19
[  177.273244][ T4330] dvb-usb: error while querying for an remote control event.
[  177.398486][ T4330] m920x_read = error: -19
[  177.402914][ T4330] dvb-usb: error while querying for an remote control event.
[  177.522401][ T5139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.535386][ T4330] m920x_read = error: -19
[  177.543591][ T5139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.557268][ T4330] dvb-usb: error while querying for an remote control event.
[  177.575732][ T5139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.593661][ T5139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.694920][ T4570] m920x_read = error: -19
[  177.699872][ T4570] dvb-usb: error while querying for an remote control event.
[  177.814496][  T951] m920x_read = error: -19
[  177.829966][  T951] dvb-usb: error while querying for an remote control event.
[  178.540605][ T4487] m920x_read = error: -19
[  178.545007][ T4487] dvb-usb: error while querying for an remote control event.
[  178.555704][   T52] block nbd0: Possible stuck request ffff888025068000: control (read@0,4096B). Runtime 60 seconds
[  178.572929][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'.
[  178.589118][ T5180] bridge0: port 3(batadv1) entered blocking state
[  178.595671][ T5180] bridge0: port 3(batadv1) entered disabled state
[  178.603515][ T5180] device batadv1 entered promiscuous mode
[  178.652449][ T5223] loop6: detected capacity change from 0 to 1024
[  178.659235][ T4330] m920x_read = error: -19
[  178.663717][ T4330] dvb-usb: error while querying for an remote control event.
[  178.701804][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'.
[  178.710913][ T5188] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.788051][ T4487] m920x_read = error: -19
[  178.792736][ T4487] dvb-usb: error while querying for an remote control event.
[  178.830752][ T5225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.160'.
[  178.847779][ T5188] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.056749][ T4487] m920x_read = error: -19
[  179.061279][ T4487] dvb-usb: error while querying for an remote control event.
[  179.089242][ T4305] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  179.099466][ T4305] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  179.133686][ T5231] autofs4:pid:5231:autofs_fill_super: called with bogus options
[  179.178177][ T4487] m920x_read = error: -19
[  179.187992][ T4487] dvb-usb: error while querying for an remote control event.
[  179.386169][  T951] m920x_read = error: -19
[  179.391957][  T951] dvb-usb: error while querying for an remote control event.
[  179.420735][ T5236] loop2: detected capacity change from 0 to 1024
[  179.441857][ T5236] hfsplus: unable to parse mount options
[  179.912752][  T951] m920x_read = error: -19
[  179.917212][  T951] dvb-usb: error while querying for an remote control event.
[  180.126237][ T4487] m920x_read = error: -19
[  180.136462][ T4487] dvb-usb: error while querying for an remote control event.
[  180.148683][ T5240] process 'syz.4.164' launched './file1' with NULL argv: empty string added
[  180.278023][ T4487] m920x_read = error: -19
[  180.282580][ T4487] dvb-usb: error while querying for an remote control event.
[  180.423459][ T4487] m920x_read = error: -19
[  180.430463][ T4487] dvb-usb: error while querying for an remote control event.
[  180.533094][ T5235] loop5: detected capacity change from 0 to 32768
[  180.557909][ T4487] m920x_read = error: -19
[  180.562423][ T4487] dvb-usb: error while querying for an remote control event.
[  180.597854][ T5235] (syz.5.163,5235,1):ocfs2_read_virt_blocks:991 ERROR: Inode #66 contains a hole at offset 0
[  180.712989][ T5235] (syz.5.163,5235,1):ocfs2_read_dir_block:511 ERROR: status = -5
[  180.830059][ T5235] (syz.5.163,5235,1):ocfs2_init_global_system_inodes:461 ERROR: status = -22
[  180.946606][ T5235] (syz.5.163,5235,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  180.947210][ T5235] (syz.5.163,5235,1):ocfs2_init_global_system_inodes:472 ERROR: status = -22
[  181.234152][ T5235] (syz.5.163,5235,1):ocfs2_initialize_super:2255 ERROR: status = -22
[  181.287784][  T126] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  181.349043][ T5235] (syz.5.163,5235,1):ocfs2_fill_super:1176 ERROR: status = -22
[  181.508124][  T126] usb 7-1: device descriptor read/64, error -71
[  181.617806][ T4330] m920x_read = error: -19
[  181.622255][ T4330] dvb-usb: error while querying for an remote control event.
[  181.742683][ T5260] loop1: detected capacity change from 0 to 64
[  181.749303][ T4330] m920x_read = error: -19
[  181.753686][ T4330] dvb-usb: error while querying for an remote control event.
[  181.899447][  T126] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  181.909412][ T4330] m920x_read = error: -19
[  181.913806][ T4330] dvb-usb: error while querying for an remote control event.
[  182.127705][ T4487] m920x_read = error: -19
[  182.132384][ T4487] dvb-usb: error while querying for an remote control event.
[  182.500363][  T126] usb 7-1: device descriptor read/64, error -71
[  182.528568][ T5272] overlayfs: upper fs needs to support d_type.
[  182.541915][ T5272] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  182.549064][ T5272] overlayfs: failed to set xattr on upper
[  182.554869][ T5272] overlayfs: ...falling back to index=off,metacopy=off.
[  182.607710][ T4487] m920x_read = error: -19
[  182.614889][ T4487] dvb-usb: error while querying for an remote control event.
[  182.737529][ T4487] m920x_read = error: -19
[  182.742131][ T4487] dvb-usb: error while querying for an remote control event.
[  182.888271][ T4487] m920x_read = error: -19
[  182.892816][ T4487] dvb-usb: error while querying for an remote control event.
[  182.910369][ T5280] FAULT_INJECTION: forcing a failure.
[  182.910369][ T5280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.923822][ T5280] CPU: 0 PID: 5280 Comm: syz.5.171 Not tainted syzkaller #0
[  182.931324][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  182.941586][ T5280] Call Trace:
[  182.944898][ T5280]  <TASK>
[  182.947857][ T5280]  dump_stack_lvl+0x168/0x22e
[  182.952580][ T5280]  ? show_regs_print_info+0x12/0x12
[  182.957814][ T5280]  ? load_image+0x3b0/0x3b0
[  182.962365][ T5280]  ? __lock_acquire+0x7c50/0x7c50
[  182.967446][ T5280]  should_fail_ex+0x399/0x4d0
[  182.972192][ T5280]  _copy_from_user+0x2c/0x170
[  182.976906][ T5280]  do_ipt_set_ctl+0x68b/0xcc0
[  182.981717][ T5280]  ? nf_setsockopt+0x218/0x280
[  182.986519][ T5280]  ? ipt_unregister_table_exit+0x220/0x220
[  182.992361][ T5280]  ? __lock_acquire+0x7c50/0x7c50
[  182.997426][ T5280]  ? trace_contention_end+0x5f/0x170
[  183.002757][ T5280]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  183.008431][ T5280]  ? mutex_unlock+0x10/0x10
[  183.012980][ T5280]  ? aa_sk_perm+0x7e5/0x920
[  183.017541][ T5280]  ? aa_af_perm+0x2b0/0x2b0
[  183.022087][ T5280]  nf_setsockopt+0x25f/0x280
[  183.026721][ T5280]  ? sock_common_recvmsg+0x1a0/0x1a0
[  183.032054][ T5280]  __sys_setsockopt+0x2bf/0x3d0
[  183.036958][ T5280]  __x64_sys_setsockopt+0xb1/0xc0
[  183.042034][ T5280]  do_syscall_64+0x4c/0xa0
[  183.046489][ T5280]  ? clear_bhb_loop+0x60/0xb0
[  183.051206][ T5280]  ? clear_bhb_loop+0x60/0xb0
[  183.055918][ T5280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.061855][ T5280] RIP: 0033:0x7effd9d8eba9
[  183.066302][ T5280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.085946][ T5280] RSP: 002b:00007effdabb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  183.094445][ T5280] RAX: ffffffffffffffda RBX: 00007effd9fd6180 RCX: 00007effd9d8eba9
[  183.102478][ T5280] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009
[  183.110495][ T5280] RBP: 00007effdabb8090 R08: 0000000000000468 R09: 0000000000000000
[  183.118591][ T5280] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001
[  183.126598][ T5280] R13: 00007effd9fd6218 R14: 00007effd9fd6180 R15: 00007ffe85e6d7c8
[  183.134617][ T5280]  </TASK>
[  183.475588][  T126] usb usb7-port1: attempt power cycle
[  183.739554][ T4268] Bad inode number on dev loop1: 4160749571 is out of range
[  183.773807][ T4268] Bad inode number on dev loop1: 4160749571 is out of range
[  183.842560][ T5281] loop4: detected capacity change from 0 to 2048
[  183.944825][ T5281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.957426][ T4487] m920x_read = error: -19
[  183.961935][ T4487] dvb-usb: error while querying for an remote control event.
[  184.097557][ T4487] m920x_read = error: -19
[  184.107328][ T4487] dvb-usb: error while querying for an remote control event.
[  184.248799][ T4487] m920x_read = error: -19
[  184.253395][ T4487] dvb-usb: error while querying for an remote control event.
[  184.498636][ T4487] m920x_read = error: -19
[  184.504578][ T4487] dvb-usb: error while querying for an remote control event.
[  184.672951][ T4330] m920x_read = error: -19
[  184.678610][ T4330] dvb-usb: error while querying for an remote control event.
[  184.859028][ T4330] m920x_read = error: -19
[  184.863526][ T4330] dvb-usb: error while querying for an remote control event.
[  184.997480][ T4487] m920x_read = error: -19
[  185.001904][ T4487] dvb-usb: error while querying for an remote control event.
[  185.262100][  T951] m920x_read = error: -19
[  185.267031][  T951] dvb-usb: error while querying for an remote control event.
[  186.089307][ T4330] m920x_read = error: -19
[  186.093782][ T4330] dvb-usb: error while querying for an remote control event.
[  186.167072][  T951] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  186.207242][ T4330] m920x_read = error: -19
[  186.211712][ T4330] dvb-usb: error while querying for an remote control event.
[  186.444041][ T4330] m920x_read = error: -19
[  186.448929][ T4330] dvb-usb: error while querying for an remote control event.
[  186.467097][  T951] usb 5-1: Using ep0 maxpacket: 32
[  186.547805][  T951] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  186.556887][  T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.641432][ T5309] FAULT_INJECTION: forcing a failure.
[  186.641432][ T5309] name failslab, interval 1, probability 0, space 0, times 0
[  186.655698][  T951] usb 5-1: config 0 descriptor??
[  186.667788][ T4487] m920x_read = error: -19
[  186.672280][ T4487] dvb-usb: error while querying for an remote control event.
[  186.716629][ T5309] CPU: 0 PID: 5309 Comm: syz.6.182 Not tainted syzkaller #0
[  186.724163][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  186.734296][ T5309] Call Trace:
[  186.737617][ T5309]  <TASK>
[  186.740581][ T5309]  dump_stack_lvl+0x168/0x22e
[  186.745386][ T5309]  ? show_regs_print_info+0x12/0x12
[  186.750628][ T5309]  ? load_image+0x3b0/0x3b0
[  186.755185][ T5309]  ? __might_sleep+0xd0/0xd0
[  186.759827][ T5309]  ? __lock_acquire+0x7c50/0x7c50
[  186.765075][ T5309]  should_fail_ex+0x399/0x4d0
[  186.769803][ T5309]  should_failslab+0x5/0x20
[  186.774358][ T5309]  slab_pre_alloc_hook+0x59/0x310
[  186.779426][ T5309]  ? __rwlock_init+0x140/0x140
[  186.784245][ T5309]  ? key_user_lookup+0x1b8/0x450
[  186.789224][ T5309]  kmem_cache_alloc+0x56/0x2f0
[  186.794027][ T5309]  ? key_alloc+0x2f3/0x1040
[  186.798568][ T5309]  key_alloc+0x2f3/0x1040
[  186.802984][ T5309]  keyring_alloc+0x41/0xa0
[  186.807442][ T5309]  lookup_user_key+0x408/0x1090
[  186.812442][ T5309]  ? lookup_user_key_possessed+0x40/0x40
[  186.818120][ T5309]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  186.824179][ T5309]  ? bpf_lsm_capable+0x5/0x10
[  186.828988][ T5309]  ? security_capable+0x85/0xb0
[  186.833887][ T5309]  keyctl_get_persistent+0x247/0x750
[  186.839233][ T5309]  ? proc_key_users_show+0x310/0x310
[  186.844577][ T5309]  ? ksys_write+0x1bd/0x240
[  186.849128][ T5309]  ? common_file_perm+0x171/0x1c0
[  186.854208][ T5309]  ? __lock_acquire+0x7c50/0x7c50
[  186.859372][ T5309]  __se_sys_keyctl+0x4ad/0x7a0
[  186.864180][ T5309]  ? __x64_sys_keyctl+0xc0/0xc0
[  186.869063][ T5309]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  186.874722][ T5309]  ? mutex_unlock+0x10/0x10
[  186.879244][ T5309]  ? __fget_files+0x44a/0x4d0
[  186.883950][ T5309]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  186.890489][ T5309]  ? lock_chain_count+0x20/0x20
[  186.895388][ T5309]  ? lockdep_hardirqs_on+0x94/0x140
[  186.900706][ T5309]  ? __x64_sys_keyctl+0x1c/0xc0
[  186.905581][ T5309]  do_syscall_64+0x4c/0xa0
[  186.910019][ T5309]  ? clear_bhb_loop+0x60/0xb0
[  186.914714][ T5309]  ? clear_bhb_loop+0x60/0xb0
[  186.919409][ T5309]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.925325][ T5309] RIP: 0033:0x7f5f6918eba9
[  186.929752][ T5309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.949457][ T5309] RSP: 002b:00007f5f6a07d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  186.957974][ T5309] RAX: ffffffffffffffda RBX: 00007f5f693d5fa0 RCX: 00007f5f6918eba9
[  186.965958][ T5309] RDX: ffffffffffffffff RSI: 000000000000ee01 RDI: 0000000000000016
[  186.973944][ T5309] RBP: 00007f5f6a07d090 R08: 0000000000000000 R09: 0000000000000000
[  186.981949][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.989956][ T5309] R13: 00007f5f693d6038 R14: 00007f5f693d5fa0 R15: 00007ffc4cac8e78
[  186.997973][ T5309]  </TASK>
[  187.005684][  T951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  187.096658][  T951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  187.144151][ T4487] m920x_read = error: -19
[  187.148939][ T4487] dvb-usb: error while querying for an remote control event.
[  187.247823][  T951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  187.345067][  T951] usb 5-1: media controller created
[  187.461983][  T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  187.501752][ T5317] netlink: 188 bytes leftover after parsing attributes in process `syz.2.183'.
[  188.318463][ T4570] m920x_read = error: -19
[  188.323757][ T4570] dvb-usb: error while querying for an remote control event.
[  188.436894][ T4570] m920x_read = error: -19
[  188.441522][ T4570] dvb-usb: error while querying for an remote control event.
[  188.476195][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.489828][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.499189][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.513751][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.522417][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  188.530406][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.556919][ T4487] m920x_read = error: -19
[  188.561318][ T4487] dvb-usb: error while querying for an remote control event.
[  188.707084][  T951] az6027: usb out operation failed. (-71)
[  188.717142][  T951] az6027: usb out operation failed. (-71)
[  188.827988][  T951] stb0899_attach: Driver disabled by Kconfig
[  188.834050][  T951] az6027: no front-end attached
[  188.834050][  T951] 
[  189.045566][ T4329] m920x_read = error: -19
[  189.055219][ T4329] dvb-usb: error while querying for an remote control event.
[  189.066964][  T951] az6027: usb out operation failed. (-71)
[  189.125051][  T951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  189.258040][  T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  189.450409][  T951] dvb-usb: schedule remote query interval to 400 msecs.
[  189.620745][  T951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  189.782511][  T951] usb 5-1: USB disconnect, device number 5
[  189.802615][ T5384] loop6: detected capacity change from 0 to 512
[  189.853181][ T4377] m920x_read = error: -19
[  189.858809][ T4377] dvb-usb: error while querying for an remote control event.
[  189.947687][ T5384] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  190.010865][ T5388] netlink: 48 bytes leftover after parsing attributes in process `syz.4.187'.
[  190.036007][  T951] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  190.042637][ T5384] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  190.137672][ T4329] m920x_read = error: -19
[  190.142093][ T4329] dvb-usb: error while querying for an remote control event.
[  190.177362][ T5392] loop2: detected capacity change from 0 to 1024
[  190.225200][ T5384] EXT4-fs (loop6): 1 truncate cleaned up
[  190.242758][ T5384] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  190.278003][ T5335] chnl_net:caif_netlink_parms(): no params data found
[  190.314543][ T4374] m920x_read = error: -19
[  190.319142][ T4374] dvb-usb: error while querying for an remote control event.
[  190.567773][ T5392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  190.616657][ T4275] Bluetooth: hci1: command 0x0409 tx timeout
[  190.623209][ T4329] m920x_read = error: -19
[  190.629407][ T4329] dvb-usb: error while querying for an remote control event.
[  190.674087][ T5397] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #2: comm syz.2.188: corrupted in-inode xattr
[  190.747105][  T951] m920x_read = error: -19
[  190.751512][  T951] dvb-usb: error while querying for an remote control event.
[  190.796527][ T4329] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  190.824697][ T5392] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #2: comm syz.2.188: corrupted in-inode xattr
[  190.956626][  T951] m920x_read = error: -19
[  190.963220][  T951] dvb-usb: error while querying for an remote control event.
[  191.046846][ T4329] usb 7-1: Using ep0 maxpacket: 16
[  191.063753][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  191.072005][ T4329] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  191.190905][ T4329] usb 7-1: unable to read config index 0 descriptor/start: -61
[  191.245028][ T4329] usb 7-1: can't read configurations, error -61
[  191.277960][ T4374] m920x_read = error: -19
[  191.285598][ T4374] dvb-usb: error while querying for an remote control event.
[  191.315129][ T5335] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.333018][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.364765][ T5335] device bridge_slave_0 entered promiscuous mode
[  191.438877][ T4329] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  191.446653][ T4374] m920x_read = error: -19
[  191.456871][ T4374] dvb-usb: error while querying for an remote control event.
[  191.474478][ T5335] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.486116][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.513001][ T5335] device bridge_slave_1 entered promiscuous mode
[  191.586502][ T4374] m920x_read = error: -19
[  191.591361][ T4374] dvb-usb: error while querying for an remote control event.
[  191.657119][ T4329] usb 7-1: Using ep0 maxpacket: 16
[  191.673713][ T4329] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  191.698405][ T5335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.718232][ T4329] usb 7-1: unable to read config index 0 descriptor/start: -61
[  191.725878][ T4329] usb 7-1: can't read configurations, error -61
[  191.883101][ T5335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.923359][ T4329] usb usb7-port1: attempt power cycle
[  191.929500][ T4374] m920x_read = error: -19
[  191.933972][ T4374] dvb-usb: error while querying for an remote control event.
[  192.696359][ T4275] Bluetooth: hci1: command 0x041b tx timeout
[  192.707662][ T4374] m920x_read = error: -19
[  192.717402][ T4374] dvb-usb: error while querying for an remote control event.
[  192.736670][ T5414] fuse: Bad value for 'fd'
[  192.907844][  T951] m920x_read = error: -19
[  192.912359][  T951] dvb-usb: error while querying for an remote control event.
[  192.987730][ T4329] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  193.042339][ T4906] EXT4-fs (loop6): unmounting filesystem.
[  193.050371][  T951] m920x_read = error: -19
[  193.054842][  T951] dvb-usb: error while querying for an remote control event.
[  193.063052][ T5335] team0: Port device team_slave_0 added
[  193.099968][ T5416] loop5: detected capacity change from 0 to 1764
[  193.187816][ T5335] team0: Port device team_slave_1 added
[  193.208848][  T951] m920x_read = error: -19
[  193.216356][ T4329] usb 7-1: device not accepting address 7, error -71
[  193.226106][  T951] dvb-usb: error while querying for an remote control event.
[  193.375937][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.394652][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.436525][ T4374] m920x_read = error: -19
[  193.440046][ T5335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.454279][ T5420] loop6: detected capacity change from 0 to 256
[  193.461959][ T4374] dvb-usb: error while querying for an remote control event.
[  193.476363][  T951] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  193.519010][ T5420] FAT-fs (loop6): Directory bread(block 64) failed
[  193.528152][ T5420] FAT-fs (loop6): Directory bread(block 65) failed
[  193.543105][ T5420] FAT-fs (loop6): Directory bread(block 66) failed
[  193.551179][ T5420] FAT-fs (loop6): Directory bread(block 67) failed
[  193.560120][ T5420] FAT-fs (loop6): Directory bread(block 68) failed
[  193.572290][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.580985][ T5420] FAT-fs (loop6): Directory bread(block 69) failed
[  193.588184][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.616033][ T5420] FAT-fs (loop6): Directory bread(block 70) failed
[  193.626270][ T4374] m920x_read = error: -19
[  193.630708][ T4374] dvb-usb: error while querying for an remote control event.
[  193.639147][ T5420] FAT-fs (loop6): Directory bread(block 71) failed
[  193.646773][ T5420] FAT-fs (loop6): Directory bread(block 72) failed
[  193.653486][ T5420] FAT-fs (loop6): Directory bread(block 73) failed
[  193.660542][ T5335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.676415][  T951] usb 6-1: Using ep0 maxpacket: 8
[  193.687523][  T951] usb 6-1: config 0 has an invalid interface number: 145 but max is 0
[  193.724789][  T951] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.729311][ T5408] loop4: detected capacity change from 0 to 40427
[  193.752117][ T5408] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  193.806424][ T5408] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  194.163396][  T951] usb 6-1: config 0 has no interface number 0
[  194.187414][  T951] usb 6-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  194.205596][ T5408] F2FS-fs (loop4): invalid crc value
[  194.220518][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.239469][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.269634][ T4377] m920x_read = error: -19
[  194.274103][ T4377] dvb-usb: error while querying for an remote control event.
[  194.287525][ T5408] F2FS-fs (loop4): Found nat_bits in checkpoint
[  194.307137][  T951] usb 6-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21
[  194.322411][  T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.342330][  T951] usb 6-1: Product: syz
[  194.355154][  T951] usb 6-1: Manufacturer: syz
[  194.375056][  T951] usb 6-1: SerialNumber: syz
[  194.502178][  T951] usb 6-1: config 0 descriptor??
[  194.624527][ T4330] m920x_read = error: -19
[  194.634846][ T4330] dvb-usb: error while querying for an remote control event.
[  194.776081][ T4275] Bluetooth: hci1: command 0x040f tx timeout
[  195.022076][  T951] usb 6-1: bad CDC descriptors
[  195.048290][  T951] usb 6-1: bad CDC descriptors
[  195.081313][  T951] usb 6-1: USB disconnect, device number 2
[  195.101159][ T4377] m920x_read = error: -19
[  195.105622][ T4377] dvb-usb: error while querying for an remote control event.
[  195.130133][ T5427] sp0: Synchronizing with TNC
[  195.226451][ T4487] m920x_read = error: -19
[  195.230859][ T4487] dvb-usb: error while querying for an remote control event.
[  195.368594][ T4487] m920x_read = error: -19
[  195.425134][ T4487] dvb-usb: error while querying for an remote control event.
[  195.636155][ T4487] m920x_read = error: -19
[  195.664343][ T4487] dvb-usb: error while querying for an remote control event.
[  195.927710][ T4487] m920x_read = error: -19
[  195.932135][ T4487] dvb-usb: error while querying for an remote control event.
[  196.086104][ T4487] m920x_read = error: -19
[  196.090585][ T4487] dvb-usb: error while querying for an remote control event.
[  196.152303][ T5437] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  196.155338][ T5335] device hsr_slave_0 entered promiscuous mode
[  196.161971][ T5437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  196.168475][   T26] audit: type=1800 audit(1757883265.289:2): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.198" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  196.179725][ T5437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  196.268599][ T5335] device hsr_slave_1 entered promiscuous mode
[  196.309957][ T4487] m920x_read = error: -19
[  196.314382][ T4487] dvb-usb: error while querying for an remote control event.
[  196.332389][ T5335] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.360303][ T5335] Cannot create hsr debugfs directory
[  196.390297][ T5447] netlink: 45 bytes leftover after parsing attributes in process `syz.4.199'.
[  196.452676][  T951] m920x_read = error: -19
[  196.461712][  T951] dvb-usb: error while querying for an remote control event.
[  196.484142][    T9] device hsr_slave_0 left promiscuous mode
[  196.494345][ T5447] loop4: detected capacity change from 0 to 64
[  196.639154][  T951] m920x_read = error: -19
[  196.644433][  T951] dvb-usb: error while querying for an remote control event.
[  196.684161][    T9] device hsr_slave_1 left promiscuous mode
[  196.952732][ T4275] Bluetooth: hci1: command 0x0419 tx timeout
[  197.115447][  T951] m920x_read = error: -19
[  197.164549][  T951] dvb-usb: error while querying for an remote control event.
[  197.646155][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.793177][  T951] m920x_read = error: -19
[  197.818537][  T951] dvb-usb: error while querying for an remote control event.
[  197.828352][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.878976][    T9] device bridge_slave_1 left promiscuous mode
[  197.899330][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.923331][    T9] device bridge_slave_0 left promiscuous mode
[  197.935810][ T4374] m920x_read = error: -19
[  197.941074][ T4374] dvb-usb: error while querying for an remote control event.
[  197.951352][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.069049][ T5465] loop2: detected capacity change from 0 to 256
[  198.089537][ T4374] m920x_read = error: -19
[  198.093918][ T4374] dvb-usb: error while querying for an remote control event.
[  198.108383][ T5464] loop4: detected capacity change from 0 to 8192
[  198.151173][ T5464] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  198.174656][ T5465] FAT-fs (loop2): Directory bread(block 64) failed
[  198.183375][ T5464] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  198.194943][ T5464] REISERFS (device loop4): using ordered data mode
[  198.201665][ T5464] reiserfs: using flush barriers
[  198.213864][ T5465] FAT-fs (loop2): Directory bread(block 65) failed
[  198.221068][ T5464] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  198.225882][ T4374] m920x_read = error: -19
[  198.238180][ T5465] FAT-fs (loop2): Directory bread(block 66) failed
[  198.251650][ T5465] FAT-fs (loop2): Directory bread(block 67) failed
[  198.258933][ T5465] FAT-fs (loop2): Directory bread(block 68) failed
[  198.266133][ T5465] FAT-fs (loop2): Directory bread(block 69) failed
[  198.276189][ T5464] REISERFS (device loop4): checking transaction log (loop4)
[  198.284220][ T5465] FAT-fs (loop2): Directory bread(block 70) failed
[  198.293574][ T5465] FAT-fs (loop2): Directory bread(block 71) failed
[  198.308091][ T5465] FAT-fs (loop2): Directory bread(block 72) failed
[  198.326125][ T5464] REISERFS (device loop4): Using r5 hash to sort names
[  198.368079][ T5464] REISERFS warning (device loop4): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids
[  198.393105][ T5465] FAT-fs (loop2): Directory bread(block 73) failed
[  198.436837][ T5464] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  199.122934][ T4374] dvb-usb: error while querying for an remote control event.
[  199.236504][ T4374] m920x_read = error: -19
[  199.241190][ T4374] dvb-usb: error while querying for an remote control event.
[  199.412104][ T4374] m920x_read = error: -19
[  199.419031][ T4374] dvb-usb: error while querying for an remote control event.
[  199.565726][ T4374] m920x_read = error: -19
[  199.570157][ T4374] dvb-usb: error while querying for an remote control event.
[  199.715559][ T4374] m920x_read = error: -19
[  199.720063][ T4374] dvb-usb: error while querying for an remote control event.
[  199.779906][ T5476] FAULT_INJECTION: forcing a failure.
[  199.779906][ T5476] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.793135][ T5476] CPU: 1 PID: 5476 Comm: syz.4.208 Not tainted syzkaller #0
[  199.800465][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  199.810567][ T5476] Call Trace:
[  199.813889][ T5476]  <TASK>
[  199.816856][ T5476]  dump_stack_lvl+0x168/0x22e
[  199.821598][ T5476]  ? show_regs_print_info+0x12/0x12
[  199.826835][ T5476]  ? load_image+0x3b0/0x3b0
[  199.831388][ T5476]  ? __lock_acquire+0x7c50/0x7c50
[  199.836456][ T5476]  ? __virt_addr_valid+0x188/0x540
[  199.841617][ T5476]  should_fail_ex+0x399/0x4d0
[  199.846344][ T5476]  _copy_from_user+0x2c/0x170
[  199.851067][ T5476]  iovec_from_user+0x143/0x360
[  199.855901][ T5476]  __import_iovec+0x6d/0x500
[  199.860558][ T5476]  ? __might_fault+0xa6/0x120
[  199.865304][ T5476]  import_iovec+0x6f/0xa0
[  199.869688][ T5476]  ___sys_sendmsg+0x1e4/0x290
[  199.874416][ T5476]  ? __sys_sendmsg+0x270/0x270
[  199.879244][ T5476]  ? lockdep_hardirqs_on+0x94/0x140
[  199.884508][ T5476]  ? __fdget+0x17c/0x200
[  199.888807][ T5476]  __sys_sendmmsg+0x272/0x490
[  199.893622][ T5476]  ? __ia32_sys_sendmsg+0x80/0x80
[  199.898735][ T5476]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  199.904771][ T5476]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  199.910802][ T5476]  ? lock_chain_count+0x20/0x20
[  199.915706][ T5476]  __x64_sys_sendmmsg+0x9c/0xb0
[  199.920650][ T5476]  do_syscall_64+0x4c/0xa0
[  199.925106][ T5476]  ? clear_bhb_loop+0x60/0xb0
[  199.929818][ T5476]  ? clear_bhb_loop+0x60/0xb0
[  199.934540][ T5476]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  199.940515][ T5476] RIP: 0033:0x7f648fb8eba9
[  199.944966][ T5476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.964709][ T5476] RSP: 002b:00007f6490a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  199.973166][ T5476] RAX: ffffffffffffffda RBX: 00007f648fdd6180 RCX: 00007f648fb8eba9
[  199.981171][ T5476] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 000000000000000c
[  199.989196][ T5476] RBP: 00007f6490a37090 R08: 0000000000000000 R09: 0000000000000000
[  199.997289][ T5476] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001
[  200.005374][ T5476] R13: 00007f648fdd6218 R14: 00007f648fdd6180 R15: 00007ffd1822a7e8
[  200.013391][ T5476]  </TASK>
[  200.746989][ T4374] m920x_read = error: -19
[  200.751524][ T4374] dvb-usb: error while querying for an remote control event.
[  200.918247][ T4374] m920x_read = error: -19
[  200.923025][ T4374] dvb-usb: error while querying for an remote control event.
[  201.050104][ T4374] m920x_read = error: -19
[  201.054619][ T4374] dvb-usb: error while querying for an remote control event.
[  201.284664][ T4374] m920x_read = error: -19
[  201.289652][ T4374] dvb-usb: error while querying for an remote control event.
[  201.415472][ T4374] m920x_read = error: -19
[  201.420179][ T4374] dvb-usb: error while querying for an remote control event.
[  201.425248][ T4275] Bluetooth: hci3: command 0x0406 tx timeout
[  201.427777][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  201.433665][ T4275] Bluetooth: hci0: command 0x0406 tx timeout
[  201.480437][    T9] team0 (unregistering): Port device team_slave_1 removed
[  201.521877][ T5481] x_tables: duplicate underflow at hook 1
[  201.543147][    T9] team0 (unregistering): Port device team_slave_0 removed
[  201.555408][ T4374] m920x_read = error: -19
[  201.559815][ T4374] dvb-usb: error while querying for an remote control event.
[  201.629875][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.680911][ T4374] m920x_read = error: -19
[  201.686098][ T4374] dvb-usb: error while querying for an remote control event.
[  201.699463][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.795391][ T4377] m920x_read = error: -19
[  201.800070][ T4377] dvb-usb: error while querying for an remote control event.
[  201.915337][ T4377] m920x_read = error: -19
[  201.921349][ T4377] dvb-usb: error while querying for an remote control event.
[  201.978965][ T4374] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  202.040690][ T4377] m920x_read = error: -19
[  202.045327][ T4377] dvb-usb: error while querying for an remote control event.
[  202.156676][ T4377] m920x_read = error: -19
[  202.161096][ T4377] dvb-usb: error while querying for an remote control event.
[  202.172344][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.182466][ T4374] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  202.191962][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.202127][ T4374] usb 3-1: config 0 descriptor??
[  202.218682][ T4374] hub 3-1:0.0: bad descriptor, ignoring hub
[  202.224789][ T4374] hub: probe of 3-1:0.0 failed with error -5
[  202.238521][ T4374] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  202.278274][ T4377] m920x_read = error: -19
[  202.282702][ T4377] dvb-usb: error while querying for an remote control event.
[  202.318754][    T9] bond0 (unregistering): Released all slaves
[  202.396742][ T4377] m920x_read = error: -19
[  202.401414][ T4377] dvb-usb: error while querying for an remote control event.
[  202.416008][ T5455] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  202.425576][ T5455] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  202.435626][ T5455] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  202.443815][   T26] audit: type=1800 audit(1757883271.559:3): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.203" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  202.555904][  T951] m920x_read = error: -19
[  202.560530][  T951] dvb-usb: error while querying for an remote control event.
[  202.696226][ T5489] FAULT_INJECTION: forcing a failure.
[  202.696226][ T5489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.714168][ T4377] m920x_read = error: -19
[  202.720260][ T4377] dvb-usb: error while querying for an remote control event.
[  202.728142][ T5489] CPU: 0 PID: 5489 Comm: syz.5.212 Not tainted syzkaller #0
[  202.735482][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  202.745659][ T5489] Call Trace:
[  202.748955][ T5489]  <TASK>
[  202.751902][ T5489]  dump_stack_lvl+0x168/0x22e
[  202.756607][ T5489]  ? show_regs_print_info+0x12/0x12
[  202.761825][ T5489]  ? load_image+0x3b0/0x3b0
[  202.766358][ T5489]  ? __lock_acquire+0x7c50/0x7c50
[  202.771410][ T5489]  ? tomoyo_path_number_perm+0x503/0x600
[  202.777070][ T5489]  should_fail_ex+0x399/0x4d0
[  202.781777][ T5489]  _copy_from_user+0x2c/0x170
[  202.786478][ T5489]  video_usercopy+0x32b/0x1440
[  202.791271][ T5489]  ? video_ioctl2+0x30/0x30
[  202.795805][ T5489]  ? v4l_printk_ioctl+0x130/0x130
[  202.800873][ T5489]  v4l2_ioctl+0x183/0x1d0
[  202.805286][ T5489]  ? v4l2_poll+0x2b0/0x2b0
[  202.809992][ T5489]  __se_sys_ioctl+0xfa/0x170
[  202.814605][ T5489]  do_syscall_64+0x4c/0xa0
[  202.819039][ T5489]  ? clear_bhb_loop+0x60/0xb0
[  202.823730][ T5489]  ? clear_bhb_loop+0x60/0xb0
[  202.828421][ T5489]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.834339][ T5489] RIP: 0033:0x7effd9d8eba9
[  202.838840][ T5489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.858570][ T5489] RSP: 002b:00007effdabfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.867027][ T5489] RAX: ffffffffffffffda RBX: 00007effd9fd5fa0 RCX: 00007effd9d8eba9
[  202.875190][ T5489] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003
[  202.883174][ T5489] RBP: 00007effdabfa090 R08: 0000000000000000 R09: 0000000000000000
[  202.891248][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.899230][ T5489] R13: 00007effd9fd6038 R14: 00007effd9fd5fa0 R15: 00007ffe85e6d7c8
[  202.907322][ T5489]  </TASK>
[  202.910520][    C0] vkms_vblank_simulate: vblank timer overrun
[  202.920174][ T4330] m920x_read = error: -19
[  202.924565][ T4330] dvb-usb: error while querying for an remote control event.
[  202.965339][ T4330] usb 3-1: USB disconnect, device number 9
[  202.972653][ T5491] loop4: detected capacity change from 0 to 64
[  203.094622][ T4374] m920x_read = error: -19
[  203.100667][ T4374] dvb-usb: error while querying for an remote control event.
[  203.154611][   T26] audit: type=1326 audit(1757883272.289:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648fb8eba9 code=0x7ffc0000
[  203.178467][   T26] audit: type=1326 audit(1757883272.289:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f648fb8eba9 code=0x7ffc0000
[  203.223761][ T5491] Falling back ldisc for ttyS3.
[  203.225260][ T4330] m920x_read = error: -19
[  203.233334][ T4330] dvb-usb: error while querying for an remote control event.
[  203.242413][   T26] audit: type=1326 audit(1757883272.289:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648fb8eba9 code=0x7ffc0000
[  203.267922][   T26] audit: type=1326 audit(1757883272.299:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f648fb8eba9 code=0x7ffc0000
[  203.291075][   T26] audit: type=1326 audit(1757883272.299:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648fb8eba9 code=0x7ffc0000
[  203.342612][   T26] audit: type=1326 audit(1757883272.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648fb8eba9 code=0x7ffc0000
[  203.397849][ T5335] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  203.415541][ T4330] m920x_read = error: -19
[  203.420068][ T4330] dvb-usb: error while querying for an remote control event.
[  203.440299][ T5335] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  203.471241][ T5335] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  203.525172][ T5335] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  203.575622][ T4377] m920x_read = error: -19
[  203.580077][ T4377] dvb-usb: error while querying for an remote control event.
[  204.018348][ T4377] m920x_read = error: -19
[  204.066995][ T4377] dvb-usb: error while querying for an remote control event.
[  204.735026][  T951] m920x_read = error: -19
[  204.739480][  T951] dvb-usb: error while querying for an remote control event.
[  204.896822][ T5525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'.
[  204.906713][ T5525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'.
[  204.916029][ T4377] m920x_read = error: -19
[  204.920619][ T4377] dvb-usb: error while querying for an remote control event.
[  207.498984][ T4377] m920x_read = error: -19
[  207.503395][ T4377] dvb-usb: error while querying for an remote control event.
[  207.531401][ T5335] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.657501][ T5335] 8021q: adding VLAN 0 to HW filter on device team0
[  207.687140][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  207.705961][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  207.724822][ T4377] m920x_read = error: -19
[  207.729218][ T4377] dvb-usb: error while querying for an remote control event.
[  207.762461][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  207.773389][ T5532] FAULT_INJECTION: forcing a failure.
[  207.773389][ T5532] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.794541][ T5532] CPU: 1 PID: 5532 Comm: syz.4.224 Not tainted syzkaller #0
[  207.801893][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  207.812050][ T5532] Call Trace:
[  207.815335][ T5532]  <TASK>
[  207.818275][ T5532]  dump_stack_lvl+0x168/0x22e
[  207.822980][ T5532]  ? show_regs_print_info+0x12/0x12
[  207.828192][ T5532]  ? load_image+0x3b0/0x3b0
[  207.832711][ T5532]  ? __lock_acquire+0x7c50/0x7c50
[  207.837749][ T5532]  ? __lock_acquire+0x12e5/0x7c50
[  207.842800][ T5532]  ? mark_lock+0x94/0x320
[  207.847143][ T5532]  should_fail_ex+0x399/0x4d0
[  207.851885][ T5532]  _copy_from_user+0x2c/0x170
[  207.854990][ T5530] loop5: detected capacity change from 0 to 4096
[  207.856567][ T5532]  kvm_arch_vm_ioctl+0x791/0x15a0
[  207.867995][ T5532]  ? kvm_arch_pm_notifier+0x2b0/0x2b0
[  207.873409][ T5532]  ? is_bpf_text_address+0x22/0x2a0
[  207.874581][ T4374] m920x_read = error: -19
[  207.878622][ T5532]  ? __lock_acquire+0x7c50/0x7c50
[  207.882982][ T4374] dvb-usb: error while querying for an remote control event.
[  207.888002][ T5532]  ? is_bpf_text_address+0x28b/0x2a0
[  207.888034][ T5532]  ? is_bpf_text_address+0x22/0x2a0
[  207.888068][ T5532]  ? kernel_text_address+0x9c/0xd0
[  207.888095][ T5532]  ? __kernel_text_address+0x9/0x30
[  207.888121][ T5532]  ? unwind_get_return_address+0x49/0x80
[  207.888146][ T5532]  ? stack_trace_save+0xe0/0xe0
[  207.888170][ T5532]  ? arch_stack_walk+0xf2/0x140
[  207.888204][ T5532]  ? stack_trace_save+0x98/0xe0
[  207.888232][ T5532]  ? __stack_depot_save+0x35/0x460
[  207.941728][ T5532]  ? security_file_ioctl+0x6c/0xa0
[  207.946859][ T5532]  ? __se_sys_ioctl+0x48/0x170
[  207.951653][ T5532]  ? do_syscall_64+0x4c/0xa0
[  207.956252][ T5532]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.962348][ T5532]  ? kasan_set_track+0x60/0x70
[  207.967135][ T5532]  ? kasan_set_track+0x4b/0x70
[  207.972034][ T5532]  ? kasan_save_free_info+0x2d/0x50
[  207.977251][ T5532]  ? ____kasan_slab_free+0x126/0x1e0
[  207.982744][ T5532]  ? slab_free_freelist_hook+0x131/0x1a0
[  207.988403][ T5532]  ? __kmem_cache_free+0xb6/0x1f0
[  207.993519][ T5532]  ? tomoyo_path_number_perm+0x4ae/0x600
[  207.999161][ T5532]  ? security_file_ioctl+0x6c/0xa0
[  208.004309][ T5532]  ? __se_sys_ioctl+0x48/0x170
[  208.009105][ T5532]  ? do_syscall_64+0x4c/0xa0
[  208.013721][ T5532]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  208.019911][ T5532]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  208.025928][ T5532]  ? do_vfs_ioctl+0xcb5/0x1d10
[  208.030709][ T5532]  ? __ia32_compat_sys_ioctl+0x780/0x780
[  208.036455][ T5532]  ? tomoyo_path_number_perm+0x1b6/0x600
[  208.042203][ T5532]  kvm_vm_ioctl+0x70e/0xa80
[  208.046721][ T5532]  ? kvm_device_release+0x1f0/0x1f0
[  208.051940][ T5532]  ? __kmem_cache_free+0xb6/0x1f0
[  208.056982][ T5532]  ? tomoyo_path_number_perm+0x503/0x600
[  208.062655][ T5532]  ? tomoyo_path_number_perm+0x1b6/0x600
[  208.068495][ T5532]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  208.073998][ T5532]  ? __fget_files+0x28/0x4d0
[  208.078622][ T5532]  ? bpf_lsm_file_ioctl+0x5/0x10
[  208.083572][ T5532]  ? security_file_ioctl+0x7c/0xa0
[  208.088691][ T5532]  ? kvm_device_release+0x1f0/0x1f0
[  208.093901][ T5532]  __se_sys_ioctl+0xfa/0x170
[  208.098503][ T5532]  do_syscall_64+0x4c/0xa0
[  208.102941][ T5532]  ? clear_bhb_loop+0x60/0xb0
[  208.107643][ T5532]  ? clear_bhb_loop+0x60/0xb0
[  208.112327][ T5532]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  208.118325][ T5532] RIP: 0033:0x7f648fb8eba9
[  208.122761][ T5532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.142465][ T5532] RSP: 002b:00007f6490a79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  208.150926][ T5532] RAX: ffffffffffffffda RBX: 00007f648fdd5fa0 RCX: 00007f648fb8eba9
[  208.158920][ T5532] RDX: 0000200000000140 RSI: 000000004070aea0 RDI: 0000000000000004
[  208.166900][ T5532] RBP: 00007f6490a79090 R08: 0000000000000000 R09: 0000000000000000
[  208.174975][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.183007][ T5532] R13: 00007f648fdd6038 R14: 00007f648fdd5fa0 R15: 00007ffd1822a7e8
[  208.191000][ T5532]  </TASK>
[  208.215378][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  208.224133][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.231359][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.243216][ T5530] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  208.280204][ T5530] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  208.305259][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  208.311226][ T5530] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  208.346728][ T5530] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  208.360589][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  208.369259][ T4377] m920x_read = error: -19
[  208.373728][ T4377] dvb-usb: error while querying for an remote control event.
[  208.373825][ T5530] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  208.419860][ T5530] ntfs: volume version 3.1.
[  208.421206][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.431557][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.453454][ T5530] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  208.483518][ T5530] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  208.490661][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.524654][ T4377] m920x_read = error: -19
[  208.529449][ T5530] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  208.534705][ T4377] dvb-usb: error while querying for an remote control event.
[  208.585491][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  208.585587][ T5530] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  208.593735][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.636150][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.655956][ T5530] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  208.658429][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.697593][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.723152][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.734382][  T126] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  208.734591][ T4374] m920x_read = error: -19
[  208.774879][ T4374] dvb-usb: error while querying for an remote control event.
[  208.783695][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  208.845359][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.865521][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.915016][ T4374] m920x_read = error: -19
[  208.919426][ T4374] dvb-usb: error while querying for an remote control event.
[  208.938272][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.947250][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.964366][  T126] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  208.983439][   T52] block nbd0: Possible stuck request ffff888025068000: control (read@0,4096B). Runtime 90 seconds
[  208.999796][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.002616][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  209.017356][  T126] usb 3-1: config 0 descriptor??
[  209.034107][  T126] hub 3-1:0.0: bad descriptor, ignoring hub
[  209.043357][  T126] hub: probe of 3-1:0.0 failed with error -5
[  209.051474][  T126] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  209.069837][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  209.078517][  T951] m920x_read = error: -19
[  209.082924][  T951] dvb-usb: error while querying for an remote control event.
[  209.234639][  T951] m920x_read = error: -19
[  209.239225][  T951] dvb-usb: error while querying for an remote control event.
[  209.291945][ T5549] FAULT_INJECTION: forcing a failure.
[  209.291945][ T5549] name fail_futex, interval 1, probability 0, space 0, times 1
[  209.314573][ T5549] CPU: 1 PID: 5549 Comm: syz.4.229 Not tainted syzkaller #0
[  209.322200][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  209.332300][ T5549] Call Trace:
[  209.335609][ T5549]  <TASK>
[  209.338571][ T5549]  dump_stack_lvl+0x168/0x22e
[  209.343385][ T5549]  ? show_regs_print_info+0x12/0x12
[  209.348636][ T5549]  ? load_image+0x3b0/0x3b0
[  209.353198][ T5549]  ? __stack_depot_save+0x421/0x460
[  209.358450][ T5549]  ? verify_lock_unused+0x140/0x140
[  209.363857][ T5549]  should_fail_ex+0x399/0x4d0
[  209.368785][ T5549]  get_futex_key+0x18f/0xf50
[  209.373586][ T5549]  ? futex_setup_timer+0xc0/0xc0
[  209.378662][ T5549]  futex_wait_multiple+0x1e4/0x8d0
[  209.383905][ T5549]  ? __lock_acquire+0x7c50/0x7c50
[  209.388972][ T5549]  ? futex_wait_queue+0x1b0/0x1b0
[  209.394400][ T5549]  ? __might_fault+0xc2/0x120
[  209.399105][ T5549]  ? __might_fault+0xa6/0x120
[  209.404108][ T5549]  __se_sys_futex_waitv+0x548/0x650
[  209.409442][ T5549]  ? __x64_sys_futex_waitv+0xc0/0xc0
[  209.414800][ T5549]  ? lockdep_hardirqs_on+0x94/0x140
[  209.420667][ T5549]  ? __x64_sys_futex_waitv+0x1c/0xc0
[  209.426022][ T5549]  do_syscall_64+0x4c/0xa0
[  209.430465][ T5549]  ? clear_bhb_loop+0x60/0xb0
[  209.435163][ T5549]  ? clear_bhb_loop+0x60/0xb0
[  209.439858][ T5549]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  209.445822][ T5549] RIP: 0033:0x7f648fb8eba9
[  209.450251][ T5549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.470148][ T5549] RSP: 002b:00007f6490a79038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[  209.478581][ T5549] RAX: ffffffffffffffda RBX: 00007f648fdd5fa0 RCX: 00007f648fb8eba9
[  209.486657][ T5549] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080
[  209.494637][ T5549] RBP: 00007f6490a79090 R08: 0000000000000001 R09: 0000000000000000
[  209.502631][ T5549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.510616][ T5549] R13: 00007f648fdd6038 R14: 00007f648fdd5fa0 R15: 00007ffd1822a7e8
[  209.518613][ T5549]  </TASK>
[  209.522913][  T951] m920x_read = error: -19
[  209.530915][  T951] dvb-usb: error while querying for an remote control event.
[  209.565042][  T126] usb 3-1: USB disconnect, device number 10
[  209.759946][  T951] m920x_read = error: -19
[  209.876247][  T951] dvb-usb: error while querying for an remote control event.
[  209.876926][ T5552] loop5: detected capacity change from 0 to 1024
[  210.155084][ T5552] EXT4-fs: Ignoring removed bh option
[  210.168887][ T5552] EXT4-fs: inline encryption not supported
[  210.213613][ T5552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  210.245433][ T4374] m920x_read = error: -19
[  210.260225][ T4374] dvb-usb: error while querying for an remote control event.
[  210.404472][ T5552] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.230: lblock 2 mapped to illegal pblock 2 (length 1)
[  210.424420][ T4374] m920x_read = error: -19
[  210.432240][ T4374] dvb-usb: error while querying for an remote control event.
[  210.579015][ T5552] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.230: lblock 0 mapped to illegal pblock 48 (length 1)
[  210.615203][ T4374] m920x_read = error: -19
[  210.619660][ T4374] dvb-usb: error while querying for an remote control event.
[  211.467561][ T5554] loop6: detected capacity change from 0 to 32768
[  211.482972][ T5554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.231 (5554)
[  211.510981][ T5552] EXT4-fs error (device loop5): ext4_acquire_dquot:6816: comm syz.5.230: Failed to acquire dquot type 0
[  211.560372][ T4374] m920x_read = error: -19
[  211.569584][ T4374] dvb-usb: error while querying for an remote control event.
[  211.646861][ T5554] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.658180][ T5554] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  211.667208][ T5554] BTRFS info (device loop6): using free space tree
[  211.712894][ T5552] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  211.745206][ T4330] m920x_read = error: -19
[  211.754652][ T4330] dvb-usb: error while querying for an remote control event.
[  211.784362][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.811196][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.903571][ T5552] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.230: mark_inode_dirty error
[  211.946439][ T5335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.954523][ T4374] m920x_read = error: -19
[  211.960305][ T4374] dvb-usb: error while querying for an remote control event.
[  212.050152][ T5552] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  212.087889][ T5554] BTRFS info (device loop6): enabling ssd optimizations
[  212.134492][ T4330] m920x_read = error: -19
[  212.139033][ T4330] dvb-usb: error while querying for an remote control event.
[  212.190984][ T5552] EXT4-fs (loop5): 1 orphan inode deleted
[  212.218707][ T4418] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  212.276066][ T5552] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  212.324364][ T4377] m920x_read = error: -19
[  212.328875][ T4377] dvb-usb: error while querying for an remote control event.
[  212.381087][ T4418] EXT4-fs error (device loop5): ext4_release_dquot:6852: comm kworker/u4:9: Failed to release dquot type 0
[  212.579339][ T4377] m920x_read = error: -19
[  212.596242][ T4377] dvb-usb: error while querying for an remote control event.
[  213.515139][ T5552] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm syz.5.230: lblock 1 mapped to illegal pblock 1 (length 1)
[  213.553941][ T4330] m920x_read = error: -19
[  213.558860][ T4330] dvb-usb: error while querying for an remote control event.
[  213.575623][ T5552] __quota_error: 9 callbacks suppressed
[  213.575641][ T5552] Quota error (device loop5): find_next_id: Can't read quota tree block 1
[  213.598974][ T4906] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.641240][ T5591] sctp: failed to load transform for md5: -2
[  213.685698][ T4330] m920x_read = error: -19
[  213.690161][ T4330] dvb-usb: error while querying for an remote control event.
[  213.863946][ T4330] m920x_read = error: -19
[  213.868383][ T4330] dvb-usb: error while querying for an remote control event.
[  213.900188][ T5602] loop4: detected capacity change from 0 to 512
[  213.991481][ T5602] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  214.005527][ T4330] m920x_read = error: -19
[  214.009938][ T4330] dvb-usb: error while querying for an remote control event.
[  214.083585][ T4658] EXT4-fs (loop5): unmounting filesystem.
[  214.096508][ T5602] EXT4-fs (loop4): 1 truncate cleaned up
[  214.103499][ T4658] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[  214.151522][ T5602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  214.173970][ T4330] m920x_read = error: -19
[  214.178426][ T4330] dvb-usb: error while querying for an remote control event.
[  214.217999][ T4658] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  214.220667][ T5614] loop6: detected capacity change from 0 to 8
[  214.260840][ T4658] EXT4-fs error (device loop5): ext4_quota_off:7122: inode #3: comm syz-executor: mark_inode_dirty error
[  214.274700][ T5614] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[  214.282176][ T5614] unable to read xattr id index table
[  214.352790][ T4330] m920x_read = error: -19
[  214.357378][ T4330] dvb-usb: error while querying for an remote control event.
[  214.431249][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  214.473924][ T4487] m920x_read = error: -19
[  214.478346][ T4487] dvb-usb: error while querying for an remote control event.
[  214.624406][ T4487] m920x_read = error: -19
[  214.760091][ T4487] dvb-usb: error while querying for an remote control event.
[  215.099110][ T4377] m920x_read = error: -19
[  215.113688][ T4377] dvb-usb: error while querying for an remote control event.
[  215.224370][ T4487] m920x_read = error: -19
[  215.229057][ T4487] dvb-usb: error while querying for an remote control event.
[  215.254345][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  215.279515][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  215.349971][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  215.363436][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  215.385141][ T5335] device veth0_vlan entered promiscuous mode
[  215.401138][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  215.409086][ T4487] m920x_read = error: -19
[  215.418858][ T4487] dvb-usb: error while querying for an remote control event.
[  215.430402][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  215.469318][ T5335] device veth1_vlan entered promiscuous mode
[  215.521251][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  215.539439][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  215.553612][ T4374] m920x_read = error: -19
[  215.561689][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  215.571402][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  215.579502][ T4374] dvb-usb: error while querying for an remote control event.
[  215.589846][ T5335] device veth0_macvtap entered promiscuous mode
[  215.637308][ T5335] device veth1_macvtap entered promiscuous mode
[  215.723926][ T4487] m920x_read = error: -19
[  215.728513][ T4487] dvb-usb: error while querying for an remote control event.
[  215.764203][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.776280][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.787057][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.798422][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.809736][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.881182][ T4374] m920x_read = error: -19
[  216.113055][ T4374] dvb-usb: error while querying for an remote control event.
[  216.473634][ T4453] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  216.532777][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.633742][ T4330] m920x_read = error: -19
[  216.638301][ T4330] dvb-usb: error while querying for an remote control event.
[  216.642972][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.658176][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.669319][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.681245][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.705445][ T4453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.724325][ T4453] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  216.736896][ T4453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.761120][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.763103][ T4453] usb 5-1: config 0 descriptor??
[  216.784115][ T4374] m920x_read = error: -19
[  216.786878][ T4453] hub 5-1:0.0: bad descriptor, ignoring hub
[  216.788598][ T4374] dvb-usb: error while querying for an remote control event.
[  216.797036][ T4453] hub: probe of 5-1:0.0 failed with error -5
[  216.839336][ T4453] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  216.849564][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  216.902386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  216.934730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  217.021919][ T4487] m920x_read = error: -19
[  217.047859][ T4487] dvb-usb: error while querying for an remote control event.
[  217.053733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  217.123171][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.170135][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.264045][ T4329] m920x_read = error: -19
[  217.865969][ T4329] dvb-usb: error while querying for an remote control event.
[  219.063879][ T5652] loop5: detected capacity change from 0 to 32768
[  219.342359][ T5652] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.244 (5652)
[  219.368139][ T5652] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.379039][ T5652] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  219.388125][ T5652] BTRFS info (device loop5): using free space tree
[  219.492014][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.585723][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.686484][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.742783][ T5652] BTRFS info (device loop5): enabling ssd optimizations
[  219.801688][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.898479][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.011808][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.148930][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.221992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  220.271971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  220.358241][ T5649] lo speed is unknown, defaulting to 1000
[  220.388713][ T5335] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.444466][ T4329] usb 5-1: USB disconnect, device number 6
[  220.455905][ T5335] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.584217][ T4329] m920x_read = error: -19
[  220.588816][ T4329] dvb-usb: error while querying for an remote control event.
[  220.601262][ T5335] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.616263][ T5335] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.644351][ T5649] lo speed is unknown, defaulting to 1000
[  220.681379][ T5649] lo speed is unknown, defaulting to 1000
[  220.698440][ T5649] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  220.734777][  T951] m920x_read = error: -19
[  220.740162][  T951] dvb-usb: error while querying for an remote control event.
[  220.773453][ T4658] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.842362][ T5649] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  220.883122][  T951] m920x_read = error: -19
[  220.887588][  T951] dvb-usb: error while querying for an remote control event.
[  221.007837][ T5649] lo speed is unknown, defaulting to 1000
[  221.014701][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.026406][ T5649] lo speed is unknown, defaulting to 1000
[  221.057316][ T5649] lo speed is unknown, defaulting to 1000
[  221.064031][ T5649] lo speed is unknown, defaulting to 1000
[  221.075407][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.181383][ T5649] lo speed is unknown, defaulting to 1000
[  221.350567][ T4606] m920x_read = error: -19
[  221.355213][ T4606] dvb-usb: error while querying for an remote control event.
[  221.373116][ T5649] lo speed is unknown, defaulting to 1000
[  221.400718][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  221.438105][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.447901][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.462206][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  221.481140][ T4488] m920x_read = error: -19
[  221.495448][ T4488] dvb-usb: error while querying for an remote control event.
[  221.612959][ T4488] m920x_read = error: -19
[  221.617342][ T4488] dvb-usb: error while querying for an remote control event.
[  221.772962][  T951] m920x_read = error: -19
[  222.024898][  T126] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  222.799499][  T951] dvb-usb: error while querying for an remote control event.
[  223.332794][  T951] m920x_read = error: -19
[  223.337217][  T951] dvb-usb: error while querying for an remote control event.
[  223.472777][  T951] m920x_read = error: -19
[  223.472787][  T126] usb 7-1: Using ep0 maxpacket: 8
[  223.477268][  T951] dvb-usb: error while querying for an remote control event.
[  223.505028][  T126] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  223.532221][  T126] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  223.561550][  T126] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  223.601368][  T126] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  223.754597][  T951] m920x_read = error: -19
[  223.759498][  T951] dvb-usb: error while querying for an remote control event.
[  223.789277][  T126] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  223.807970][  T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.118029][  T126] usb 7-1: GET_CAPABILITIES returned 0
[  224.537614][  T951] m920x_read = error: -19
[  224.542013][  T951] dvb-usb: error while querying for an remote control event.
[  224.572579][  T126] usbtmc 7-1:16.0: can't read capabilities
[  224.656075][ T5698] loop4: detected capacity change from 0 to 512
[  224.703329][ T4487] m920x_read = error: -19
[  224.707812][ T4487] dvb-usb: error while querying for an remote control event.
[  224.796301][ T5701] FAULT_INJECTION: forcing a failure.
[  224.796301][ T5701] name failslab, interval 1, probability 0, space 0, times 0
[  224.837987][ T5698] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  224.855911][ T5701] CPU: 0 PID: 5701 Comm: syz.5.255 Not tainted syzkaller #0
[  224.863617][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  224.873696][ T5701] Call Trace:
[  224.876987][ T5701]  <TASK>
[  224.879937][ T5701]  dump_stack_lvl+0x168/0x22e
[  224.884648][ T5701]  ? show_regs_print_info+0x12/0x12
[  224.890506][ T5701]  ? load_image+0x3b0/0x3b0
[  224.895211][ T5701]  ? __might_sleep+0xd0/0xd0
[  224.899826][ T5701]  ? __lock_acquire+0x7c50/0x7c50
[  224.904877][ T5701]  should_fail_ex+0x399/0x4d0
[  224.909581][ T5701]  should_failslab+0x5/0x20
[  224.914098][ T5701]  slab_pre_alloc_hook+0x59/0x310
[  224.919222][ T5701]  kmem_cache_alloc+0x56/0x2f0
[  224.924082][ T5701]  ? __pmd_alloc+0x11f/0x730
[  224.928690][ T5701]  __pmd_alloc+0x11f/0x730
[  224.933123][ T5701]  ? __lock_acquire+0x7c50/0x7c50
[  224.938345][ T5701]  ? do_raw_spin_lock+0x11d/0x280
[  224.943386][ T5701]  ? __pud_alloc+0x150/0x150
[  224.948104][ T5701]  ? __rwlock_init+0x140/0x140
[  224.952898][ T5701]  ? do_raw_spin_unlock+0x11d/0x230
[  224.958139][ T5701]  ? hugepage_vma_check+0x466/0x540
[  224.963367][ T5701]  handle_mm_fault+0x9b7/0x3e70
[  224.968250][ T5701]  ? numa_migrate_prep+0x250/0x250
[  224.973390][ T5701]  ? lock_chain_count+0x20/0x20
[  224.978360][ T5701]  ? aa_label_sk_perm+0x3e7/0x500
[  224.983412][ T5701]  ? lock_mm_and_find_vma+0xae/0x2f0
[  224.988726][ T5701]  do_user_addr_fault+0x51f/0xb10
[  224.993774][ T5701]  exc_page_fault+0x60/0x100
[  224.998381][ T5701]  ? __might_fault+0xa6/0x120
[  225.003101][ T5701]  asm_exc_page_fault+0x22/0x30
[  225.008400][ T5701] RIP: 0010:__get_user_4+0x1c/0x30
[  225.013524][ T5701] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba
[  225.033234][ T5701] RSP: 0018:ffffc90003ef7db8 EFLAGS: 00050206
[  225.039309][ T5701] RAX: 00002000000000c0 RBX: 00002000000000c0 RCX: f99d38cfe37f7800
[  225.047571][ T5701] RDX: ffffffffffffffff RSI: ffffffff8a8c1680 RDI: ffffffff8adefca0
[  225.055741][ T5701] RBP: ffffc90003ef7e90 R08: dffffc0000000000 R09: fffffbfff1c3eea6
[  225.063744][ T5701] R10: fffffbfff1c3eea6 R11: 1ffffffff1c3eea5 R12: 0000000000000101
[  225.071827][ T5701] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888059ca9000
[  225.079841][ T5701]  ax25_getsockopt+0xdd/0x7c0
[  225.084546][ T5701]  ? ax25_setsockopt+0xb00/0xb00
[  225.089695][ T5701]  ? aa_sock_opt_perm+0x74/0x100
[  225.094663][ T5701]  ? bpf_lsm_socket_getsockopt+0x5/0x10
[  225.100263][ T5701]  ? security_socket_getsockopt+0x7a/0xa0
[  225.106033][ T5701]  ? ax25_setsockopt+0xb00/0xb00
[  225.110993][ T5701]  __sys_getsockopt+0x1b0/0x230
[  225.115878][ T5701]  __x64_sys_getsockopt+0xb1/0xc0
[  225.121025][ T5701]  do_syscall_64+0x4c/0xa0
[  225.125658][ T5701]  ? clear_bhb_loop+0x60/0xb0
[  225.130360][ T5701]  ? clear_bhb_loop+0x60/0xb0
[  225.135050][ T5701]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.140966][ T5701] RIP: 0033:0x7effd9d8eba9
[  225.145390][ T5701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.165415][ T5701] RSP: 002b:00007effdabfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  225.174298][ T5701] RAX: ffffffffffffffda RBX: 00007effd9fd5fa0 RCX: 00007effd9d8eba9
[  225.182555][ T5701] RDX: 0000000000000001 RSI: 0000000000000101 RDI: 0000000000000004
[  225.190813][ T5701] RBP: 00007effdabfa090 R08: 00002000000000c0 R09: 0000000000000000
[  225.198809][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.206897][ T5701] R13: 00007effd9fd6038 R14: 00007effd9fd5fa0 R15: 00007ffe85e6d7c8
[  225.215167][ T5701]  </TASK>
[  225.232199][  T951] m920x_read = error: -19
[  225.236893][  T951] dvb-usb: error while querying for an remote control event.
[  225.383464][  T951] m920x_read = error: -19
[  225.387849][  T951] dvb-usb: error while querying for an remote control event.
[  225.512461][  T951] m920x_read = error: -19
[  225.516970][  T951] dvb-usb: error while querying for an remote control event.
[  225.642482][ T4329] m920x_read = error: -19
[  225.646909][ T4329] dvb-usb: error while querying for an remote control event.
[  225.823255][ T4329] m920x_read = error: -19
[  225.832473][ T4329] dvb-usb: error while querying for an remote control event.
[  225.952416][ T4329] m920x_read = error: -19
[  225.956968][ T4329] dvb-usb: error while querying for an remote control event.
[  226.898160][ T4329] m920x_read = error: -19
[  227.244792][ T5707] loop2: detected capacity change from 0 to 32768
[  228.261324][ T4329] dvb-usb: error while querying for an remote control event.
[  228.822706][ T4329] m920x_read = error: -19
[  228.827264][ T4329] dvb-usb: error while querying for an remote control event.
[  228.848977][ T5707] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.256 (5707)
[  228.868565][ T5707] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  228.880422][ T5707] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  228.889687][ T5707] BTRFS info (device loop2): using free space tree
[  228.939598][ T4329] usb 7-1: USB disconnect, device number 9
[  228.951798][  T951] m920x_read = error: -19
[  228.956683][  T951] dvb-usb: error while querying for an remote control event.
[  229.092121][  T951] m920x_read = error: -19
[  229.096547][  T951] dvb-usb: error while querying for an remote control event.
[  229.551963][ T4321] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  229.856739][ T4321] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.935759][ T4321] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  229.982950][ T4321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.055565][  T951] m920x_read = error: -19
[  230.059984][  T951] dvb-usb: error while querying for an remote control event.
[  230.088433][ T4321] usb 8-1: config 0 descriptor??
[  230.106656][ T4321] hub 8-1:0.0: bad descriptor, ignoring hub
[  230.120628][ T4321] hub: probe of 8-1:0.0 failed with error -5
[  230.128818][ T4321] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  230.145490][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.261'.
[  230.172123][  T951] m920x_read = error: -19
[  230.176647][  T951] dvb-usb: error while querying for an remote control event.
[  230.393636][  T951] m920x_read = error: -19
[  230.398028][  T951] dvb-usb: error while querying for an remote control event.
[  230.508530][ T5746] FAULT_INJECTION: forcing a failure.
[  230.508530][ T5746] name failslab, interval 1, probability 0, space 0, times 0
[  230.521580][ T5746] CPU: 1 PID: 5746 Comm: syz.6.262 Not tainted syzkaller #0
[  230.528911][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  230.539011][ T5746] Call Trace:
[  230.542328][ T5746]  <TASK>
[  230.545376][ T5746]  dump_stack_lvl+0x168/0x22e
[  230.550114][ T5746]  ? show_regs_print_info+0x12/0x12
[  230.555375][ T5746]  ? load_image+0x3b0/0x3b0
[  230.559924][ T5746]  ? __might_sleep+0xd0/0xd0
[  230.564648][ T5746]  ? __lock_acquire+0x7c50/0x7c50
[  230.569717][ T5746]  ? mark_lock+0x94/0x320
[  230.574095][ T5746]  should_fail_ex+0x399/0x4d0
[  230.578923][ T5746]  should_failslab+0x5/0x20
[  230.583651][ T5746]  slab_pre_alloc_hook+0x59/0x310
[  230.588723][ T5746]  ? __get_vm_area_node+0x122/0x330
[  230.594143][ T5746]  __kmem_cache_alloc_node+0x4f/0x260
[  230.599556][ T5746]  ? __get_vm_area_node+0x122/0x330
[  230.604796][ T5746]  kmalloc_node_trace+0x22/0xe0
[  230.609863][ T5746]  __get_vm_area_node+0x122/0x330
[  230.614930][ T5746]  __vmalloc_node_range+0x357/0x1390
[  230.620612][ T5746]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  230.626240][ T5746]  ? free_vm_area+0x50/0x50
[  230.630812][ T5746]  ? end_current_label_crit_section+0x170/0x170
[  230.637120][ T5746]  ? __lock_acquire+0x7c50/0x7c50
[  230.642281][ T5746]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  230.647870][ T5746]  __vmalloc+0x76/0x80
[  230.652065][ T5746]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  230.657659][ T5746]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  230.663074][ T5746]  ? bpf_lsm_capable+0x5/0x10
[  230.667883][ T5746]  bpf_prog_alloc+0x1c/0x1b0
[  230.672521][ T5746]  bpf_prog_load+0x7b6/0x15a0
[  230.677425][ T5746]  ? map_freeze+0x390/0x390
[  230.681982][ T5746]  ? __might_fault+0xa6/0x120
[  230.686725][ T5746]  ? lockdep_hardirqs_on+0x94/0x140
[  230.692000][ T5746]  ? __might_fault+0xa6/0x120
[  230.696727][ T5746]  ? __might_fault+0xc2/0x120
[  230.701461][ T5746]  ? __might_fault+0xa6/0x120
[  230.706188][ T5746]  ? bpf_lsm_bpf+0x5/0x10
[  230.710555][ T5746]  ? security_bpf+0x7a/0xa0
[  230.715667][ T5746]  __sys_bpf+0x520/0x6d0
[  230.720038][ T5746]  ? bpf_link_show_fdinfo+0x340/0x340
[  230.725468][ T5746]  ? lock_chain_count+0x20/0x20
[  230.730367][ T5746]  __x64_sys_bpf+0x78/0x90
[  230.734827][ T5746]  do_syscall_64+0x4c/0xa0
[  230.739281][ T5746]  ? clear_bhb_loop+0x60/0xb0
[  230.743993][ T5746]  ? clear_bhb_loop+0x60/0xb0
[  230.748701][ T5746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  230.754727][ T5746] RIP: 0033:0x7f5f6918eba9
[  230.759255][ T5746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.779070][ T5746] RSP: 002b:00007f5f6a05c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  230.787526][ T5746] RAX: ffffffffffffffda RBX: 00007f5f693d6090 RCX: 00007f5f6918eba9
[  230.795628][ T5746] RDX: 00000000000000a0 RSI: 0000200000000680 RDI: 0000000000000005
[  230.803804][ T5746] RBP: 00007f5f6a05c090 R08: 0000000000000000 R09: 0000000000000000
[  230.811896][ T5746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.819900][ T5746] R13: 00007f5f693d6128 R14: 00007f5f693d6090 R15: 00007ffc4cac8e78
[  230.828278][ T5746]  </TASK>
[  230.831397][    C1] vkms_vblank_simulate: vblank timer overrun
[  230.839483][ T5746] syz.6.262: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz6,mems_allowed=0-1
[  230.856830][ T5746] CPU: 1 PID: 5746 Comm: syz.6.262 Not tainted syzkaller #0
[  230.864165][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  230.874250][ T5746] Call Trace:
[  230.877562][ T5746]  <TASK>
[  230.880522][ T5746]  dump_stack_lvl+0x168/0x22e
[  230.885325][ T5746]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  230.891853][ T5746]  ? show_regs_print_info+0x12/0x12
[  230.897094][ T5746]  ? load_image+0x3b0/0x3b0
[  230.901642][ T5746]  ? __rcu_read_unlock+0x78/0xd0
[  230.906621][ T5746]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  230.913169][ T5746]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[  230.919725][ T5746]  warn_alloc+0x20c/0x300
[  230.924100][ T5746]  ? __get_vm_area_node+0x122/0x330
[  230.929344][ T5746]  ? zone_watermark_ok_safe+0x270/0x270
[  230.934928][ T5746]  ? rcu_is_watching+0x11/0xa0
[  230.939794][ T5746]  ? __get_vm_area_node+0x318/0x330
[  230.945048][ T5746]  __vmalloc_node_range+0x37c/0x1390
[  230.950497][ T5746]  ? free_vm_area+0x50/0x50
[  230.955037][ T5746]  ? end_current_label_crit_section+0x170/0x170
[  230.961323][ T5746]  ? __lock_acquire+0x7c50/0x7c50
[  230.966435][ T5746]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  230.972115][ T5746]  __vmalloc+0x76/0x80
[  230.976229][ T5746]  ? bpf_prog_alloc_no_stats+0x3a/0x3a0
[  230.981832][ T5746]  bpf_prog_alloc_no_stats+0x3a/0x3a0
[  230.987352][ T5746]  ? bpf_lsm_capable+0x5/0x10
[  230.992168][ T5746]  bpf_prog_alloc+0x1c/0x1b0
[  230.996806][ T5746]  bpf_prog_load+0x7b6/0x15a0
[  231.001544][ T5746]  ? map_freeze+0x390/0x390
[  231.006178][ T5746]  ? __might_fault+0xa6/0x120
[  231.010912][ T5746]  ? lockdep_hardirqs_on+0x94/0x140
[  231.016262][ T5746]  ? __might_fault+0xa6/0x120
[  231.020996][ T5746]  ? __might_fault+0xc2/0x120
[  231.025737][ T5746]  ? __might_fault+0xa6/0x120
[  231.030502][ T5746]  ? bpf_lsm_bpf+0x5/0x10
[  231.034868][ T5746]  ? security_bpf+0x7a/0xa0
[  231.039456][ T5746]  __sys_bpf+0x520/0x6d0
[  231.043741][ T5746]  ? bpf_link_show_fdinfo+0x340/0x340
[  231.049164][ T5746]  ? lock_chain_count+0x20/0x20
[  231.054065][ T5746]  __x64_sys_bpf+0x78/0x90
[  231.058625][ T5746]  do_syscall_64+0x4c/0xa0
[  231.063079][ T5746]  ? clear_bhb_loop+0x60/0xb0
[  231.067795][ T5746]  ? clear_bhb_loop+0x60/0xb0
[  231.072596][ T5746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.078554][ T5746] RIP: 0033:0x7f5f6918eba9
[  231.083005][ T5746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.102750][ T5746] RSP: 002b:00007f5f6a05c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  231.111466][ T5746] RAX: ffffffffffffffda RBX: 00007f5f693d6090 RCX: 00007f5f6918eba9
[  231.119474][ T5746] RDX: 00000000000000a0 RSI: 0000200000000680 RDI: 0000000000000005
[  231.127477][ T5746] RBP: 00007f5f6a05c090 R08: 0000000000000000 R09: 0000000000000000
[  231.135479][ T5746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.143477][ T5746] R13: 00007f5f693d6128 R14: 00007f5f693d6090 R15: 00007ffc4cac8e78
[  231.151520][ T5746]  </TASK>
[  231.154623][    C1] vkms_vblank_simulate: vblank timer overrun
[  231.162848][ T5746] Mem-Info:
[  231.298516][ T5746] active_anon:13041 inactive_anon:0 isolated_anon:0
[  231.298516][ T5746]  active_file:17314 inactive_file:39966 isolated_file:0
[  231.298516][ T5746]  unevictable:768 dirty:585 writeback:0
[  231.298516][ T5746]  slab_reclaimable:21635 slab_unreclaimable:96205
[  231.298516][ T5746]  mapped:40951 shmem:8361 pagetables:533
[  231.298516][ T5746]  sec_pagetables:0 bounce:0
[  231.298516][ T5746]  kernel_misc_reclaimable:0
[  231.298516][ T5746]  free:1308979 free_pcp:6991 free_cma:0
[  231.977373][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  232.392402][ T4602] m920x_read = error: -19
[  232.396933][ T4602] dvb-usb: error while querying for an remote control event.
[  232.441158][ T5707] BTRFS error (device loop2): open_ctree failed: -22
[  232.475084][ T5746] Node 0 active_anon:67896kB inactive_anon:0kB active_file:69256kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165476kB dirty:2336kB writeback:0kB shmem:31852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12624kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no
[  232.507914][    C1] vkms_vblank_simulate: vblank timer overrun
[  232.514653][ T4834] usb 8-1: USB disconnect, device number 2
[  232.525025][ T5746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  232.555566][    C1] vkms_vblank_simulate: vblank timer overrun
[  232.581082][ T5746] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  232.689774][ T5750] m920x_read = error: -19
[  232.700379][ T5750] dvb-usb: error while querying for an remote control event.
[  232.820627][ T5746] lowmem_reserve[]: 0 2527 2528 2528 2528
[  232.839108][ T5746] Node 0 DMA32 free:1285484kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:63896kB inactive_anon:0kB active_file:69256kB inactive_file:159620kB unevictable:1536kB writepending:2336kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:28124kB local_pcp:20124kB free_cma:0kB
[  232.913892][  T951] m920x_read = error: -19
[  232.918380][  T951] dvb-usb: error while querying for an remote control event.
[  233.631478][ T5746] lowmem_reserve[]: 0 0 1 1 1
[  233.636249][ T5746] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  233.644399][  T951] m920x_read = error: -19
[  233.663242][    C1] vkms_vblank_simulate: vblank timer overrun
[  233.725836][  T951] dvb-usb: error while querying for an remote control event.
[  233.800885][ T5746] lowmem_reserve[]: 0 0 0 0 0
[  233.831384][ T5746] Node 1 Normal free:3903696kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18848kB local_pcp:9376kB free_cma:0kB
[  233.841765][  T951] m920x_read = error: -19
[  233.861169][    C1] vkms_vblank_simulate: vblank timer overrun
[  233.937585][  T951] dvb-usb: error while querying for an remote control event.
[  234.057946][ T5746] lowmem_reserve[]: 0 0 0 0 0
[  234.071441][  T951] m920x_read = error: -19
[  234.075939][  T951] dvb-usb: error while querying for an remote control event.
[  234.111067][ T5746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  234.171173][ T5746] Node 0 DMA32: 479*4kB (UME) 718*8kB (UME) 105*16kB (UME) 260*32kB (UME) 399*64kB (UME) 47*128kB (UME) 30*256kB (ME) 11*512kB (ME) 13*1024kB (UME) 5*2048kB (UM) 298*4096kB (M) = 1306684kB
[  234.196797][ T5746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  234.208710][ T5746] Node 1 Normal: 232*4kB (UME) 56*8kB (UME) 33*16kB (UME) 51*32kB (UE) 18*64kB (UME) 11*128kB (UME) 3*256kB (UME) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 950*4096kB (M) = 3903696kB
[  234.227226][    C1] vkms_vblank_simulate: vblank timer overrun
[  234.321089][ T5746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.331342][ T5746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.340679][ T5746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  234.351379][ T5746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.360837][ T5746] 61489 total pagecache pages
[  234.371032][ T5746] 0 pages in swap cache
[  234.371505][  T951] m920x_read = error: -19
[  234.380349][  T951] dvb-usb: error while querying for an remote control event.
[  234.382644][ T5746] Free swap  = 124728kB
[  234.394378][ T5746] Total swap = 124996kB
[  234.402956][ T5746] 2097051 pages RAM
[  234.406795][ T5746] 0 pages HighMem/MovableOnly
[  234.413104][ T5746] 415114 pages reserved
[  234.417759][ T5746] 0 pages cma reserved
[  234.650180][  T951] m920x_read = error: -19
[  234.661598][  T951] dvb-usb: error while querying for an remote control event.
[  235.613024][  T951] m920x_read = error: -19
[  235.626886][  T951] dvb-usb: error while querying for an remote control event.
[  235.807690][  T951] m920x_read = error: -19
[  235.807715][  T951] dvb-usb: error while querying for an remote control event.
[  235.912061][ T5750] m920x_read = error: -19
[  235.916494][ T5750] dvb-usb: error while querying for an remote control event.
[  236.123384][ T5750] m920x_read = error: -19
[  236.137133][ T5750] dvb-usb: error while querying for an remote control event.
[  236.555430][ T5784] loop7: detected capacity change from 0 to 1024
[  236.631233][ T5750] m920x_read = error: -19
[  236.635641][ T5750] dvb-usb: error while querying for an remote control event.
[  236.771127][ T5750] m920x_read = error: -19
[  236.775609][ T5750] dvb-usb: error while querying for an remote control event.
[  236.921181][ T5750] m920x_read = error: -19
[  236.925938][ T5750] dvb-usb: error while querying for an remote control event.
[  237.141421][ T5750] m920x_read = error: -19
[  237.145805][ T5750] dvb-usb: error while querying for an remote control event.
[  237.321588][ T5750] m920x_read = error: -19
[  237.326278][ T5750] dvb-usb: error while querying for an remote control event.
[  237.511390][ T5750] m920x_read = error: -19
[  237.515862][ T5750] dvb-usb: error while querying for an remote control event.
[  237.671181][ T4602] m920x_read = error: -19
[  237.678527][ T4602] dvb-usb: error while querying for an remote control event.
[  237.841783][ T4602] m920x_read = error: -19
[  237.846332][ T4602] dvb-usb: error while querying for an remote control event.
[  238.145811][ T4602] m920x_read = error: -19
[  238.160900][ T4602] dvb-usb: error while querying for an remote control event.
[  238.392794][ T4602] m920x_read = error: -19
[  238.397611][ T4602] dvb-usb: error while querying for an remote control event.
[  239.185727][ T4602] m920x_read = error: -19
[  239.190565][ T4602] dvb-usb: error while querying for an remote control event.
[  239.213722][   T52] block nbd0: Possible stuck request ffff888025068000: control (read@0,4096B). Runtime 120 seconds
[  239.302263][ T4602] m920x_read = error: -19
[  239.306670][ T4602] dvb-usb: error while querying for an remote control event.
[  240.506658][ T5803] loop4: detected capacity change from 0 to 32768
[  240.522746][ T5803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.276 (5803)
[  240.545080][ T5803] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.555716][ T5803] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  240.564763][ T5803] BTRFS info (device loop4): using free space tree
[  241.224029][  T951] m920x_read = error: -19
[  241.228571][  T951] dvb-usb: error while querying for an remote control event.
[  242.370368][ T4278] Bluetooth: hci4: command 0x0406 tx timeout
[  242.550549][ T4602] m920x_read = error: -19
[  242.555143][ T4602] dvb-usb: error while querying for an remote control event.
[  242.670341][ T4602] m920x_read = error: -19
[  242.674737][ T4602] dvb-usb: error while querying for an remote control event.
[  242.777916][ T5803] BTRFS info (device loop4): enabling ssd optimizations
[  242.912885][  T951] m920x_read = error: -19
[  242.917302][  T951] dvb-usb: error while querying for an remote control event.
[  242.924713][ T4321] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  242.954282][ T5831] loop6: detected capacity change from 0 to 128
[  243.021063][ T5831] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  243.055454][ T5831] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.090347][  T951] m920x_read = error: -19
[  243.094756][  T951] dvb-usb: error while querying for an remote control event.
[  243.111852][ T4321] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.183371][ T4321] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  243.230259][ T4321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.242052][  T951] m920x_read = error: -19
[  243.246493][  T951] dvb-usb: error while querying for an remote control event.
[  243.259838][ T4321] usb 8-1: config 0 descriptor??
[  243.311362][ T4321] hub 8-1:0.0: bad descriptor, ignoring hub
[  243.311382][ T4321] hub: probe of 8-1:0.0 failed with error -5
[  243.312848][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.332990][ T4321] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  243.341181][ T5836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.281'.
[  243.345109][ T5836] netlink: 40 bytes leftover after parsing attributes in process `syz.5.281'.
[  243.358717][ T5836] netlink: 2 bytes leftover after parsing attributes in process `syz.5.281'.
[  243.398977][ T5836] loop5: detected capacity change from 0 to 512
[  243.564069][ T5836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  243.564118][ T5836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  243.581160][ T5836] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.281: invalid block
[  243.629556][ T5836] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.281: invalid indirect mapped block 4294967295 (level 1)
[  243.633104][ T5836] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.281: invalid indirect mapped block 4294967295 (level 1)
[  243.634734][ T5836] EXT4-fs (loop5): 2 truncates cleaned up
[  243.634767][ T5836] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  243.669470][ T4598] m920x_read = error: -19
[  243.774748][ T4598] dvb-usb: error while querying for an remote control event.
[  243.792874][ T4658] EXT4-fs (loop5): unmounting filesystem.
[  243.891516][ T4598] m920x_read = error: -19
[  243.895903][ T4598] dvb-usb: error while querying for an remote control event.
[  243.919047][ T4906] EXT4-fs (loop6): unmounting filesystem.
[  243.921293][ T4321] usb 8-1: USB disconnect, device number 3
[  244.002338][ T5843] loop2: detected capacity change from 0 to 1024
[  244.050521][ T4598] m920x_read = error: -19
[  244.060484][ T4598] dvb-usb: error while querying for an remote control event.
[  244.257228][ T4598] m920x_read = error: -19
[  244.271047][ T4598] dvb-usb: error while querying for an remote control event.
[  245.083732][ T4598] m920x_read = error: -19
[  245.088144][ T4598] dvb-usb: error while querying for an remote control event.
[  245.100192][ T5845] loop6: detected capacity change from 0 to 2368
[  245.262989][ T4598] m920x_read = error: -19
[  245.267825][ T4598] dvb-usb: error while querying for an remote control event.
[  245.759359][ T4598] m920x_read = error: -19
[  245.770659][ T4598] dvb-usb: error while querying for an remote control event.
[  245.918516][ T5859] FAULT_INJECTION: forcing a failure.
[  245.918516][ T5859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.931993][ T5859] CPU: 1 PID: 5859 Comm: syz.5.287 Not tainted syzkaller #0
[  245.939430][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  245.949809][ T5859] Call Trace:
[  245.953123][ T5859]  <TASK>
[  245.956094][ T5859]  dump_stack_lvl+0x168/0x22e
[  245.960960][ T5859]  ? show_regs_print_info+0x12/0x12
[  245.966371][ T5859]  ? load_image+0x3b0/0x3b0
[  245.971115][ T5859]  ? __lock_acquire+0x7c50/0x7c50
[  245.976203][ T5859]  should_fail_ex+0x399/0x4d0
[  245.981136][ T5859]  strncpy_from_user+0x32/0x350
[  245.986059][ T5859]  getname_flags+0xf2/0x500
[  245.989513][ T4598] m920x_read = error: -19
[  245.990693][ T5859]  __x64_sys_symlinkat+0x78/0xa0
[  245.990732][ T5859]  do_syscall_64+0x4c/0xa0
[  245.990768][ T5859]  ? clear_bhb_loop+0x60/0xb0
[  245.990789][ T5859]  ? clear_bhb_loop+0x60/0xb0
[  245.990819][ T5859]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.995185][ T4598] dvb-usb: error while querying for an remote control event.
[  246.000113][ T5859] RIP: 0033:0x7effd9d8eba9
[  246.000137][ T5859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.000155][ T5859] RSP: 002b:00007effdabd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  246.000178][ T5859] RAX: ffffffffffffffda RBX: 00007effd9fd6090 RCX: 00007effd9d8eba9
[  246.068293][ T5859] RDX: 0000200000000580 RSI: 0000000000000008 RDI: 0000200000000100
[  246.076480][ T5859] RBP: 00007effdabd9090 R08: 0000000000000000 R09: 0000000000000000
[  246.084598][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.093277][ T5859] R13: 00007effd9fd6128 R14: 00007effd9fd6090 R15: 00007ffe85e6d7c8
[  246.101277][ T5859]  </TASK>
[  246.109971][ T4598] m920x_read = error: -19
[  246.114553][ T4598] dvb-usb: error while querying for an remote control event.
[  246.615126][ T4604] m920x_read = error: -19
[  246.619563][ T4604] dvb-usb: error while querying for an remote control event.
[  247.251626][ T4598] m920x_read = error: -19
[  247.256630][ T4598] dvb-usb: error while querying for an remote control event.
[  247.438333][ T4604] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  247.469144][ T4598] m920x_read = error: -19
[  247.473960][ T4598] dvb-usb: error while querying for an remote control event.
[  247.609893][ T4598] m920x_read = error: -19
[  247.614319][ T4598] dvb-usb: error while querying for an remote control event.
[  247.679757][ T4604] usb 5-1: Using ep0 maxpacket: 16
[  247.786929][ T4604] usb 5-1: config 0 has an invalid interface number: 222 but max is 0
[  247.818187][ T4604] usb 5-1: config 0 has no interface number 0
[  248.926396][ T4598] m920x_read = error: -19
[  248.931207][ T4598] dvb-usb: error while querying for an remote control event.
[  249.633140][ T4598] m920x_read = error: -19
[  249.655297][ T4598] dvb-usb: error while querying for an remote control event.
[  249.667917][ T4604] usb 5-1: string descriptor 0 read error: -71
[  249.675416][ T4604] usb 5-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37
[  249.699573][ T5878] loop7: detected capacity change from 0 to 32768
[  249.724945][ T5878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.292 (5878)
[  249.810102][ T4604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.939581][ T4604] usb 5-1: config 0 descriptor??
[  249.947931][    T7] m920x_read = error: -19
[  249.955406][    T7] dvb-usb: error while querying for an remote control event.
[  249.965552][ T5878] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  249.979152][ T5878] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  249.988061][ T5878] BTRFS info (device loop7): using free space tree
[  250.030394][ T4604] usb 5-1: can't set config #0, error -71
[  250.080583][ T4604] usb 5-1: USB disconnect, device number 7
[  250.150925][ T4374] m920x_read = error: -19
[  250.157433][ T4374] dvb-usb: error while querying for an remote control event.
[  250.223652][ T5878] BTRFS info (device loop7): enabling ssd optimizations
[  250.309653][ T4374] m920x_read = error: -19
[  250.314248][ T4374] dvb-usb: error while querying for an remote control event.
[  250.468011][ T4374] m920x_read = error: -19
[  250.476492][ T4374] dvb-usb: error while querying for an remote control event.
[  250.927544][ T4374] m920x_read = error: -19
[  250.949169][ T4374] dvb-usb: error while querying for an remote control event.
[  251.089410][ T4374] m920x_read = error: -19
[  251.093979][ T4374] dvb-usb: error while querying for an remote control event.
[  251.229438][ T4374] m920x_read = error: -19
[  251.233989][ T4374] dvb-usb: error while querying for an remote control event.
[  251.394328][ T5335] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.429926][ T4374] m920x_read = error: -19
[  251.434320][ T4374] dvb-usb: error while querying for an remote control event.
[  251.586003][ T4374] m920x_read = error: -19
[  251.609991][ T4374] dvb-usb: error while querying for an remote control event.
[  251.636438][ T5908] lo speed is unknown, defaulting to 1000
[  251.749319][ T4374] m920x_read = error: -19
[  251.753700][ T4374] dvb-usb: error while querying for an remote control event.
[  251.890426][    T7] m920x_read = error: -19
[  251.895246][    T7] dvb-usb: error while querying for an remote control event.
[  252.309725][ T5920] loop4: detected capacity change from 0 to 128
[  252.451334][ T4330] m920x_read = error: -19
[  252.498969][ T4330] dvb-usb: error while querying for an remote control event.
[  252.655118][ T5920] EXT4-fs (loop4): Test dummy encryption mode enabled
[  252.739463][ T4330] m920x_read = error: -19
[  252.743888][ T4330] dvb-usb: error while querying for an remote control event.
[  252.760307][ T5920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082]
[  252.768623][ T5920] System zones: 1-3, 19-19, 35-36
[  252.783884][ T5919] block device autoloading is deprecated and will be removed.
[  252.958565][ T5920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  252.967185][ T4330] m920x_read = error: -19
[  252.976331][ T4330] dvb-usb: error while querying for an remote control event.
[  253.003913][ T5920] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.055193][ T5925] block device autoloading is deprecated and will be removed.
[  253.158423][ T4330] m920x_read = error: -19
[  253.175611][ T4330] dvb-usb: error while querying for an remote control event.
[  253.457813][ T4330] m920x_read = error: -19
[  253.463541][ T4330] dvb-usb: error while querying for an remote control event.
[  253.596052][ T4374] m920x_read = error: -19
[  254.225236][ T4374] dvb-usb: error while querying for an remote control event.
[  254.409199][ T4330] m920x_read = error: -19
[  254.413587][ T4330] dvb-usb: error while querying for an remote control event.
[  254.583454][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  254.679124][ T4604] m920x_read = error: -19
[  254.683537][ T4604] dvb-usb: error while querying for an remote control event.
[  254.839115][ T4604] m920x_read = error: -19
[  254.843652][ T4604] dvb-usb: error while querying for an remote control event.
[  254.959120][ T4604] m920x_read = error: -19
[  254.965082][ T4604] dvb-usb: error while querying for an remote control event.
[  255.082670][ T5948] FAULT_INJECTION: forcing a failure.
[  255.082670][ T5948] name failslab, interval 1, probability 0, space 0, times 0
[  255.095769][ T5948] CPU: 0 PID: 5948 Comm: syz.6.306 Not tainted syzkaller #0
[  255.103338][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  255.113526][ T5948] Call Trace:
[  255.116859][ T5948]  <TASK>
[  255.119832][ T5948]  dump_stack_lvl+0x168/0x22e
[  255.124648][ T5948]  ? show_regs_print_info+0x12/0x12
[  255.130973][ T5948]  ? load_image+0x3b0/0x3b0
[  255.135595][ T5948]  ? __might_sleep+0xd0/0xd0
[  255.140255][ T5948]  ? __lock_acquire+0x7c50/0x7c50
[  255.145504][ T5948]  should_fail_ex+0x399/0x4d0
[  255.150939][ T5948]  should_failslab+0x5/0x20
[  255.155593][ T5948]  slab_pre_alloc_hook+0x59/0x310
[  255.160831][ T5948]  ? alloc_bprm+0x56/0x730
[  255.165279][ T5948]  __kmem_cache_alloc_node+0x4f/0x260
[  255.170684][ T5948]  ? alloc_bprm+0x56/0x730
[  255.175138][ T5948]  kmalloc_trace+0x26/0xe0
[  255.179687][ T5948]  alloc_bprm+0x56/0x730
[  255.183969][ T5948]  ? __check_object_size+0x500/0xa40
[  255.189287][ T5948]  do_execveat_common+0x190/0x6c0
[  255.194479][ T5948]  __x64_sys_execveat+0xc0/0xe0
[  255.199373][ T5948]  do_syscall_64+0x4c/0xa0
[  255.203896][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  255.208609][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  255.213367][ T5948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.219310][ T5948] RIP: 0033:0x7f5f6918eba9
[  255.223755][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.244087][ T5948] RSP: 002b:00007f5f6a05c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  255.252696][ T5948] RAX: ffffffffffffffda RBX: 00007f5f693d6090 RCX: 00007f5f6918eba9
[  255.260685][ T5948] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  255.268689][ T5948] RBP: 00007f5f6a05c090 R08: 0000000000000000 R09: 0000000000000000
[  255.276866][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.284864][ T5948] R13: 00007f5f693d6128 R14: 00007f5f693d6090 R15: 00007ffc4cac8e78
[  255.292872][ T5948]  </TASK>
[  255.298114][ T4604] m920x_read = error: -19
[  255.655420][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.663231][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.038867][ T4604] dvb-usb: error while querying for an remote control event.
[  256.158966][ T4604] m920x_read = error: -19
[  256.163552][ T4604] dvb-usb: error while querying for an remote control event.
[  258.287826][ T5954] loop5: detected capacity change from 0 to 32768
[  258.301368][ T5954] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.307 (5954)
[  258.324095][ T5954] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.336584][ T5954] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  258.346276][ T5954] BTRFS info (device loop5): using free space tree
[  258.938897][ T5954] BTRFS info (device loop5): enabling ssd optimizations
[  259.976294][ T4604] m920x_read = error: -19
[  259.980780][ T4604] dvb-usb: error while querying for an remote control event.
[  260.101094][ T4604] m920x_read = error: -19
[  260.110837][ T4604] dvb-usb: error while querying for an remote control event.
[  260.485721][ T5984] loop4: detected capacity change from 0 to 47
[  260.738598][ T4374] m920x_read = error: -19
[  260.860844][ T4374] dvb-usb: error while querying for an remote control event.
[  261.075570][ T4658] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  261.098754][ T4604] m920x_read = error: -19
[  261.103472][ T4604] dvb-usb: error while querying for an remote control event.
[  261.329561][ T4604] m920x_read = error: -19
[  261.334093][ T4604] dvb-usb: error while querying for an remote control event.
[  263.260585][ T4606] m920x_read = error: -19
[  263.265735][ T4606] dvb-usb: error while querying for an remote control event.
[  263.397990][ T6006] m920x_read = error: -19
[  263.403873][ T6006] dvb-usb: error while querying for an remote control event.
[  263.514611][ T6009] 9pnet_virtio: no channels available for device syz
[  263.622298][ T6006] m920x_read = error: -19
[  263.647298][ T4487] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  263.678338][ T6006] dvb-usb: error while querying for an remote control event.
[  263.722412][ T6012] loop5: detected capacity change from 0 to 4096
[  263.769311][ T6012] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  263.787987][ T6006] m920x_read = error: -19
[  263.792395][ T6006] dvb-usb: error while querying for an remote control event.
[  263.811053][ T6012] ntfs3: loop5: volume is dirty and "force" flag is not set!
[  263.971268][ T6006] m920x_read = error: -19
[  263.976225][ T6006] dvb-usb: error while querying for an remote control event.
[  264.015186][ T4487] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  264.924778][ T4487] usb 7-1: config 0 has no interface number 0
[  265.065958][ T4374] m920x_read = error: -19
[  265.071054][ T4374] dvb-usb: error while querying for an remote control event.
[  265.080725][ T4487] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  265.237621][ T4487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.245781][ T4487] usb 7-1: Product: syz
[  265.251134][ T4487] usb 7-1: Manufacturer: syz
[  265.255779][ T4487] usb 7-1: SerialNumber: syz
[  265.284105][ T4487] usb 7-1: config 0 descriptor??
[  265.291235][ T6006] m920x_read = error: -19
[  265.295763][ T6006] dvb-usb: error while querying for an remote control event.
[  265.917556][ T6006] m920x_read = error: -19
[  265.925923][ T6006] dvb-usb: error while querying for an remote control event.
[  265.934022][ T4487] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  266.129198][ T4487] usb 7-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  266.188969][ T4487] usb 7-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  266.231804][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.318'.
[  266.283507][ T6024] netlink: 'syz.6.318': attribute type 21 has an invalid length.
[  266.315928][ T6006] m920x_read = error: -19
[  266.321083][ T6024] netlink: 128 bytes leftover after parsing attributes in process `syz.6.318'.
[  266.321119][ T6006] dvb-usb: error while querying for an remote control event.
[  266.360635][ T6024] netlink: 'syz.6.318': attribute type 4 has an invalid length.
[  266.372541][ T6024] netlink: 3 bytes leftover after parsing attributes in process `syz.6.318'.
[  266.542149][ T6006] m920x_read = error: -19
[  266.546631][ T6006] dvb-usb: error while querying for an remote control event.
[  266.715322][ T6006] m920x_read = error: -19
[  266.738632][ T6006] dvb-usb: error while querying for an remote control event.
[  266.750986][ T6030] loop2: detected capacity change from 0 to 1024
[  267.160751][ T6006] m920x_read = error: -19
[  267.177439][ T6006] dvb-usb: error while querying for an remote control event.
[  267.308815][ T6006] m920x_read = error: -19
[  267.446789][ T6006] dvb-usb: error while querying for an remote control event.
[  268.306890][ T6006] m920x_read = error: -19
[  268.312640][ T4278] Bluetooth: hci5: command 0x0406 tx timeout
[  268.347358][ T6006] dvb-usb: error while querying for an remote control event.
[  268.404172][ T6046] FAULT_INJECTION: forcing a failure.
[  268.404172][ T6046] name failslab, interval 1, probability 0, space 0, times 0
[  268.430130][ T6046] CPU: 0 PID: 6046 Comm: syz.4.325 Not tainted syzkaller #0
[  268.437464][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  268.447533][ T6046] Call Trace:
[  268.450873][ T6046]  <TASK>
[  268.453820][ T6046]  dump_stack_lvl+0x168/0x22e
[  268.458543][ T6046]  ? show_regs_print_info+0x12/0x12
[  268.463773][ T6046]  ? load_image+0x3b0/0x3b0
[  268.468302][ T6046]  ? __might_sleep+0xd0/0xd0
[  268.472923][ T6046]  ? __lock_acquire+0x7c50/0x7c50
[  268.477966][ T6046]  should_fail_ex+0x399/0x4d0
[  268.482677][ T6046]  should_failslab+0x5/0x20
[  268.487234][ T6046]  slab_pre_alloc_hook+0x59/0x310
[  268.492292][ T6046]  ? __se_sys_mount+0x152/0x3c0
[  268.497151][ T6046]  __kmem_cache_alloc_node+0x4f/0x260
[  268.502636][ T6046]  ? __se_sys_mount+0x152/0x3c0
[  268.507508][ T6046]  kmalloc_trace+0x26/0xe0
[  268.511965][ T6046]  __se_sys_mount+0x152/0x3c0
[  268.516650][ T6046]  ? __x64_sys_mount+0xc0/0xc0
[  268.521425][ T6046]  ? lockdep_hardirqs_on+0x94/0x140
[  268.526650][ T6046]  ? __x64_sys_mount+0x1c/0xc0
[  268.531426][ T6046]  do_syscall_64+0x4c/0xa0
[  268.535871][ T6046]  ? clear_bhb_loop+0x60/0xb0
[  268.540678][ T6046]  ? clear_bhb_loop+0x60/0xb0
[  268.545398][ T6046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.551351][ T6046] RIP: 0033:0x7f648fb8eba9
[  268.555800][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.575441][ T6046] RSP: 002b:00007f6490a79038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  268.583876][ T6046] RAX: ffffffffffffffda RBX: 00007f648fdd5fa0 RCX: 00007f648fb8eba9
[  268.591896][ T6046] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000
[  268.599900][ T6046] RBP: 00007f6490a79090 R08: 0000200000000300 R09: 0000000000000000
[  268.607900][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.615891][ T6046] R13: 00007f648fdd6038 R14: 00007f648fdd5fa0 R15: 00007ffd1822a7e8
[  268.623901][ T6046]  </TASK>
[  268.631112][ T6006] m920x_read = error: -19
[  268.635597][ T6006] dvb-usb: error while querying for an remote control event.
[  268.841459][ T4374] m920x_read = error: -19
[  268.846016][ T4374] dvb-usb: error while querying for an remote control event.
[  268.920574][ T6048] loop7: detected capacity change from 0 to 512
[  268.952979][ T4374] libceph: connect (1)[c::]:6789 error -101
[  268.980897][ T4374] libceph: mon0 (1)[c::]:6789 connect error
[  269.120526][ T6048] FAT-fs (loop7): Unrecognized mount option "òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿcp1251" or missing value
[  269.142491][ T4374] m920x_read = error: -19
[  269.168253][ T4374] dvb-usb: error while querying for an remote control event.
[  269.287016][ T4374] libceph: connect (1)[c::]:6789 error -101
[  269.574408][ T4374] libceph: mon0 (1)[c::]:6789 connect error
[  269.954819][ T6047] ceph: No mds server is up or the cluster is laggy
[  270.123712][ T4374] m920x_read = error: -19
[  270.136929][ T4374] dvb-usb: error while querying for an remote control event.
[  270.145806][   T52] block nbd0: Possible stuck request ffff888025068000: control (read@0,4096B). Runtime 150 seconds
[  270.247203][ T4604] m920x_read = error: -19
[  270.251795][ T4604] dvb-usb: error while querying for an remote control event.
[  271.120865][ T4374] m920x_read = error: -19
[  271.125285][ T4374] dvb-usb: error while querying for an remote control event.
[  271.244775][ T6059] loop6: detected capacity change from 0 to 256
[  271.317025][ T4374] m920x_read = error: -19
[  271.321434][ T4374] dvb-usb: error while querying for an remote control event.
[  271.391342][ T6059] FAT-fs (loop6): Directory bread(block 64) failed
[  271.398590][ T6059] FAT-fs (loop6): Directory bread(block 65) failed
[  271.406245][ T6059] FAT-fs (loop6): Directory bread(block 66) failed
[  271.413497][ T6059] FAT-fs (loop6): Directory bread(block 67) failed
[  271.493394][ T6059] FAT-fs (loop6): Directory bread(block 68) failed
[  271.506923][ T6059] FAT-fs (loop6): Directory bread(block 69) failed
[  271.507178][ T4374] m920x_read = error: -19
[  271.513831][ T6059] FAT-fs (loop6): Directory bread(block 70) failed
[  271.525480][ T6059] FAT-fs (loop6): Directory bread(block 71) failed
[  271.532927][ T6059] FAT-fs (loop6): Directory bread(block 72) failed
[  271.533275][ T4374] dvb-usb: error while querying for an remote control event.
[  271.539977][ T6059] FAT-fs (loop6): Directory bread(block 73) failed
[  272.065186][ T6076] FAULT_INJECTION: forcing a failure.
[  272.065186][ T6076] name failslab, interval 1, probability 0, space 0, times 0
[  272.078276][ T6076] CPU: 0 PID: 6076 Comm: syz.4.333 Not tainted syzkaller #0
[  272.085591][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  272.095655][ T6076] Call Trace:
[  272.098953][ T6076]  <TASK>
[  272.101894][ T6076]  dump_stack_lvl+0x168/0x22e
[  272.106589][ T6076]  ? show_regs_print_info+0x12/0x12
[  272.111792][ T6076]  ? load_image+0x3b0/0x3b0
[  272.116308][ T6076]  ? __might_sleep+0xd0/0xd0
[  272.120914][ T6076]  ? __lock_acquire+0x7c50/0x7c50
[  272.125949][ T6076]  should_fail_ex+0x399/0x4d0
[  272.130643][ T6076]  should_failslab+0x5/0x20
[  272.135181][ T6076]  slab_pre_alloc_hook+0x59/0x310
[  272.140237][ T6076]  kmem_cache_alloc+0x56/0x2f0
[  272.145013][ T6076]  ? __alloc_file+0x25/0x230
[  272.149623][ T6076]  __alloc_file+0x25/0x230
[  272.154069][ T6076]  alloc_empty_file+0x90/0x180
[  272.158869][ T6076]  path_openat+0xfc/0x2e70
[  272.163305][ T6076]  ? verify_lock_unused+0x140/0x140
[  272.168584][ T6076]  ? kasan_set_track+0x60/0x70
[  272.173389][ T6076]  ? do_sys_openat2+0xcf/0x490
[  272.178333][ T6076]  ? __x64_sys_openat+0x135/0x160
[  272.183451][ T6076]  ? do_syscall_64+0x4c/0xa0
[  272.188146][ T6076]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.194367][ T6076]  ? verify_lock_unused+0x140/0x140
[  272.199719][ T6076]  ? do_filp_open+0x3c0/0x3c0
[  272.204437][ T6076]  do_filp_open+0x1c1/0x3c0
[  272.209048][ T6076]  ? vfs_tmpfile+0x480/0x480
[  272.213676][ T6076]  ? _raw_spin_unlock+0x24/0x40
[  272.218599][ T6076]  ? alloc_fd+0x58f/0x630
[  272.222951][ T6076]  do_sys_openat2+0x142/0x490
[  272.227655][ T6076]  ? do_sys_open+0xe0/0xe0
[  272.232110][ T6076]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  272.238135][ T6076]  ? lock_chain_count+0x20/0x20
[  272.243007][ T6076]  __x64_sys_openat+0x135/0x160
[  272.247878][ T6076]  do_syscall_64+0x4c/0xa0
[  272.252307][ T6076]  ? clear_bhb_loop+0x60/0xb0
[  272.256996][ T6076]  ? clear_bhb_loop+0x60/0xb0
[  272.261700][ T6076]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.267614][ T6076] RIP: 0033:0x7f648fb8eba9
[  272.272038][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.291657][ T6076] RSP: 002b:00007f6490a58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  272.300096][ T6076] RAX: ffffffffffffffda RBX: 00007f648fdd6090 RCX: 00007f648fb8eba9
[  272.308088][ T6076] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  272.316087][ T6076] RBP: 00007f6490a58090 R08: 0000000000000000 R09: 0000000000000000
[  272.324091][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.332076][ T6076] R13: 00007f648fdd6128 R14: 00007f648fdd6090 R15: 00007ffd1822a7e8
[  272.340095][ T6076]  </TASK>
[  272.522892][ T4330] m920x_read = error: -19
[  272.528775][ T4330] dvb-usb: error while querying for an remote control event.
[  272.593352][ T6078] capability: warning: `syz.2.334' uses deprecated v2 capabilities in a way that may be insecure
[  272.706837][ T4330] m920x_read = error: -19
[  272.712021][ T4330] dvb-usb: error while querying for an remote control event.
[  272.917931][ T4330] m920x_read = error: -19
[  272.963023][ T4330] dvb-usb: error while querying for an remote control event.
[  273.479636][ T4601] m920x_read = error: -19
[  273.485197][ T4601] dvb-usb: error while querying for an remote control event.
[  273.676891][ T4374] m920x_read = error: -19
[  273.681289][ T4374] dvb-usb: error while querying for an remote control event.
[  273.736830][ T4330] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  273.817072][ T4374] m920x_read = error: -19
[  273.822173][ T4374] dvb-usb: error while querying for an remote control event.
[  273.932400][ T4330] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  274.096775][ T4330] usb 3-1: config 0 has no interface number 0
[  274.123593][ T4330] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  274.132890][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.142908][ T4330] usb 3-1: Product: syz
[  274.148173][ T4330] usb 3-1: Manufacturer: syz
[  274.157454][ T4330] usb 3-1: SerialNumber: syz
[  274.164811][ T4330] usb 3-1: config 0 descriptor??
[  274.216743][ T4374] m920x_read = error: -19
[  274.221392][ T4374] dvb-usb: error while querying for an remote control event.
[  274.347189][ T4374] m920x_read = error: -19
[  274.352149][ T4374] dvb-usb: error while querying for an remote control event.
[  274.546803][ T4601] m920x_read = error: -19
[  274.551347][ T4601] dvb-usb: error while querying for an remote control event.
[  274.562801][ T6103] loop5: detected capacity change from 0 to 512
[  274.578499][ T6103] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  274.612024][ T4330] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  274.748469][ T4601] m920x_read = error: -19
[  274.757516][ T4601] dvb-usb: error while querying for an remote control event.
[  274.907493][ T4601] m920x_read = error: -19
[  274.925811][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'.
[  274.957603][ T4601] dvb-usb: error while querying for an remote control event.
[  275.116945][ T6109] netlink: 'syz.2.338': attribute type 21 has an invalid length.
[  275.135045][ T6109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.338'.
[  275.148171][ T6109] netlink: 'syz.2.338': attribute type 4 has an invalid length.
[  275.161027][ T6109] netlink: 3 bytes leftover after parsing attributes in process `syz.2.338'.
[  275.197131][ T4601] m920x_read = error: -19
[  275.201870][ T4601] dvb-usb: error while querying for an remote control event.
[  275.327782][ T4601] m920x_read = error: -19
[  275.339392][ T4601] dvb-usb: error while querying for an remote control event.
[  275.530099][ T4601] m920x_read = error: -19
[  275.534677][ T4601] dvb-usb: error while querying for an remote control event.
[  276.421423][ T4601] m920x_read = error: -19
[  276.425857][ T4601] dvb-usb: error while querying for an remote control event.
[  276.645584][ T4601] m920x_read = error: -19
[  276.651301][ T4601] dvb-usb: error while querying for an remote control event.
[  276.777526][ T4601] m920x_read = error: -19
[  276.781979][ T4601] dvb-usb: error while querying for an remote control event.
[  276.803217][ T6121] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in;
[  276.803217][ T6121]    program syz.6.346 not setting count and/or reply_len properly
[  277.396435][ T4601] m920x_read = error: -19
[  277.400956][ T4601] dvb-usb: error while querying for an remote control event.
[  277.408767][   T28] INFO: task syz.0.56:4706 blocked for more than 143 seconds.
[  277.424440][   T28]       Not tainted syzkaller #0
[  277.431049][   T26] audit: type=1326 audit(1757883346.578:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a678eba9 code=0x7ffc0000
[  277.435703][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  277.510380][   T26] audit: type=1326 audit(1757883346.618:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a678eba9 code=0x7ffc0000
[  277.546326][ T4601] m920x_read = error: -19
[  277.552886][ T4601] dvb-usb: error while querying for an remote control event.
[  277.568053][   T28] task:syz.0.56        state:D stack:25216 pid:4706  ppid:4264   flags:0x00004004
[  277.616178][   T28] Call Trace:
[  277.626355][   T28]  <TASK>
[  277.636463][   T28]  __schedule+0x10ec/0x40b0
[  277.645173][   T26] audit: type=1326 audit(1757883346.618:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79a678d510 code=0x7ffc0000
[  277.674499][   T28]  ? release_firmware_map_entry+0x18a/0x18a
[  277.689589][   T28]  ? __mutex_trylock_common+0x80/0x250
[  277.710348][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[  277.717345][ T4601] m920x_read = error: -19
[  277.726135][ T4601] dvb-usb: error while querying for an remote control event.
[  277.748915][   T28]  schedule+0xb9/0x180
[  277.754593][   T26] audit: type=1326 audit(1757883346.618:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f79a67903d7 code=0x7ffc0000
[  277.786212][   T28]  schedule_preempt_disabled+0xf/0x20
[  277.817686][   T28]  __mutex_lock+0x555/0xaf0
[  277.822313][   T28]  ? __mutex_lock+0x3a5/0xaf0
[  277.840023][ T6130] overlayfs: missing 'lowerdir'
[  277.845212][   T26] audit: type=1326 audit(1757883346.628:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79a678eba9 code=0x7ffc0000
[  277.848431][   T28]  ? blkdev_get_by_dev+0x13d/0xa60
[  277.868736][   T26] audit: type=1326 audit(1757883346.628:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f79a67903d7 code=0x7ffc0000
[  277.884286][ T4601] m920x_read = error: -19
[  277.902684][ T6131] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in;
[  277.902684][ T6131]    program syz.6.349 not setting count and/or reply_len properly
[  277.922683][   T26] audit: type=1326 audit(1757883346.628:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79a678d80a code=0x7ffc0000
[  277.926498][   T28]  ? mutex_lock_nested+0x10/0x10
[  277.945740][   T26] audit: type=1326 audit(1757883346.628:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a678eba9 code=0x7ffc0000
[  277.949782][ T4601] dvb-usb: error while querying for an remote control event.
[  277.980256][   T26] audit: type=1326 audit(1757883346.628:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.7.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a678eba9 code=0x7ffc0000
[  278.004261][   T28]  ? iput+0x3c0/0x980
[  278.015339][   T28]  ? ilookup+0x1c0/0x200
[  278.020210][   T28]  ? disk_block_events+0xa3/0x120
[  278.025503][   T28]  ? blkdev_get_by_dev+0xd6/0xa60
[  278.039152][   T28]  blkdev_get_by_dev+0x13d/0xa60
[  278.044288][   T28]  ? __rwlock_init+0x140/0x140
[  278.053874][   T28]  blkdev_open+0x11e/0x2e0
[  278.058658][   T28]  ? blkdev_mmap+0x1a0/0x1a0
[  278.063533][   T28]  do_dentry_open+0x7e9/0x10d0
[  278.068942][   T28]  path_openat+0x25c6/0x2e70
[  278.073815][   T28]  ? do_sys_openat2+0xcf/0x490
[  278.079179][   T28]  ? __x64_sys_openat+0x135/0x160
[  278.084488][   T28]  ? do_filp_open+0x3c0/0x3c0
[  278.092056][   T28]  do_filp_open+0x1c1/0x3c0
[  278.101833][   T28]  ? vfs_tmpfile+0x480/0x480
[  278.108066][   T28]  ? _raw_spin_unlock+0x24/0x40
[  278.113197][   T28]  ? alloc_fd+0x58f/0x630
[  278.118200][   T28]  do_sys_openat2+0x142/0x490
[  278.123072][   T28]  ? do_sys_open+0xe0/0xe0
[  278.128130][   T28]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  278.134303][   T28]  ? lock_chain_count+0x20/0x20
[  278.139663][ T4601] m920x_read = error: -19
[  278.139886][   T28]  __x64_sys_openat+0x135/0x160
[  278.144073][ T4601] dvb-usb: error while querying for an remote control event.
[  278.157243][   T28]  do_syscall_64+0x4c/0xa0
[  278.161844][   T28]  ? clear_bhb_loop+0x60/0xb0
[  278.167154][   T28]  ? clear_bhb_loop+0x60/0xb0
[  278.172028][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.178532][   T28] RIP: 0033:0x7fa9c038d510
[  278.183123][   T28] RSP: 002b:00007fa9be5f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  278.192327][   T28] RAX: ffffffffffffffda RBX: 0000000000149440 RCX: 00007fa9c038d510
[  278.201218][   T28] RDX: 0000000000149440 RSI: 00007fa9be5f5c10 RDI: 00000000ffffff9c
[  278.210818][   T28] RBP: 00007fa9be5f5c10 R08: 0000000000000000 R09: 002364626e2f7665
[  278.219416][   T28] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  278.228018][   T28] R13: 00007fa9c05d6038 R14: 00007fa9c05d5fa0 R15: 00007fff3a77ab98
[  278.236535][   T28]  </TASK>
[  278.240138][   T28] 
[  278.240138][   T28] Showing all locks held in the system:
[  278.259662][   T28] 1 lock held by rcu_tasks_kthre/12:
[  278.263869][ T4601] m920x_read = error: -19
[  278.269685][ T4601] dvb-usb: error while querying for an remote control event.
[  278.273559][   T28]  #0: ffffffff8cb2b570 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  278.303858][   T28] 1 lock held by rcu_tasks_trace/13:
[  278.316736][   T28]  #0: ffffffff8cb2bd90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  278.333241][   T28] 1 lock held by khungtaskd/28:
[  278.333687][ T6127] loop2: detected capacity change from 0 to 40427
[  278.338814][   T28]  #0: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  278.354671][ T6127] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  278.355278][   T28] 2 locks held by getty/4024:
[  278.367993][   T28]  #0: ffff88807f4f0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  278.378038][ T6127] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  278.378415][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380
[  278.397071][   T28] 5 locks held by kworker/0:7/4330:
[  278.399091][ T6127] F2FS-fs (loop2): invalid crc value
[  278.402809][   T28]  #0: ffff88801c2f9d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  278.416434][ T4601] m920x_read = error: -19
[  278.420357][   T28]  #1: 
[  278.423662][ T4601] dvb-usb: error while querying for an remote control event.
[  278.431241][ T6127] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  278.433914][   T28] ffffc9000484fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  278.455460][   T28]  #2: ffff88823bc6c990 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0
[  278.464492][   T28]  #3: ffff8880568a0190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  278.464605][ T6127] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  278.473861][   T28]  #4: ffff88802a44d118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  278.473944][   T28] 1 lock held by udevd/4392:
[  278.473957][   T28]  #0: ffff888024f6a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60
[  278.474024][   T28] 6 locks held by kworker/0:10/4487:
[  278.474037][   T28]  #0: ffff88801c2f9d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  278.474097][   T28]  #1: ffffc90004cbfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}
[  278.526366][ T4601] m920x_read = error: -19
[  278.536709][   T28] , at: process_one_work+0x7a1/0x1160
[  278.539343][ T4601] dvb-usb: error while querying for an remote control event.
[  278.547689][   T28]  #2: ffff888144f88190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0
[  278.565017][   T28]  #3: ffff88805bbb2190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  278.578092][   T28]  #4: ffff88805b448118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  278.593371][   T28]  #5: ffffffff8c9d7790 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xec/0x2a0
[  278.604394][   T28] 1 lock held by syz.0.56/4706:
[  278.610266][   T28]  #0: ffff888024f6a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60
[  278.619945][ T6127] F2FS-fs (loop2): recover fsync data on readonly fs
[  278.621176][   T28] 3 locks held by kworker/u4:26/5379:
[  278.633896][ T6127] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  278.642707][   T28]  #0: ffff8880b8e3aad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140
[  278.642778][ T6127] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  278.663201][   T28]  #1: ffff8880b8f27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0
[  278.674913][ T4601] m920x_read = error: -19
[  278.679434][ T4601] dvb-usb: error while querying for an remote control event.
[  278.687787][   T28]  #2: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[  278.697974][   T28] 
[  278.700440][   T28] =============================================
[  278.700440][   T28] 
[  278.710481][   T28] NMI backtrace for cpu 0
[  278.714884][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  278.722133][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  278.732274][   T28] Call Trace:
[  278.735583][   T28]  <TASK>
[  278.738544][   T28]  dump_stack_lvl+0x168/0x22e
[  278.743258][   T28]  ? irq_work_queue+0xb8/0x140
[  278.748110][   T28]  ? show_regs_print_info+0x12/0x12
[  278.753344][   T28]  ? load_image+0x3b0/0x3b0
[  278.757874][   T28]  ? vprintk_emit+0x571/0x680
[  278.762582][   T28]  ? printk_sprint+0x460/0x460
[  278.767463][   T28]  nmi_cpu_backtrace+0x3f4/0x470
[  278.772444][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  278.778610][   T28]  ? _printk+0xcc/0x110
[  278.782786][   T28]  ? load_image+0x3b0/0x3b0
[  278.787315][   T28]  ? load_image+0x3b0/0x3b0
[  278.791842][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  278.797953][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  278.803956][   T28]  watchdog+0xeee/0xf30
[  278.808138][   T28]  ? watchdog+0x1ed/0xf30
[  278.812491][   T28]  kthread+0x29d/0x330
[  278.816583][   T28]  ? hungtask_pm_notify+0x40/0x40
[  278.821623][   T28]  ? kthread_blkcg+0xd0/0xd0
[  278.826248][   T28]  ret_from_fork+0x1f/0x30
[  278.830732][   T28]  </TASK>
[  278.834626][   T28] Sending NMI from CPU 0 to CPUs 1:
[  278.840107][    C1] NMI backtrace for cpu 1
[  278.840117][    C1] CPU: 1 PID: 29 Comm: kworker/u4:2 Not tainted syzkaller #0
[  278.840135][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  278.840146][    C1] Workqueue: bat_events batadv_nc_worker
[  278.840177][    C1] RIP: 0010:batadv_nc_worker+0xd5/0x600
[  278.840205][    C1] Code: 20 00 74 08 48 89 df e8 69 a1 ef f7 4a 8d 2c fd 00 00 00 00 48 03 2b e8 09 86 8a f7 4c 8d 2d 00 00 00 00 48 c7 c7 e0 ab b2 8c <31> f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 c5 a0 81 f7
[  278.840220][    C1] RSP: 0018:ffffc90000a5fbe0 EFLAGS: 00000283
[  278.840233][    C1] RAX: 0000000000000001 RBX: ffff88807db333c0 RCX: dffffc0000000000
[  278.840246][    C1] RDX: 0000000000000000 RSI: ffffffff8a8c1680 RDI: ffffffff8cb2abe0
[  278.840258][    C1] RBP: ffff88802fcac450 R08: dffffc0000000000 R09: fffffbfff1c3eea6
[  278.840272][    C1] R10: fffffbfff1c3eea6 R11: 1ffffffff1c3eea5 R12: dffffc0000000000
[  278.840284][    C1] R13: ffffffff89e1507e R14: ffff8880568f8c80 R15: 000000000000008a
[  278.840297][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  278.840312][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  278.840325][    C1] CR2: 0000001b2f710ff8 CR3: 000000000c88e000 CR4: 00000000003526e0
[  278.840340][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  278.840351][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  278.840362][    C1] Call Trace:
[  278.840367][    C1]  <TASK>
[  278.840376][    C1]  ? process_one_work+0x7a1/0x1160
[  278.840396][    C1]  process_one_work+0x898/0x1160
[  278.840421][    C1]  ? worker_detach_from_pool+0x240/0x240
[  278.840443][    C1]  ? _raw_spin_lock_irq+0xab/0xe0
[  278.840469][    C1]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  278.840494][    C1]  ? kthread_data+0x4b/0xc0
[  278.840520][    C1]  worker_thread+0xaa2/0x1250
[  278.840552][    C1]  kthread+0x29d/0x330
[  278.840575][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[  278.840593][    C1]  ? kthread_blkcg+0xd0/0xd0
[  278.840618][    C1]  ret_from_fork+0x1f/0x30
[  278.840648][    C1]  </TASK>
[  278.844380][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  278.848127][ T4601] m920x_read = error: -19
[  278.848146][ T4601] dvb-usb: error while querying for an remote control event.
[  278.986402][ T4601] m920x_read = error: -19
[  278.986426][ T4601] dvb-usb: error while querying for an remote control event.
[  279.076289][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  279.083529][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  279.093692][   T28] Call Trace:
[  279.096996][   T28]  <TASK>
[  279.099945][   T28]  dump_stack_lvl+0x168/0x22e
[  279.104637][   T28]  ? memcpy+0x3c/0x60
[  279.108642][   T28]  ? show_regs_print_info+0x12/0x12
[  279.113853][   T28]  ? load_image+0x3b0/0x3b0
[  279.118385][   T28]  panic+0x2c9/0x710
[  279.122326][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  279.127995][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  279.132524][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  279.136403][ T4601] m920x_read = error: -19
[  279.136422][ T4601] dvb-usb: error while querying for an remote control event.
[  279.150489][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  279.156748][   T28]  watchdog+0xf2d/0xf30
[  279.160924][   T28]  ? watchdog+0x1ed/0xf30
[  279.165397][   T28]  kthread+0x29d/0x330
[  279.169519][   T28]  ? hungtask_pm_notify+0x40/0x40
[  279.174760][   T28]  ? kthread_blkcg+0xd0/0xd0
[  279.179409][   T28]  ret_from_fork+0x1f/0x30
[  279.183854][   T28]  </TASK>
[  279.187361][   T28] Kernel Offset: disabled
[  279.191906][   T28] Rebooting in 86400 seconds..