last executing test programs:

9m52.116620137s ago: executing program 1 (id=776):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
semget(0x3, 0x1, 0x654)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}], 0x3, 0x1000, 0x3f2f0fde)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe})
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x22020600)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
fallocate(r3, 0x21, 0x0, 0x1000)

9m51.649766273s ago: executing program 1 (id=778):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./bus\x00', 0x4009, 0x0, 0x1, 0x0, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000040)=ANY=[], 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0)

9m51.19128748s ago: executing program 1 (id=780):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b1e2a00090582020002000000cd429dfa635776068f9793a3e20d4af951e71e1069d2867bf99f99d0c4a1afdcb1877d6dc0b6d66c75adc8fc168d5badb7"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20f8ff"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0xb)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000}, 0x10}, 0x94)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/hardlockup_count', 0x349c00, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)

9m46.610763103s ago: executing program 1 (id=791):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]})
chdir(&(0x7f0000000240)='./file0\x00')
syz_clone(0x200200, &(0x7f00000003c0)="97428fea228bdd5b3712b1fe65b9a1a990c4713240b92dcaf03d37c0d3817ef77a1d7068efbddaf13fe03b5650689df08fb34aa5305be9d88a59c4b868a48ed6791a96e17cb0faa4e221542c7808686c47d27947180afa0bd55f02c420ce1a8094001c00024999501bf12f9fe555795c48b9b4138aeb656acae9959a2fd9c1", 0x7f, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000440)="200b0daef70115d316538092dc961dfc175fca364945e024cd4ca79471df0883c3a9d468f6b5a08947c08688eb15e29e041620efa9164fa1088bfc853b13b405467163a441821ea06a2788091206cc42d3805a0a44fe922cd3131ee8651a5175015082024bf491cd66213b15a40e265616c173acef92385f3e83bf")
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000008111a0000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200))
io_uring_enter(r5, 0xf3, 0x80ffff, 0x49, 0x0, 0x40)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000})
fallocate(r6, 0x1, 0x100000000, 0x80000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="080008000306000014000200ff"], 0x34}, 0x1, 0x0, 0x0, 0x48051}, 0x4)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @remote}, 0x1b, r9})
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

9m43.188092889s ago: executing program 1 (id=804):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="b40100001300010226bd7000fcdbdf25ffffffff000000050000000000000000fc0100000000000000000000000000004e23fffa4e2000060200202000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="87ae000000000000090000000014000006000000000000000500000000000000080000000000000008000000000000008100000000000000030000000000000004000000000000000080090000000000ffff000000000000ffffffff00000000040000000000000002010702000000008400050000000000000000000000000000000001000004d52b0000000a000000000000000000000000000000000000010435000001"], 0x1b4}}, 0x80084)

9m41.422065866s ago: executing program 1 (id=813):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000020c0), 0x101, 0x103040)
sync_file_range(r4, 0x39, 0x3, 0x5)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xd, 0x6, 0x3, 0x8000000000000001, 0x0, 0x0, 0x80})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={@private1, @local, @remote, 0x2, 0x5, 0x4f, 0x400, 0x9, 0x1800200})
syz_pidfd_open(r0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20)

9m41.26879677s ago: executing program 32 (id=813):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000020c0), 0x101, 0x103040)
sync_file_range(r4, 0x39, 0x3, 0x5)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xd, 0x6, 0x3, 0x8000000000000001, 0x0, 0x0, 0x80})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={@private1, @local, @remote, 0x2, 0x5, 0x4f, 0x400, 0x9, 0x1800200})
syz_pidfd_open(r0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20)

15.149595813s ago: executing program 4 (id=2435):
syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x1a9a00)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.428442157s ago: executing program 4 (id=2436):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="336bf7ffffffffffffdfef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
clock_gettime(0xfffffffffffffffc, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000cc0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="e80000002c070008292ef6b8aada2d2aa1885319bd7000ffdbdf2508004500", @ANYRES32=r3, @ANYBLOB="3a5e57c7fe4db162c41d1ebbc955c8f9d799c4f3bd7774509de402ea5de830b5a28135739c1d69a239a5d3d97706a5b7f9b376da0ee28b0b9c52f3144e49f28d43f692d015ce3b410a1eb74f70d05184d147bd43ca6584e73e1b228d6151c1c0cc899eca0d788ddfc1d6b290e7f599fabaf628bc09f008569f9a428edcd41a6a415330ec0b550b615f0ecf1b596a1a3b522dadba556a0257fc27092c483cea0591b0029c502d99d8d401ccad6b0faf6a22ad84cde09dc8ecc124b0a7f1f10775967541d67cb2681a9da2cd99553c4231"], 0xe8}, {&(0x7f0000000d00)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0700880025f100000c006c000100000000000000d0c9bd5348120e389cab9cb28b31488b27920032c1fd83776cb2f6103f502058ad499ff3ed67bc2215e4172739ae162308e3ca028c23c00f5358e26b29bde04b7b1eb6b76e2706e91046f42acb9217e16c104e8ba44d1632f995011dca30128e4965ec98f1e127f534277e51447ca494e45b88dba72151c39dee160670d753a34c9ced2a7130536dae5838c69559c7c2e3a029da118c13f73170c1429a76aed0622839eee855fa000000"], 0x2d8}, {&(0x7f00000008c0)={0x30, 0x2e, 0x1, 0x70bd27, 0x25dfdbfc, "", [@nested={0x18, 0x127, 0x0, 0x1, [@typed={0x14, 0x85, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x8, 0xef, 0x0, 0x1, [@typed={0x4, 0x145}]}]}, 0x30}, {&(0x7f00000004c0)={0x228, 0x34, 0x8d545c0a04edce23, 0x70bd2b, 0x25dfdbfd, "", [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xe7}, @nested={0x201, 0xa1, 0x0, 0x1, [@generic="d009339a274754e64eb9063a9a46aa7adee7bf7cbc1a5d88ed69286dbe00093664dce745727223a82168221d113c40cedb61ce41b00670362a2624fec668daece76cadd0a11a2b9f0c798449025ad657b4b3373680487aaada2d480a3b60c903fab1510b95c3c00fe441a9a18ef4d35529cd40abad6a32f07d40470dd5", @generic="a470ccddcfecd76860dfb807b16e2b26765c03e05d6854a9c9defab2301ccb5004f6262ca0d818a24f41623d13a2541463614678bc1d08848fb5af1b5220605af36f868136703052586af54f0961e9bda6ce5d9a3a8d7d4e", @nested={0xc, 0x105, 0x0, 0x1, [@nested={0x4, 0xcd}, @typed={0x4, 0x1a}]}, @generic="439280f05b3d939341287ff389b8f4127fd1e9ea194c107be7e488c7062f8e00811641a3d446afbf9af87d8e08da464a75d38613a7cf4e0a52f2dd1a3890cd7d06be5f2feb39c3111040cde39e831ba5af649653c87b8763a95afcefbcfca4cbc43882a389b9741aab392c35093e3620f03943317039ebd8c98166c6479bf51e158d05cd5a1c5a24d55feea530e82a8922aa9caada54435585b389d144ec2ab3a774c955a73ceee8596f9b9f574724", @generic="ea94be26676a0bf10631c7494185eef5586ee3c93701b2856d59f57f4b01e347882f82552a89fc89212ed8b210305c9a99e1fb2c390cb1d850c839c3c5ba01662e5d7d42645022d4e13a1bc7847547a1f1389c053a35bc3fb4a76d4acc2038ac18bde00292", @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @nested={0x8, 0xe1, 0x0, 0x1, [@nested={0x4, 0xfb}]}]}, 0x228}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket(0x10, 0x80003, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551a, &(0x7f00000001c0)={0x5, 0x8, [0x0, 0x0]})
quotactl_fd$Q_GETFMT(r1, 0xffffffff80000402, 0x0, &(0x7f0000000040))

13.405997963s ago: executing program 4 (id=2439):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0xa, 0x5)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = socket$inet6(0xa, 0xa, 0x5)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
listen(r2, 0x732)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x208000, 0x0)
socket$unix(0x1, 0x5, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r4, 0x6, &(0x7f0000000180)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x9, 0x0, "774c3302b1f1b066a380bfe207b87eee3eae02bd83c2a1221c61cc28de9738dd65a7087c64eb12c6b6de92c94c30ac369a9c40de052c528fa8db2e5e374fb46ca3db74fa6de1fc0d3b3daed2a0227652"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x2b, 0x0, "fca57b76070d3dab6b0ec22c3b4e860e817343e91f2a7ebc860f6f4fb693e0ffd7f933e856d35e17f5e064800e1b8ab99c03a012548145d120157e5da1bd9e00"}, 0xd8)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)

12.407728202s ago: executing program 5 (id=2441):
r0 = syz_clone(0x4160391, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil)
shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0x7000)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28815}, 0x4054844)
socket$inet(0x2, 0x3, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00')
getdents64(r4, &(0x7f0000000080)=""/147, 0x93)
r5 = memfd_create(&(0x7f00000004c0)='\xfc\x7f\xc1\xacs\x13\xb1\x16\xa2\xb7\v\b\xd7~Jc\x13!\xb7\xb5.&\x80/dev/Fpe]Fg9\x9c\xc9\x8d\a_\b\xa6\xfb\x97\x8d\xb5e!\xc8\x02\x00\x00\x00\x00\x00\x00\x00L\x80\x0e\x1b\x87\x93!?c\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000300)={r5, 0x0, 0x2000, 0x8000})
r6 = openat(r4, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
syz_open_dev$amidi(&(0x7f0000000280), 0x800002, 0x10182)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045731, &(0x7f0000000000))
close(r6)
socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10)
tkill(r0, 0x12)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180))
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000003c0), 0x4)
waitid(0x1, r0, 0x0, 0x8, 0x0)

11.548486105s ago: executing program 5 (id=2444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000190001dd040000000000000080201b09ff040005"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
signalfd(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x22d00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40850)
listen(0xffffffffffffffff, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
close(r5)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r7, 0x303, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

10.367072574s ago: executing program 4 (id=2446):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7cb, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x0, 0x0, 0x5, 0x0})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}}, 0x980)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90)

9.996443722s ago: executing program 5 (id=2447):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x2) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8901, &(0x7f0000000040)) (async)
sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1}, 0x4815)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x20000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) (async, rerun: 32)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0xf1ec, 0x2000}) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x8, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x8df, 0x9, 0xffffffffffffffff, 0xf, 0xfffffffffffffffd, 0x25a8}, 0x0, 0x0) (async)
prlimit64(0x0, 0x3, &(0x7f0000000080)={0x10000}, &(0x7f0000000100)) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x10}}, 0x0) (async)
close_range(r6, 0xffffffffffffffff, 0x0) (async)
ptrace(0x10, 0x0)

9.8851989s ago: executing program 3 (id=2448):
syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x60000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000e80)="f0356df0", 0x0}, 0x20)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf09dceb48444565ce099c410880084929508d0dd22daccb431e8b5ee0bfc3b177c6a70e83c1752ae7eacbc1d61069f2fd774514c5160cb8638f9072df25ca20d67118f743c5d3b09596948719296757fb841a708948335abd12ca4546376381601c4ab72127fc8f23efef281fecaba4ca1eeca29c72d2de540086cdd1c81557db0c56e8e703fbe4e387cd09576fea86c61639bd7b83ca0f49e17e4b50ee981b8a29f6503348be0da883b00a45dc9531ac11945023ed5466c776daa5f5af9087f4fd8514c4a79e290b7b608ae4ec4951f93ba1"], 0x0, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020000200600200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r6, @ANYBLOB="375a82f9c85ffaa44d17aee8545c46e20540d1fa8667c198866d3f9c5eefa97a602978cf30764e18479ec83161ddff8b8f99cfeac4172242c4eb101f5024149b7b024e28b5c634717351ff5654687f29834ce96c4a41ce1a2a86b8cd2120b995e60d46a470b3c8818a02fbbac824505fd766fc61c085231aa67261ee25b2a8e97954078a8aefe5f4e4bfc9a05c391948773e57"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @remote, @rand_addr=' \x01\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @local}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x8000002d)

9.038257832s ago: executing program 5 (id=2450):
r0 = socket(0x2, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000)
rt_tgsigqueueinfo(0x0, 0x0, 0x11, &(0x7f0000000100)={0x1d, 0x0, 0x7})
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
write(r2, &(0x7f0000000000), 0x0)
sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e", 0xf, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)
shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @private=0xa010101}, 0x10)
syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000055"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000022d80)=ANY=[@ANYBLOB="9feb01db1800000000ffb2000c047f000c"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28)

8.230129032s ago: executing program 3 (id=2451):
memfd_create(0x0, 0x1d)
r0 = socket(0x29, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x7, 0x83ff, @dev={0xfe, 0x80, '\x00', 0x15}, 0xff}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10850020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x43, 0x7f97, 0x7, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10040}, 0x40040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012001, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000000201, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)

8.160180653s ago: executing program 4 (id=2453):
getpid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x20000023896)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, '.\x00'}, 0x6e)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x30144c8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1f0000)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a090582020002000110d0ad1fc72eace5ef157d56d98bb3a003703aaef50fb6b1a104c1ce37d613315ab181e5ba423ac4d68034d3c1f77ac17f833c47d4ca2962d2d8a010c86e401031d34ed724d7179cf7fb0dbbc0c32a0bb42f5a397338423adab2c64e77c35255b53d827cca7ac970e9819f5f0ae3ff0b47ed40879977b7d3c2161394d494284c8efd44b45f7650a2e88f3e9bac353e7c436b08b4606134ef8f845a57df"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)

7.232167842s ago: executing program 3 (id=2455):
ioperm(0x0, 0x2, 0x7e)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2081)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc)
recvmmsg$unix(r2, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000040)=""/27, 0x1b}], 0x3, &(0x7f0000000740)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{&(0x7f0000000a80), 0x6e, 0x0, 0x0, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/200, 0xc8}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000056c0), 0x0, &(0x7f0000001e00)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/183, 0xb7}, {&(0x7f0000005100)=""/135, 0x87}, {&(0x7f00000051c0)=""/202, 0xca}, {&(0x7f00000052c0)=""/142, 0x8e}], 0x5}}], 0x7, 0x10062, &(0x7f0000001d80)={0x0, 0x989680})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r4=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1, r4, 0x1, 0x8}, 0x14)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0)

5.955473376s ago: executing program 5 (id=2457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x24)
sendmmsg$unix(r1, &(0x7f0000000000), 0x4000000000002b7, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50}, 0x50)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000380)={0x0, 0x1, 0x4, 0x1, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r6, 0x6}, &(0x7f0000000800)=0x8)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0)

4.430419653s ago: executing program 3 (id=2461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4   \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc)

4.009960311s ago: executing program 0 (id=2462):
socket(0x1, 0x3, 0x100009)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
capget(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ftruncate(r3, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0)
creat(0x0, 0x109)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xb, 0x121841)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000001c0)={{0x2, 0x5, 0x7, 0xf, 'syz0\x00', 0xffe0}, 0x1, [0x0, 0x3, 0x8001, 0x10000, 0xb1a4, 0xaf8c, 0x4, 0xb, 0x70d, 0x7, 0x5, 0x7, 0xfffffffffffffff7, 0x401, 0x2, 0x2, 0x2, 0x3, 0x6, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc, 0x1, 0x9, 0x8000000000000001, 0x3, 0x8, 0x0, 0x100000004, 0x8, 0xa, 0x9, 0x6, 0x3, 0xfff, 0x1, 0x4, 0x8, 0x9, 0x4, 0x2, 0xa5a, 0x7, 0x400000000, 0x2, 0xffffffff, 0x2, 0x208, 0xa2a, 0x10, 0x4, 0x2, 0x8, 0x1, 0x8, 0x5, 0x0, 0x0, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x400, 0x6, 0x8, 0x7, 0x8, 0x3, 0xff, 0x6d6, 0x0, 0x3, 0x7, 0xffffffffffffffbe, 0x60, 0x19, 0x4, 0x101, 0x2, 0xffffffffffffff66, 0x3, 0x1, 0x6, 0x5e, 0xaf, 0x2, 0x0, 0x6, 0x5, 0x4, 0x3, 0xd, 0x7, 0x5b9, 0x2000000, 0x4, 0x89b7, 0x946, 0x800, 0xffffffffcb5b2d7d, 0x3, 0xc3f, 0x5, 0x9, 0x4fbcc26, 0x3, 0x5, 0x1, 0x7, 0x1, 0x8001, 0xfffffffffffffffe, 0x7, 0x5, 0x89, 0x2, 0xf8b, 0x8, 0x80, 0x4, 0x7, 0xb11, 0xaf, 0x5, 0x1, 0xd, 0xfffffffffffffffa]})

4.008950468s ago: executing program 3 (id=2463):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7cb, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x0, 0x0, 0x5, 0x0})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}}, 0x980)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90)

3.937152087s ago: executing program 2 (id=2464):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000000c0)=0x85, 0x4)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/124, 0x7c}, 0x10002)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x40)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

3.604023026s ago: executing program 0 (id=2465):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)

3.468579245s ago: executing program 0 (id=2466):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94)
r1 = socket(0xf09b9eee75ec2f8, 0x6, 0xf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r0}, 0x20)
sendmsg$nl_generic(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x401, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

3.167995482s ago: executing program 4 (id=2467):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0)
socket$kcm(0x11, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000)
sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)

3.113852405s ago: executing program 2 (id=2468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

2.47995978s ago: executing program 2 (id=2469):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f00000000c0)='./file0\x00', 0x810002, &(0x7f0000000200)=ANY=[@ANYBLOB="766572795f646567726164c92daea6fc93a9ac3ec9636f64652c646174615f7265706c696361733030332cda636c2c6e6f6578636c2f696e6f6465735f7573655f6b65795f63616368652c6d6f76655f62797465735f696e5f666c696768743d302e2b30203030303030647265655f6e6f64655f6d656d5f7074725f6f7074696d697a6174696f7e2c00000200442b94136e86a8fd98b292ea8ee742993572312add1f667956fcd53992bd1174807dcd5aa3838829d7c43556ed5b82d6af62836adb521adcee9559c8a58372e97fb25ebc853a870300"/223], 0x1, 0x58fe, &(0x7f0000005900)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)

2.475525271s ago: executing program 0 (id=2470):
close(0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
clock_gettime(0xfffffffffffffffc, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000cc0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="e80000002c070008292ef6b8aada2d2aa1885319bd7000ffdbdf2508004500", @ANYRES32=r2, @ANYBLOB="3a5e57c7fe4db162c41d1ebbc955c8f9d799c4f3bd7774509de402ea5de830b5a28135739c1d69a239a5d3d97706a5b7f9b376da0ee28b0b9c52f3144e49f28d43f692d015ce3b410a1eb74f70d05184d147bd43ca6584e73e1b228d6151c1c0cc899eca0d788ddfc1d6b290e7f599fabaf628bc09f008569f9a428edcd41a6a415330ec0b550b615f0ecf1b596a1a3b522dadba556a0257fc27092c483cea0591b0029c502d99d8d401ccad6b0faf6a22ad84cde09dc8ecc124b0a7f1f10775967541d67cb2681a9da2cd99553c4231"], 0xe8}, {&(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0700880025f100000c006c000100000000000000d0c9bd5348120e389cab9cb28b31488b27920032c1fd83776cb2f6103f502058ad499ff3ed67bc2215e4172739ae162308e3ca028c23c00f5358e26b29bde04b7b1eb6b76e2706e91046f42acb9217e16c104e8ba44d1632f995011dca30128e4965ec98f1e127f534277e51447ca494e45b88dba72151c39dee160670d753a34c9ced2a7130536dae5838c69559c7c2e3a029da118c13f73170c1429a76aed0622839eee855fa000000"], 0x2d8}, {&(0x7f00000008c0)={0x30, 0x2e, 0x1, 0x70bd27, 0x25dfdbfc, "", [@nested={0x18, 0x127, 0x0, 0x1, [@typed={0x14, 0x85, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x8, 0xef, 0x0, 0x1, [@typed={0x4, 0x145}]}]}, 0x30}, {&(0x7f00000004c0)={0x228, 0x34, 0x8d545c0a04edce23, 0x70bd2b, 0x25dfdbfd, "", [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xe7}, @nested={0x201, 0xa1, 0x0, 0x1, [@generic="d009339a274754e64eb9063a9a46aa7adee7bf7cbc1a5d88ed69286dbe00093664dce745727223a82168221d113c40cedb61ce41b00670362a2624fec668daece76cadd0a11a2b9f0c798449025ad657b4b3373680487aaada2d480a3b60c903fab1510b95c3c00fe441a9a18ef4d35529cd40abad6a32f07d40470dd5", @generic="a470ccddcfecd76860dfb807b16e2b26765c03e05d6854a9c9defab2301ccb5004f6262ca0d818a24f41623d13a2541463614678bc1d08848fb5af1b5220605af36f868136703052586af54f0961e9bda6ce5d9a3a8d7d4e", @nested={0xc, 0x105, 0x0, 0x1, [@nested={0x4, 0xcd}, @typed={0x4, 0x1a}]}, @generic="439280f05b3d939341287ff389b8f4127fd1e9ea194c107be7e488c7062f8e00811641a3d446afbf9af87d8e08da464a75d38613a7cf4e0a52f2dd1a3890cd7d06be5f2feb39c3111040cde39e831ba5af649653c87b8763a95afcefbcfca4cbc43882a389b9741aab392c35093e3620f03943317039ebd8c98166c6479bf51e158d05cd5a1c5a24d55feea530e82a8922aa9caada54435585b389d144ec2ab3a774c955a73ceee8596f9b9f574724", @generic="ea94be26676a0bf10631c7494185eef5586ee3c93701b2856d59f57f4b01e347882f82552a89fc89212ed8b210305c9a99e1fb2c390cb1d850c839c3c5ba01662e5d7d42645022d4e13a1bc7847547a1f1389c053a35bc3fb4a76d4acc2038ac18bde00292", @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @nested={0x8, 0xe1, 0x0, 0x1, [@nested={0x4, 0xfb}]}]}, 0x228}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket(0x10, 0x80003, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551a, &(0x7f00000001c0)={0x5, 0x8, [0x0, 0x0]})
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0x0, &(0x7f0000000040))

1.118402526s ago: executing program 2 (id=2471):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009fc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003a80)="8b", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB='$\x00'], 0x158}}], 0x1, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0xffc, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096})

1.025860124s ago: executing program 0 (id=2472):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80d00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x0, 0xb, 0xfefffffb, 0x80000000, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb8}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x6, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x4, '\x00', 0xff}, {0x6, 0xf4, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x0, 0xa7, '\x00', 0x5}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xee, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x3}, {0xee, 0x6, 0x5, '\x00', 0x3}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x4, '\x00', 0x2}, {0x3, 0x6, 0xfa, '\x00', 0x40}]}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
r7 = socket$inet(0x2, 0x2, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20040824)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r13, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x6c, 0x8, 0x0, 0x0}}, 0x10)

841.324397ms ago: executing program 2 (id=2473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4   \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc)

400.488435ms ago: executing program 3 (id=2474):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000)
sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)

213.034619ms ago: executing program 5 (id=2475):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$BLKCRYPTOIMPORTKEY(0xffffffffffffffff, 0xc0401289, &(0x7f0000000600)={&(0x7f0000000540)="15b26046e1b870d3d2c8a8e288c18213127f2f183614eae00c68cb021bf1", 0x1e, &(0x7f0000000580)=""/40, 0x28})
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='rtc_irq_set_state\x00', 0xffffffffffffffff, 0x0, 0x2000004}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000740)={0xffff1e9d, 0x8e, 0xf, 0x2, 0x2})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0)
prctl$PR_MCE_KILL(0x35, 0x1, 0x8)
prctl$PR_MCE_KILL(0x35, 0x0, 0x10)
mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x30, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

54.142409ms ago: executing program 2 (id=2476):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000))
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000003c0)=[{0x0}], 0x1, 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x9, @local, 0x4}}, 0x0, 0x0, 0x2f, 0x0, "c6552c7408b8f921b470669bcae52c2dbf752824ff11500254e5992d06d38da6707cb35906b97b54d1b363eff910b929e3abe4756aeb061c3b8af4b4800986e41bb6a5804fe8c739a22c018450e5adf3"}, 0xd8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f00011f00fd8db125bb284401"], 0x114}], 0x1}, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x1000000000000002)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xc0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000000)

0s ago: executing program 0 (id=2477):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000008000000dd000000ff00000000000000", @ANYRES32, @ANYBLOB="00000081a6e72c68235006f4d1f700"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
fallocate(r1, 0x1, 0x7fffffffffffffff, 0x7fffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
setreuid(0xee01, 0xee00)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x5, 0x8, 0x0, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000040)="09c70a3cc30b2993c54dd4ecb3e28c8780f795fef7c2e80a5663a7ab3ef6b7b61bfec68350b0535d3f3d96f5a82d375a51b9e3add7607b4eb73cd490d57b67e82efaaa0b6a34fed1203b93c768b85066fe6b09a93c31baec6d65d00e8dbf0e6eb43f", &(0x7f0000000180)=""/67}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)

kernel console output (not intermixed with test programs):

rdir'
[  559.049824][T11105] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  559.059258][T11105] FAT-fs (loop5): unable to read boot sector
[  559.184160][ T5975] usb 4-1: Using ep0 maxpacket: 32
[  559.192379][ T5975] usb 4-1: config 0 interface 0 has no altsetting 0
[  559.211263][ T5975] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  559.604504][    C0] syz_tun: tun_net_xmit 42
[  559.847062][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.972895][ T5975] usb 4-1: Product: syz
[  559.981175][ T5975] usb 4-1: Manufacturer: syz
[  559.986845][ T5975] usb 4-1: SerialNumber: syz
[  560.022457][ T5975] usb 4-1: config 0 descriptor??
[  560.302520][T11120] syz_tun: entered allmulticast mode
[  560.364615][T11120] dvmrp0: entered allmulticast mode
[  560.644059][    C0] syz_tun: tun_net_xmit 42
[  560.875713][T11114] dvmrp0: left allmulticast mode
[  560.880774][T11114] syz_tun: left allmulticast mode
[  561.565796][ T5975] gs_usb 4-1:0.0: Couldn't get device config: (err=-71)
[  561.584519][ T5975] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  561.607072][ T5975] usb 4-1: USB disconnect, device number 39
[  561.684100][    C0] syz_tun: tun_net_xmit 42
[  562.724625][    C0] syz_tun: tun_net_xmit 42
[  563.099366][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  563.180946][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  563.414781][T11147] overlayfs: missing 'lowerdir'
[  563.424568][T11147] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  563.433823][T11147] FAT-fs (loop2): unable to read boot sector
[  563.764120][    C0] syz_tun: tun_net_xmit 42
[  564.804129][    C0] syz_tun: tun_net_xmit 42
[  565.735715][T11170] vfat: Unknown parameter 'shortna��0V'
[  566.164223][    C0] syz_tun: tun_net_xmit 42
[  566.640972][T11162] bond1: (slave veth7): Enslaving as an active interface with a down link
[  566.829110][T11173] syz_tun: entered allmulticast mode
[  566.838642][T11174] dvmrp0: entered allmulticast mode
[  566.844156][T11174] dvmrp0: left allmulticast mode
[  566.849150][T11174] syz_tun: left allmulticast mode
[  566.934294][ T5975] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  567.204107][    C0] syz_tun: tun_net_xmit 42
[  567.264049][ T5975] usb 6-1: Using ep0 maxpacket: 32
[  567.287894][ T5975] usb 6-1: config 0 interface 0 has no altsetting 0
[  567.507985][ T5975] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  567.517148][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.244077][    C0] syz_tun: tun_net_xmit 42
[  568.304223][ T5975] usb 6-1: Product: syz
[  568.312616][T11189] minix: Unknown parameter '/dev/rtc0'
[  568.607216][ T5975] usb 6-1: Manufacturer: syz
[  568.611896][ T5975] usb 6-1: SerialNumber: syz
[  568.651511][ T5975] usb 6-1: config 0 descriptor??
[  568.669394][ T5975] usb 6-1: can't set config #0, error -71
[  568.682555][ T5975] usb 6-1: USB disconnect, device number 10
[  568.798119][T11201] Invalid ELF header magic: != ELF
[  568.863641][T11202] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1295'.
[  569.900049][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'.
[  570.590019][T11212] bond1: (slave veth9): Enslaving as an active interface with a down link
[  570.684034][ T5975] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  570.914224][ T5975] usb 6-1: Using ep0 maxpacket: 16
[  570.922762][ T5975] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  570.949160][ T5975] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  570.974045][ T5975] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  570.996596][ T5975] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  571.009630][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.043217][ T5975] usb 6-1: Product: syz
[  571.051522][ T5975] usb 6-1: Manufacturer: syz
[  571.064350][ T5975] usb 6-1: SerialNumber: syz
[  571.077289][T11225] random: crng reseeded on system resumption
[  571.701754][ T5975] usb 6-1: USB disconnect, device number 11
[  571.765279][T11052] udevd[11052]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  573.126630][    C0] syz_tun: tun_net_xmit 42
[  574.164077][    C0] syz_tun: tun_net_xmit 42
[  574.487249][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'.
[  575.204062][    C0] syz_tun: tun_net_xmit 42
[  575.784075][   T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  576.571573][T11273] delete_channel: no stack
[  576.614079][   T10] usb 3-1: Using ep0 maxpacket: 16
[  576.637232][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  576.669724][   T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  577.397967][   T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  577.412918][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  577.436769][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.491530][   T10] usb 3-1: Product: syz
[  577.567690][   T10] usb 3-1: Manufacturer: syz
[  577.575450][   T10] usb 3-1: SerialNumber: syz
[  578.536121][   T10] usb 3-1: USB disconnect, device number 35
[  579.076488][T11052] udevd[11052]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  579.416457][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1327'.
[  582.023055][T11316] delete_channel: no stack
[  582.065661][T11326] Invalid ELF header magic: != ELF
[  583.081824][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1337'.
[  583.974017][ T5875] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  584.144137][ T5875] usb 1-1: Using ep0 maxpacket: 32
[  584.160573][ T5875] usb 1-1: config 2 has an invalid interface number: 20 but max is 0
[  584.187555][ T5875] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  584.225935][ T5875] usb 1-1: config 2 has no interface number 0
[  584.232097][ T5875] usb 1-1: config 2 interface 20 altsetting 3 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  584.268668][ T5875] usb 1-1: config 2 interface 20 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0
[  584.288931][ T5875] usb 1-1: config 2 interface 20 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  584.335976][ T5875] usb 1-1: config 2 interface 20 has no altsetting 0
[  584.359380][ T5875] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93
[  584.380146][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.082313][ T5875] usb 1-1: string descriptor 0 read error: -71
[  585.116387][ T5875] usb 1-1: USB disconnect, device number 35
[  585.603759][T11362] syz_tun: entered allmulticast mode
[  585.656997][T11362] dvmrp0: entered allmulticast mode
[  586.183406][T11358] dvmrp0: left allmulticast mode
[  586.188600][T11358] syz_tun: left allmulticast mode
[  586.822894][T11371] netlink: 'syz.2.1348': attribute type 1 has an invalid length.
[  587.116184][   T13] Bluetooth: (null): Invalid header checksum
[  587.122286][   T13] Bluetooth: (null): Invalid header checksum
[  587.204185][    C0] syz_tun: tun_net_xmit 42
[  587.213634][   T13] Bluetooth: (null): Invalid header checksum
[  587.246960][   T13] Bluetooth: (null): Invalid header checksum
[  587.373022][   T13] Bluetooth: (null): Invalid header checksum
[  588.157469][T11380] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  588.224579][T11380] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  588.244271][    C0] syz_tun: tun_net_xmit 42
[  588.278089][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  588.459003][T11380] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  588.461176][T11387] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1353'.
[  588.499463][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  588.558613][T11380] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  588.584237][T11380] UDF-fs: Scanning with blocksize 512 failed
[  588.677502][T11380] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  588.722714][T11380] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  588.927120][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  588.961467][T11380] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  589.075061][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  589.088118][T11380] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  589.095931][T11380] UDF-fs: Scanning with blocksize 1024 failed
[  589.102651][T11380] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  589.114481][T11380] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  589.124588][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  589.161064][T11380] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  589.200494][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  589.284076][    C0] syz_tun: tun_net_xmit 42
[  589.323577][T11380] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  589.331800][T11380] UDF-fs: Scanning with blocksize 2048 failed
[  589.340047][T11380] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  589.349880][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  589.359979][T11380] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  589.370086][T11380] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  589.377911][T11380] UDF-fs: Scanning with blocksize 4096 failed
[  589.384961][T11380] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  590.129434][T11401] Invalid ELF header magic: != ELF
[  590.796462][T11404] Invalid ELF header magic: != ELF
[  591.813632][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1360'.
[  593.354444][ T5975] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  593.574551][ T5975] usb 6-1: Using ep0 maxpacket: 16
[  593.605132][ T5975] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  593.674644][ T5975] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  593.728273][ T5975] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  593.763027][ T5975] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  593.792836][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.822813][ T5975] usb 6-1: Product: syz
[  593.827323][ T5975] usb 6-1: Manufacturer: syz
[  593.832919][ T5975] usb 6-1: SerialNumber: syz
[  593.988754][T11435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1369'.
[  594.456464][ T5975] usb 6-1: USB disconnect, device number 12
[  594.916697][T11052] udevd[11052]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  595.979176][ T5866] Bluetooth: hci3: command 0x0405 tx timeout
[  598.034906][T11471] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003
[  598.187003][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1382'.
[  598.208892][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1382'.
[  598.443274][ T5995] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  599.404178][ T5995] usb 5-1: Using ep0 maxpacket: 8
[  599.563729][ T5995] usb 5-1: config 0 has an invalid interface number: 172 but max is 2
[  599.604611][ T5995] usb 5-1: config 0 has an invalid interface number: 234 but max is 2
[  599.625296][ T5995] usb 5-1: config 0 has no interface number 1
[  599.631983][ T5995] usb 5-1: config 0 has no interface number 2
[  599.684945][ T5995] usb 5-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83
[  599.711382][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.766064][ T5995] usb 5-1: Product: syz
[  599.783478][ T5995] usb 5-1: Manufacturer: syz
[  599.800053][T11488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1385'.
[  599.812650][ T5995] usb 5-1: SerialNumber: syz
[  599.864042][ T5995] usb 5-1: config 0 descriptor??
[  599.897371][ T1212] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  600.219697][ T5995] usb 5-1: USB disconnect, device number 29
[  600.304132][ T1212] usb 1-1: Using ep0 maxpacket: 16
[  600.311129][ T1212] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  600.321657][ T1212] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  600.332997][ T1212] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  600.354514][ T1212] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  600.373899][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.382321][ T1212] usb 1-1: Product: syz
[  600.394878][ T1212] usb 1-1: Manufacturer: syz
[  600.399936][ T1212] usb 1-1: SerialNumber: syz
[  601.698015][T11497] delete_channel: no stack
[  602.730592][T11506] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  603.056595][ T1212] usb 1-1: USB disconnect, device number 36
[  604.530307][T11529] syz_tun: entered allmulticast mode
[  604.580549][T11529] dvmrp0: entered allmulticast mode
[  604.764067][ T5995] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  604.908160][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'.
[  604.926940][ T5995] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  604.933683][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'.
[  604.943626][ T5995] usb 5-1: config 0 has no interface number 0
[  604.971443][ T5995] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  604.984959][ T5995] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  604.999409][ T5995] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58
[  605.015468][T11523] dvmrp0: left allmulticast mode
[  605.020562][T11523] syz_tun: left allmulticast mode
[  605.046892][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.064084][ T5995] usb 5-1: Product: syz
[  605.068289][ T5995] usb 5-1: Manufacturer: syz
[  605.072883][ T5995] usb 5-1: SerialNumber: syz
[  605.100886][ T5995] usb 5-1: config 0 descriptor??
[  605.122515][ T5995] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input14
[  605.444103][T11545] new mount options do not match the existing superblock, will be ignored
[  605.634255][T11547] fuse: Unknown parameter 'L'
[  605.747243][   T30] audit: type=1326 audit(1758176023.236:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  605.769638][    C1] vkms_vblank_simulate: vblank timer overrun
[  605.899116][   T30] audit: type=1326 audit(1758176023.236:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  605.907487][T11545] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  605.929566][ T9993] usb 5-1: USB disconnect, device number 30
[  605.974675][   T30] audit: type=1326 audit(1758176023.236:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  610.210782][T11590] vfat: Unknown parameter 'shortna��0V'
[  611.494065][ T1212] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  611.734623][ T1212] usb 4-1: Using ep0 maxpacket: 32
[  611.835529][ T1212] usb 4-1: config 0 interface 0 has no altsetting 0
[  611.985644][ T1212] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  612.556423][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.565611][ T1212] usb 4-1: Product: syz
[  612.569818][ T1212] usb 4-1: Manufacturer: syz
[  612.574477][ T1212] usb 4-1: SerialNumber: syz
[  612.586860][ T1212] usb 4-1: config 0 descriptor??
[  612.852617][ T1212] gs_usb 4-1:0.0: Couldn't send data format (err=-71)
[  612.870123][ T1212] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  613.274015][ T1212] usb 4-1: USB disconnect, device number 40
[  614.126986][T11622] new mount options do not match the existing superblock, will be ignored
[  614.431701][   T30] audit: type=1326 audit(1758176031.926:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  614.454127][    C1] vkms_vblank_simulate: vblank timer overrun
[  614.717004][   T30] audit: type=1326 audit(1758176031.926:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  614.739704][    C0] syz_tun: tun_net_xmit 42
[  614.745787][T11619] fuse: Unknown parameter 'L'
[  614.786125][   T30] audit: type=1326 audit(1758176031.926:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  614.809256][   T30] audit: type=1326 audit(1758176032.596:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  614.836238][   T30] audit: type=1326 audit(1758176032.596:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  614.879826][T11622] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  615.164046][   T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  615.287582][T11635] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1419'.
[  615.395902][   T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  615.436953][   T10] usb 3-1: config 1 has no interface number 0
[  615.467304][   T10] usb 3-1: config 1 interface 105 has no altsetting 0
[  615.547175][   T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  615.572634][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.764043][    C0] syz_tun: tun_net_xmit 42
[  615.849298][   T10] usb 3-1: Product: syz
[  615.853498][   T10] usb 3-1: Manufacturer: syz
[  615.871367][   T10] usb 3-1: SerialNumber: syz
[  616.439808][T11643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1421'.
[  616.814032][    C0] syz_tun: tun_net_xmit 42
[  617.029529][   T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  617.233183][   T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  617.403105][   T10] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f
[  617.918570][T11653] delete_channel: no stack
[  619.532335][   T10] usb 3-1: USB disconnect, device number 36
[  619.542114][   T10] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  620.093155][T11656] blk_print_req_error: 2 callbacks suppressed
[  620.093180][T11656] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  620.109937][T11656] bcachefs (/dev/loop4): error reading default superblock: IO error: -5
[  620.119119][T11656] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  620.128770][T11656] bcachefs (/dev/loop4): error reading superblock: IO error: -5
[  620.137477][T11656] bcachefs: bch2_fs_get_tree() error: EIO
[  620.550888][T11658] Invalid ELF header magic: != ELF
[  620.753287][   T10] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  620.803677][   T10] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  621.032157][   T10] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  621.876338][T11669] vfat: Unknown parameter 'shortna��0V'
[  622.581138][T11674] udf: Unknown parameter '��������'
[  622.927225][T11683] tipc: Started in network mode
[  622.932261][T11683] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  622.949612][T11683] tipc: Enabled bearer <udp:syz0>, priority 10
[  622.963301][T11683] netlink: 'syz.3.1429': attribute type 3 has an invalid length.
[  623.376380][   T30] audit: type=1326 audit(1758176041.256:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  623.472013][T11685] new mount options do not match the existing superblock, will be ignored
[  623.516918][   T30] audit: type=1326 audit(1758176041.256:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  623.584120][ T1212] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  623.697474][T11687] fuse: Unknown parameter 'L'
[  623.839821][   T30] audit: type=1326 audit(1758176041.256:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  623.847221][T11685] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  624.064082][ T5995] tipc: Node number set to 4269801488
[  624.333292][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  624.348511][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  625.411039][T11690] delete_channel: no stack
[  626.363803][T11720] bond1: (slave veth5): Enslaving as an active interface with a down link
[  626.721983][T11730] dvmrp0: entered allmulticast mode
[  627.381147][T11727] dvmrp0: left allmulticast mode
[  627.421965][T11733] Invalid ELF header magic: != ELF
[  630.815141][  T980] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  631.144142][  T980] usb 4-1: Using ep0 maxpacket: 32
[  631.166156][  T980] usb 4-1: config 0 interface 0 has no altsetting 0
[  631.231592][  T980] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  631.384351][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.425313][  T980] usb 4-1: Product: syz
[  631.443280][  T980] usb 4-1: Manufacturer: syz
[  631.449060][  T980] usb 4-1: SerialNumber: syz
[  631.468586][  T980] usb 4-1: config 0 descriptor??
[  632.598681][T11775] delete_channel: no stack
[  632.806717][  T980] gs_usb 4-1:0.0: Couldn't get device config: (err=-110)
[  632.821248][  T980] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110
[  633.374316][  T980] usb 4-1: USB disconnect, device number 41
[  635.796692][T11807] syz_tun: entered allmulticast mode
[  635.846846][T11807] dvmrp0: entered allmulticast mode
[  637.168218][T11817] new mount options do not match the existing superblock, will be ignored
[  637.589529][T11815] fuse: Unknown parameter 'L'
[  637.708346][T11817] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  637.848727][   T30] audit: type=1326 audit(1758176054.956:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  638.038349][   T30] audit: type=1326 audit(1758176054.956:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  638.288459][   T30] audit: type=1326 audit(1758176054.956:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  639.514101][  T980] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  641.675246][  T980] usb 5-1: device descriptor read/all, error -71
[  642.465286][ T1212] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  643.537541][ T1212] usb 6-1: Using ep0 maxpacket: 32
[  643.565463][ T1212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  643.759827][ T1212] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  643.779542][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.827495][ T1212] usb 6-1: Product: syz
[  643.831701][ T1212] usb 6-1: Manufacturer: syz
[  644.003171][ T1212] usb 6-1: SerialNumber: syz
[  644.248868][   T30] audit: type=1326 audit(1758176062.076:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  644.398791][T11871] new mount options do not match the existing superblock, will be ignored
[  644.552585][ T1212] usb 6-1: config 0 descriptor??
[  644.604024][   T30] audit: type=1326 audit(1758176062.076:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  644.634599][T11873] fuse: Unknown parameter 'L'
[  644.817745][T11871] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  644.830853][   T30] audit: type=1326 audit(1758176062.116:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  644.888966][ T1212] usb 6-1: can't set config #0, error -71
[  644.916930][ T1212] usb 6-1: USB disconnect, device number 14
[  645.998711][T11882] new mount options do not match the existing superblock, will be ignored
[  646.405311][T11880] fuse: Unknown parameter 'L'
[  646.525670][T11882] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  646.549715][   T30] audit: type=1326 audit(1758176063.786:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  646.574554][   T30] audit: type=1326 audit(1758176063.786:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  646.597471][   T30] audit: type=1326 audit(1758176063.786:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  646.619806][    C0] vkms_vblank_simulate: vblank timer overrun
[  646.862074][T11888] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  649.241676][   T30] audit: type=1326 audit(1758176067.116:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.0.1478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efff778eba9 code=0x0
[  651.228807][T11916] delete_channel: no stack
[  651.775101][ T5875] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  651.879592][T11930] overlayfs: upper fs does not support tmpfile.
[  653.278157][ T5875] usb 4-1: Using ep0 maxpacket: 32
[  653.469190][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  653.481553][ T5875] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  653.492183][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.500664][ T5875] usb 4-1: Product: syz
[  653.504989][ T5875] usb 4-1: Manufacturer: syz
[  653.509599][ T5875] usb 4-1: SerialNumber: syz
[  653.516125][ T5875] usb 4-1: config 0 descriptor??
[  653.523652][ T5875] cdc_ether 4-1:0.0: skipping garbage
[  653.529698][ T5875] usb 4-1: bad CDC descriptors
[  653.564666][ T5875] usb 4-1: unsupported MDLM descriptors
[  653.764194][ T5920] usb 4-1: USB disconnect, device number 42
[  655.281538][T11948] new mount options do not match the existing superblock, will be ignored
[  655.640750][   T30] audit: type=1326 audit(1758176073.076:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  655.663742][   T30] audit: type=1326 audit(1758176073.076:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  655.769687][T11946] fuse: Unknown parameter 'L'
[  655.884549][T11948] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  656.544583][T11954] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  656.566099][   T30] audit: type=1326 audit(1758176073.076:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  657.217941][T11957] ufs: You didn't specify the type of your ufs filesystem
[  657.217941][T11957] 
[  657.217941][T11957] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  657.217941][T11957] 
[  657.217941][T11957] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  657.442194][T11957] ufs: ufstype=old is supported read-only
[  657.947190][T11957] ufs: ufs_fill_super(): bad magic number
[  657.971883][T11967] netlink: 'syz.3.1489': attribute type 25 has an invalid length.
[  657.985765][T11967] netlink: 'syz.3.1489': attribute type 7 has an invalid length.
[  660.484393][T11978] delete_channel: no stack
[  661.244273][T11984] delete_channel: no stack
[  663.157773][T12005] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  663.184327][ T5875] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  663.534183][ T5875] usb 5-1: Using ep0 maxpacket: 32
[  665.554496][T12015] new mount options do not match the existing superblock, will be ignored
[  667.304246][T12017] fuse: Unknown parameter 'L'
[  667.375893][   T30] audit: type=1326 audit(1758176083.006:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  667.464024][T12015] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  667.560470][ T5875] usb 5-1: unable to read config index 0 descriptor/all
[  667.604274][   T30] audit: type=1326 audit(1758176083.006:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  667.627432][   T30] audit: type=1326 audit(1758176083.126:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  667.662321][ T5875] usb 5-1: can't read configurations, error -71
[  668.458055][T12037] new mount options do not match the existing superblock, will be ignored
[  669.038519][T12032] fuse: Unknown parameter 'L'
[  669.040683][   T30] audit: type=1326 audit(1758176086.246:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  669.074089][   T30] audit: type=1326 audit(1758176086.246:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  669.096866][   T30] audit: type=1326 audit(1758176086.246:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  669.212027][T12037] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  669.511433][T12043] Invalid ELF header magic: != ELF
[  669.844088][ T5866] Bluetooth: hci2: command 0x0406 tx timeout
[  670.483690][T12047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1509'.
[  673.006419][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1514'.
[  673.072498][T12062] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  673.083162][T12062] EXT4-fs (loop5): unable to read superblock
[  673.113694][T12054] delete_channel: no stack
[  673.584986][T12065] EXT4-fs: inline encryption not supported
[  673.932600][T12065] EXT4-fs: Ignoring removed i_version option
[  673.984255][T12065] EXT4-fs: Ignoring removed bh option
[  674.009736][T12065] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  674.057715][T12065] EXT4-fs (loop5): unable to read superblock
[  674.309489][T12076] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  674.319939][ T5875] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  674.754094][ T5875] usb 4-1: Using ep0 maxpacket: 32
[  674.792932][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  674.858279][ T5875] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  674.882977][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.004032][ T5875] usb 4-1: Product: syz
[  675.008334][ T5875] usb 4-1: Manufacturer: syz
[  675.012975][ T5875] usb 4-1: SerialNumber: syz
[  675.698908][ T5875] usb 4-1: config 0 descriptor??
[  675.776999][ T5875] cdc_ether 4-1:0.0: skipping garbage
[  675.793629][ T5875] usb 4-1: bad CDC descriptors
[  675.810689][ T5875] usb 4-1: unsupported MDLM descriptors
[  675.975150][T12088] netlink: 'syz.0.1520': attribute type 1 has an invalid length.
[  676.016648][ T5875] usb 4-1: USB disconnect, device number 43
[  676.116724][ T2994] Bluetooth: (null): Invalid header checksum
[  676.136301][ T2994] Bluetooth: (null): Invalid header checksum
[  676.227207][ T2994] Bluetooth: (null): Invalid header checksum
[  676.229469][T12090] bond1: (slave veth5): Enslaving as an active interface with a down link
[  676.337205][   T70] Bluetooth: (null): Invalid header checksum
[  676.446591][ T2994] Bluetooth: (null): Invalid header checksum
[  676.505175][ T5875] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  676.716711][T12097] new mount options do not match the existing superblock, will be ignored
[  677.103198][T12095] fuse: Unknown parameter '0x0000000000000005'
[  677.126613][   T49] Bluetooth: (null): Invalid header checksum
[  677.138081][   T49] Bluetooth: (null): Invalid header checksum
[  677.143972][   T30] audit: type=1326 audit(1758176094.496:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12093 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  677.187640][ T5875] usb 6-1: Using ep0 maxpacket: 32
[  677.232933][T12097] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  677.326190][   T49] Bluetooth: (null): Invalid header checksum
[  677.348980][   T49] Bluetooth: (null): Invalid header checksum
[  677.380785][   T49] Bluetooth: (null): Invalid header checksum
[  677.403561][ T5875] usb 6-1: config 2 has an invalid interface number: 1 but max is 0
[  677.422016][   T30] audit: type=1326 audit(1758176094.506:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12093 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  677.452525][ T5875] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  677.470078][ T5875] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  677.601999][ T5875] usb 6-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[  677.613215][   T30] audit: type=1326 audit(1758176094.506:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12093 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  677.653971][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.668830][ T5875] usb 6-1: Product: syz
[  677.794330][ T5875] usb 6-1: Manufacturer: syz
[  677.798998][ T5875] usb 6-1: SerialNumber: syz
[  677.824519][ T5875] cdc_acm 6-1:2.1: probe with driver cdc_acm failed with error -22
[  677.843550][ T5875] cdc_acm 6-1:2.0: probe with driver cdc_acm failed with error -22
[  678.408758][T12092] pim6reg: entered allmulticast mode
[  678.466488][T12107] pim6reg: left allmulticast mode
[  678.699858][ T5875] usb 6-1: USB disconnect, device number 15
[  680.343869][T12128] openvswitch: netlink: Actions may not be safe on all matching packets
[  681.894213][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  682.283428][T12150] new mount options do not match the existing superblock, will be ignored
[  682.307349][   T30] audit: type=1326 audit(1758176100.066:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.4.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  682.653607][T12147] fuse: Unknown parameter '0x0000000000000005'
[  682.674444][    T9] usb 6-1: Using ep0 maxpacket: 16
[  682.699773][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  682.727503][   T30] audit: type=1326 audit(1758176100.066:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.4.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  682.774575][T12150] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  682.800220][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  682.962306][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  682.972932][   T30] audit: type=1326 audit(1758176100.066:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.4.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  682.995357][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.007699][    T9] usb 6-1: config 0 descriptor??
[  683.098642][    T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  684.590637][T12166] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1538'.
[  685.627415][   T10] usb 6-1: USB disconnect, device number 16
[  685.785876][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  685.814476][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  687.131921][T12197] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1547'.
[  689.223762][T12215] new mount options do not match the existing superblock, will be ignored
[  689.626106][T12211] fuse: Unknown parameter '0x0000000000000005'
[  689.633721][   T30] audit: type=1326 audit(1758176107.006:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1d8eba9 code=0x7ffc0000
[  689.723067][   T30] audit: type=1326 audit(1758176107.006:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a1d8eba9 code=0x7ffc0000
[  689.745473][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.756774][T12215] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  689.826198][   T30] audit: type=1326 audit(1758176107.006:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd0a1d8eba9 code=0x7ffc0000
[  689.937203][T12220] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1551'.
[  690.649700][T12222] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1
[  690.659532][T12222] SQUASHFS error: Failed to read block 0x0: -5
[  690.665791][T12222] unable to read squashfs_super_block
[  693.433958][T12261] netlink: 'syz.5.1565': attribute type 29 has an invalid length.
[  693.443243][T12261] netlink: 'syz.5.1565': attribute type 29 has an invalid length.
[  693.522279][T12263] netlink: 'syz.5.1567': attribute type 1 has an invalid length.
[  694.295904][T12277] netlink: 'syz.5.1572': attribute type 2 has an invalid length.
[  694.323704][T12277] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1572'.
[  694.353486][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1574'.
[  694.387878][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1574'.
[  694.612808][T12300] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  694.632965][T12301] netlink: 'syz.4.1583': attribute type 13 has an invalid length.
[  694.641157][T12300] netlink: 'syz.0.1584': attribute type 2 has an invalid length.
[  694.678669][T12301] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1583'.
[  694.712692][T12303] syzkaller0: entered promiscuous mode
[  694.742315][T12303] syzkaller0: entered allmulticast mode
[  694.764385][T12301] syz_tun: refused to change device tx_queue_len
[  695.236812][T12329] netlink: 'syz.2.1596': attribute type 29 has an invalid length.
[  695.267410][T12333] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1598'.
[  695.294024][T12332] netlink: 'syz.0.1597': attribute type 29 has an invalid length.
[  695.305477][T12329] netlink: 'syz.2.1596': attribute type 29 has an invalid length.
[  695.482984][T12349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1605'.
[  695.513684][T12351] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1606'.
[  695.547838][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1606'.
[  695.598269][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1606'.
[  695.760672][T12367] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1614'.
[  697.116827][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'.
[  697.479780][T12481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1668'.
[  697.640104][T12488] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1670'.
[  697.912843][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1683'.
[  698.088382][T12518] dvmrp1: tun_chr_ioctl cmd 1074025677
[  698.109859][T12521] comedi comedi3: board detection failed
[  698.124526][T12518] dvmrp1: linktype set to 517
[  700.000670][T12549] Invalid ELF header magic: != ELF
[  702.441626][T12560] Invalid ELF header magic: != ELF
[  704.414795][T12564] delete_channel: no stack
[  705.364162][    C1] syz_tun: tun_net_xmit 54
[  705.724598][T12580] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1706'.
[  706.244087][    C1] syz_tun: tun_net_xmit 54
[  706.549766][T12591] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  707.915613][T12606] new mount options do not match the existing superblock, will be ignored
[  708.499812][T12604] fuse: Unknown parameter 'L'
[  708.560471][   T30] audit: type=1326 audit(1758176125.696:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  708.623757][T12606] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  708.716871][   T30] audit: type=1326 audit(1758176125.696:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  708.891643][   T30] audit: type=1326 audit(1758176125.706:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12602 comm="syz.2.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  708.914056][    C0] vkms_vblank_simulate: vblank timer overrun
[  709.760440][T12620] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1718'.
[  710.650534][  T980] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  710.869883][  T980] usb 5-1: device descriptor read/64, error -71
[  711.134975][  T980] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  711.349456][  T980] usb 5-1: device descriptor read/64, error -71
[  711.485967][  T980] usb usb5-port1: attempt power cycle
[  712.624063][  T980] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  712.645587][  T980] usb 5-1: device descriptor read/8, error -71
[  712.668586][T12650] syz_tun: entered allmulticast mode
[  712.692551][T12650] dvmrp0: entered allmulticast mode
[  713.556235][T12651] Invalid ELF header magic: != ELF
[  714.294791][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'.
[  714.478715][T12663] syz_tun: entered allmulticast mode
[  714.528850][T12663] dvmrp0: entered allmulticast mode
[  717.769485][T12680] validate_nla: 8 callbacks suppressed
[  717.769526][T12680] netlink: 'syz.2.1739': attribute type 1 has an invalid length.
[  718.113351][T12690] 9pnet_fd: Insufficient options for proto=fd
[  718.369593][   T12] Bluetooth: (null): Invalid header checksum
[  718.587448][   T12] Bluetooth: (null): Invalid header checksum
[  718.621311][   T12] Bluetooth: (null): Invalid header checksum
[  718.668212][   T12] Bluetooth: (null): Invalid header checksum
[  718.693432][   T12] Bluetooth: (null): Invalid header checksum
[  718.754347][   T12] Bluetooth: (null): Invalid header checksum
[  718.831087][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'.
[  718.864265][ T2994] Bluetooth: (null): Invalid header checksum
[  718.974293][ T6244] Bluetooth: (null): Invalid header checksum
[  719.339383][   T12] Bluetooth: (null): Invalid header checksum
[  719.354305][   T12] Bluetooth: (null): Invalid header checksum
[  719.360606][   T12] Bluetooth: (null): Invalid header checksum
[  719.423958][   T12] Bluetooth: (null): Invalid header checksum
[  721.409798][   T13] Bluetooth: (null): Invalid header checksum
[  721.437796][   T13] Bluetooth: (null): Invalid header checksum
[  721.471012][   T13] Bluetooth: (null): Invalid header checksum
[  721.505574][   T13] Bluetooth: (null): Invalid header checksum
[  721.511741][   T13] Bluetooth: (null): Invalid header checksum
[  721.545342][   T13] Bluetooth: (null): Invalid header checksum
[  721.594744][   T13] Bluetooth: (null): Invalid header checksum
[  721.600969][   T13] Bluetooth: (null): Invalid header checksum
[  721.633598][   T13] Bluetooth: (null): Invalid header checksum
[  721.643256][   T13] Bluetooth: (null): Invalid header checksum
[  722.698501][ T1212] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  723.188767][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  723.222764][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  723.235952][ T1212] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  723.245707][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1759'.
[  723.254925][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.283007][ T1212] usb 4-1: Product: syz
[  723.290065][ T1212] usb 4-1: Manufacturer: syz
[  723.342971][ T1212] usb 4-1: SerialNumber: syz
[  723.366711][T12741] Invalid ELF header magic: != ELF
[  723.461782][ T1212] usb 4-1: config 0 descriptor??
[  724.036350][ T1212] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  724.193706][T12747] tipc: New replicast peer: 255.255.255.255
[  724.200793][T12747] tipc: Enabled bearer <udp:s>, priority 10
[  725.070053][ T1212] usb 4-1: USB disconnect, device number 44
[  725.183492][T12724] udevd[12724]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  726.672873][T12765] delete_channel: no stack
[  728.194952][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  728.728085][    T9] usb 4-1: Using ep0 maxpacket: 32
[  728.744337][T12795] comedi comedi3: board detection failed
[  728.751485][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  728.809209][    T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  728.890990][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.959660][    T9] usb 4-1: Product: syz
[  728.972393][    T9] usb 4-1: Manufacturer: syz
[  728.977294][    T9] usb 4-1: SerialNumber: syz
[  729.042233][    T9] usb 4-1: config 0 descriptor??
[  729.248603][    T9] cdc_ether 4-1:0.0: skipping garbage
[  729.259288][    T9] usb 4-1: bad CDC descriptors
[  729.372094][T12800] vfat: Unknown parameter 'shortna��0V'
[  730.035712][    T9] usb 4-1: unsupported MDLM descriptors
[  730.117723][  T980] usb 4-1: USB disconnect, device number 45
[  730.324108][    C0] syz_tun: tun_net_xmit 54
[  730.484413][    C0] syz_tun: tun_net_xmit 54
[  731.493841][ T5875] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  731.593488][T12819] netlink: 'syz.3.1781': attribute type 1 has an invalid length.
[  731.832306][ T1119] Bluetooth: (null): Invalid header checksum
[  731.838591][ T1119] Bluetooth: (null): Invalid header checksum
[  731.884112][ T5875] usb 3-1: device descriptor read/64, error -71
[  732.195393][ T5875] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  733.048381][ T5875] usb 3-1: device descriptor read/64, error -71
[  733.244751][ T5875] usb usb3-port1: attempt power cycle
[  734.024068][ T5875] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  734.654311][ T5875] usb 3-1: device descriptor read/8, error -71
[  734.771190][T12849] comedi comedi3: board detection failed
[  735.084518][T12855] overlayfs: missing 'lowerdir'
[  735.096665][T12855] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  735.105976][T12855] FAT-fs (loop3): unable to read boot sector
[  736.732337][ T5875] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  736.810504][T12865] netlink: 'syz.4.1793': attribute type 1 has an invalid length.
[  736.864145][ T5921] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  737.069118][   T13] Bluetooth: (null): Invalid header checksum
[  737.144330][   T13] Bluetooth: (null): Invalid header checksum
[  737.150646][   T13] Bluetooth: (null): Invalid header checksum
[  737.164208][ T5875] usb 4-1: Using ep0 maxpacket: 32
[  737.171119][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.209931][ T5875] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  737.224004][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.233446][ T5875] usb 4-1: Product: syz
[  737.241637][ T5875] usb 4-1: Manufacturer: syz
[  737.247592][ T5875] usb 4-1: SerialNumber: syz
[  737.263234][ T5875] usb 4-1: config 0 descriptor??
[  737.274363][ T5921] usb 6-1: Using ep0 maxpacket: 16
[  737.288909][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.302154][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  737.336762][ T5875] cdc_ether 4-1:0.0: skipping garbage
[  737.344190][ T5875] usb 4-1: bad CDC descriptors
[  737.352453][ T5921] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  737.379716][ T5875] usb 4-1: unsupported MDLM descriptors
[  737.381875][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.443644][ T5921] usb 6-1: config 0 descriptor??
[  737.460996][ T5921] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  737.577503][ T5875] usb 4-1: USB disconnect, device number 46
[  739.357644][ T5921] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  740.001548][ T5920] usb 6-1: USB disconnect, device number 17
[  740.126378][ T5921] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[  740.551258][ T5921] usb 3-1: config 160 has no interface number 0
[  740.567704][ T5921] usb 3-1: config 160 interface 200 has no altsetting 0
[  740.578136][ T5921] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  740.587891][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.596123][ T5921] usb 3-1: Product: syz
[  740.600562][ T5921] usb 3-1: Manufacturer: syz
[  740.987078][ T5921] usb 3-1: SerialNumber: syz
[  741.709986][T12899] overlayfs: failed to resolve './file1': -2
[  741.788612][T12900] fuse: Unknown parameter '00000000000000000004��������0000000000000000000500000000000000000000005'
[  742.428861][T12897] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  742.458906][T12879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  742.568553][T12879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.021535][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  743.033759][ T5921] usb 3-1: MIDIStreaming interface descriptor not found
[  743.464561][ T5921] usb 3-1: USB disconnect, device number 41
[  744.114555][T12724] udevd[12724]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  745.419774][ T5875] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  745.959332][ T5875] usb 6-1: Using ep0 maxpacket: 32
[  746.383693][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  746.409594][ T5875] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  746.440487][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.450294][ T5875] usb 6-1: Product: syz
[  746.454689][ T5875] usb 6-1: Manufacturer: syz
[  746.459432][ T5875] usb 6-1: SerialNumber: syz
[  746.467131][ T5875] usb 6-1: config 0 descriptor??
[  746.476118][ T5875] cdc_ether 6-1:0.0: skipping garbage
[  746.481734][ T5875] usb 6-1: bad CDC descriptors
[  746.492222][ T5875] usb 6-1: unsupported MDLM descriptors
[  747.215885][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  747.221865][    T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  747.222307][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  747.327832][ T9993] usb 6-1: USB disconnect, device number 18
[  747.393957][    T9] usb 5-1: Using ep0 maxpacket: 32
[  747.401001][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.428326][    T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  747.437795][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.450019][T12950] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1818'.
[  747.477530][    T9] usb 5-1: Product: syz
[  747.501921][    T9] usb 5-1: Manufacturer: syz
[  747.556757][    T9] usb 5-1: SerialNumber: syz
[  748.562131][    T9] usb 5-1: config 0 descriptor??
[  748.779702][T12957] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  748.785737][    T9] usb 5-1: can't set config #0, error -71
[  748.799307][    T9] usb 5-1: USB disconnect, device number 39
[  748.807171][T12948] delete_channel: no stack
[  748.847618][T12957] EXT4-fs (loop5): unable to read superblock
[  752.793538][T12989] delete_channel: no stack
[  753.162684][T13013] tipc: Failed to remove unknown binding: 66,3,3/0:2121424591/2121424592
[  753.456504][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  753.765259][    T9] usb 6-1: Using ep0 maxpacket: 16
[  753.806625][    T9] usb 6-1: config 223 has too many interfaces: 142, using maximum allowed: 32
[  753.992324][    T9] usb 6-1: config 223 has an invalid descriptor of length 0, skipping remainder of the config
[  754.140339][    T9] usb 6-1: config 223 has 1 interface, different from the descriptor's value: 142
[  754.266802][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  754.279936][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.321426][    T9] usb 6-1: Product: syz
[  754.329899][    T9] usb 6-1: Manufacturer: syz
[  754.337316][    T9] usb 6-1: SerialNumber: syz
[  755.077222][    T9] usb 6-1: 0:2 : does not exist
[  755.192178][    T9] usb 6-1: USB disconnect, device number 19
[  756.117183][T13039] delete_channel: no stack
[  756.341757][T13049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1848'.
[  756.362795][T13054] overlayfs: missing 'lowerdir'
[  756.386380][T13054] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  756.395785][T13054] FAT-fs (loop2): unable to read boot sector
[  758.392894][T13080] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  759.092639][T13085] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  759.354646][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  760.654054][    T9] usb 3-1: Using ep0 maxpacket: 16
[  760.661784][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  760.672170][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  761.189641][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  761.205544][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.224516][    T9] usb 3-1: config 0 descriptor??
[  761.264230][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  762.494304][T13118] comedi comedi3: board detection failed
[  763.029972][T13123] vfat: Unknown parameter 'shortna��0V'
[  763.420360][   T10] usb 3-1: USB disconnect, device number 42
[  763.564190][ T5875] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  763.864076][ T5875] usb 6-1: Using ep0 maxpacket: 32
[  763.893246][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0
[  764.368576][ T5875] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  764.401059][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.415373][ T5875] usb 6-1: Product: syz
[  764.419697][ T5875] usb 6-1: Manufacturer: syz
[  764.424649][ T5875] usb 6-1: SerialNumber: syz
[  764.431368][ T5875] usb 6-1: config 0 descriptor??
[  765.844282][ T5875] gs_usb 6-1:0.0: Couldn't get device config: (err=-110)
[  765.851536][ T5875] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110
[  766.804630][ T5921] usb 6-1: USB disconnect, device number 20
[  767.527920][T13174] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  767.568756][T13174] hfsplus: unable to find HFS+ superblock
[  767.696249][ T5875] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  767.712716][T13176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4237143904 (67794302464 ns) > initial count (7168 ns). Using initial count to start timer.
[  767.791201][T13178] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1889'.
[  767.818373][T13178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1889'.
[  767.875973][ T5875] usb 4-1: Using ep0 maxpacket: 8
[  768.170588][ T5875] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  768.240996][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.297584][ T5875] usb 4-1: Product: syz
[  768.318281][ T5875] usb 4-1: Manufacturer: syz
[  768.337819][ T5875] usb 4-1: SerialNumber: syz
[  768.447104][ T5875] usb 4-1: config 0 descriptor??
[  768.803412][ T5875] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  768.821705][ T5875] usb write operation failed. (-71)
[  768.871191][ T5875] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  768.920249][ T5875] dvbdev: DVB: registering new adapter (Terratec H7)
[  769.081969][ T5875] usb 4-1: media controller created
[  769.908787][T13202] vfat: Unknown parameter 'shortna��0V'
[  770.156194][ T5875] usb read operation failed. (-71)
[  770.569482][ T5875] usb write operation failed. (-71)
[  770.612540][ T5875] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  770.688253][ T5875] usb 4-1: USB disconnect, device number 47
[  770.794288][ T5947] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  771.004144][T13219] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1900'.
[  771.013622][T13219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'.
[  771.277751][ T5947] usb 5-1: Using ep0 maxpacket: 32
[  771.393739][ T5947] usb 5-1: config 0 interface 0 has no altsetting 0
[  771.403364][ T5947] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  771.413792][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.423254][ T5947] usb 5-1: Product: syz
[  771.428903][ T5947] usb 5-1: Manufacturer: syz
[  771.438345][ T5947] usb 5-1: SerialNumber: syz
[  771.451139][ T5947] usb 5-1: config 0 descriptor??
[  771.688382][T13228] overlayfs: missing 'lowerdir'
[  771.702395][T13228] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  771.712280][T13228] FAT-fs (loop5): unable to read boot sector
[  772.724578][ T5947] gs_usb 5-1:0.0: Couldn't get device config: (err=-110)
[  772.993748][ T5947] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110
[  773.344361][ T5920] usb 5-1: USB disconnect, device number 40
[  774.151258][T13260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  774.171743][T13260] hpfs: hpfs_map_sector(): read error
[  774.353111][T13264] overlayfs: missing 'lowerdir'
[  774.390577][T13264] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  774.402372][T13264] FAT-fs (loop4): unable to read boot sector
[  775.151226][T13272] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1917'.
[  776.120346][T13287] vfat: Unknown parameter 'shortna��0V'
[  776.814125][ T9993] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  777.074691][T13295] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  777.104435][ T9993] usb 5-1: Using ep0 maxpacket: 32
[  777.111874][ T9993] usb 5-1: config 0 interface 0 has no altsetting 0
[  777.131233][ T9993] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  777.676050][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.389724][ T9993] usb 5-1: Product: syz
[  778.394708][ T9993] usb 5-1: Manufacturer: syz
[  778.419336][ T9993] usb 5-1: SerialNumber: syz
[  778.437986][ T9993] usb 5-1: config 0 descriptor??
[  780.080461][T13334] syz_tun: entered allmulticast mode
[  780.095047][T13334] dvmrp0: entered allmulticast mode
[  780.252675][ T9993] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[  780.284231][ T9993] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  780.447243][T13335] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  780.472197][ T9993] usb 5-1: USB disconnect, device number 41
[  781.347646][T13341] FAULT_INJECTION: forcing a failure.
[  781.347646][T13341] name failslab, interval 1, probability 0, space 0, times 0
[  781.361298][T13341] CPU: 1 UID: 0 PID: 13341 Comm: syz.4.1940 Not tainted syzkaller #0 PREEMPT(full) 
[  781.361321][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  781.361330][T13341] Call Trace:
[  781.361337][T13341]  <TASK>
[  781.361344][T13341]  dump_stack_lvl+0x189/0x250
[  781.361369][T13341]  ? __pfx____ratelimit+0x10/0x10
[  781.361390][T13341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  781.361409][T13341]  ? __pfx__printk+0x10/0x10
[  781.361432][T13341]  ? __pfx___might_resched+0x10/0x10
[  781.361454][T13341]  ? fs_reclaim_acquire+0x7d/0x100
[  781.361476][T13341]  should_fail_ex+0x414/0x560
[  781.361500][T13341]  should_failslab+0xa8/0x100
[  781.361517][T13341]  kmem_cache_alloc_noprof+0x74/0x6e0
[  781.361540][T13341]  ? fuse_get_req+0x7b9/0x10b0
[  781.361558][T13341]  ? fuse_change_attributes_common+0x9fa/0xfd0
[  781.361585][T13341]  fuse_get_req+0x7b9/0x10b0
[  781.361616][T13341]  ? __pfx_fuse_get_req+0x10/0x10
[  781.361635][T13341]  ? _raw_spin_unlock+0x28/0x50
[  781.361655][T13341]  ? fuse_change_attributes_i+0x51d/0x840
[  781.361681][T13341]  ? fuse_dax_dontcache+0xed/0x150
[  781.361707][T13341]  __fuse_simple_request+0x2aa/0x18d0
[  781.361735][T13341]  ? register_lock_class+0x51/0x320
[  781.361758][T13341]  ? __pfx___fuse_simple_request+0x10/0x10
[  781.361810][T13341]  fuse_getxattr+0x2d7/0x470
[  781.361835][T13341]  ? __pfx_fuse_getxattr+0x10/0x10
[  781.361851][T13341]  ? fuse_update_get_attr+0x518/0x10f0
[  781.361885][T13341]  ? __pfx_fuse_update_get_attr+0x10/0x10
[  781.361916][T13341]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  781.361935][T13341]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  781.361961][T13341]  fuse_xattr_get+0x80/0xa0
[  781.361977][T13341]  ? __pfx_fuse_xattr_get+0x10/0x10
[  781.361996][T13341]  __vfs_getxattr+0x3f4/0x430
[  781.362024][T13341]  cap_inode_need_killpriv+0x45/0x60
[  781.362057][T13341]  security_inode_need_killpriv+0x89/0x270
[  781.362082][T13341]  file_remove_privs_flags+0x297/0x5f0
[  781.362110][T13341]  ? __pfx_file_remove_privs_flags+0x10/0x10
[  781.362130][T13341]  ? __lock_acquire+0xab9/0xd20
[  781.362159][T13341]  ? generic_write_checks_count+0x43e/0x540
[  781.362180][T13341]  file_modified_flags+0x4c/0x560
[  781.362194][T13341]  ? generic_write_checks+0xc8/0x110
[  781.362210][T13341]  fuse_file_write_iter+0xad4/0x10a0
[  781.362228][T13341]  ? aa_file_perm+0x13a/0x1550
[  781.362250][T13341]  ? __pfx_fuse_file_write_iter+0x10/0x10
[  781.362276][T13341]  ? _parse_integer_limit+0x1ae/0x1f0
[  781.362296][T13341]  ? look_up_lock_class+0x74/0x170
[  781.362319][T13341]  ? register_lock_class+0x51/0x320
[  781.362348][T13341]  do_iter_readv_writev+0x623/0x8c0
[  781.362378][T13341]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  781.362397][T13341]  ? rcu_read_lock_any_held+0xb3/0x120
[  781.362429][T13341]  vfs_writev+0x31a/0x960
[  781.362451][T13341]  ? __lock_acquire+0xab9/0xd20
[  781.362473][T13341]  ? __pfx_vfs_writev+0x10/0x10
[  781.362504][T13341]  ? __fget_files+0x2a/0x420
[  781.362523][T13341]  ? __fget_files+0x3a0/0x420
[  781.362536][T13341]  ? __fget_files+0x2a/0x420
[  781.362561][T13341]  do_writev+0x14d/0x2d0
[  781.362581][T13341]  ? __pfx_do_writev+0x10/0x10
[  781.362601][T13341]  ? do_syscall_64+0xbe/0xfa0
[  781.362626][T13341]  do_syscall_64+0xfa/0xfa0
[  781.362646][T13341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.362660][T13341]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  781.362673][T13341]  ? clear_bhb_loop+0x60/0xb0
[  781.362691][T13341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.362705][T13341] RIP: 0033:0x7f01e4b8eba9
[  781.362719][T13341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  781.362732][T13341] RSP: 002b:00007f01e5a89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  781.362751][T13341] RAX: ffffffffffffffda RBX: 00007f01e4dd5fa0 RCX: 00007f01e4b8eba9
[  781.362763][T13341] RDX: 0000000000000002 RSI: 0000200000000a40 RDI: 0000000000000005
[  781.362774][T13341] RBP: 00007f01e5a89090 R08: 0000000000000000 R09: 0000000000000000
[  781.362784][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  781.362794][T13341] R13: 00007f01e4dd6038 R14: 00007f01e4dd5fa0 R15: 00007ffc5b48b3e8
[  781.362826][T13341]  </TASK>
[  781.768536][    C1] vkms_vblank_simulate: vblank timer overrun
[  781.860044][T13357] sctp: [Deprecated]: syz.0.1944 (pid 13357) Use of struct sctp_assoc_value in delayed_ack socket option.
[  781.860044][T13357] Use struct sctp_sack_info instead
[  783.189695][T13361] delete_channel: no stack
[  783.354436][T13370] netlink: 'syz.5.1948': attribute type 1 has an invalid length.
[  786.698376][T13400] FAULT_INJECTION: forcing a failure.
[  786.698376][T13400] name failslab, interval 1, probability 0, space 0, times 0
[  786.721814][T13400] CPU: 1 UID: 0 PID: 13400 Comm: syz.0.1957 Not tainted syzkaller #0 PREEMPT(full) 
[  786.721838][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  786.721849][T13400] Call Trace:
[  786.721856][T13400]  <TASK>
[  786.721863][T13400]  dump_stack_lvl+0x189/0x250
[  786.721888][T13400]  ? __pfx____ratelimit+0x10/0x10
[  786.721910][T13400]  ? __pfx_dump_stack_lvl+0x10/0x10
[  786.721929][T13400]  ? __pfx__printk+0x10/0x10
[  786.721957][T13400]  ? __pfx___might_resched+0x10/0x10
[  786.721984][T13400]  should_fail_ex+0x414/0x560
[  786.722009][T13400]  should_failslab+0xa8/0x100
[  786.722028][T13400]  __kmalloc_noprof+0xcb/0x7f0
[  786.722049][T13400]  ? kfree+0x4d/0x6d0
[  786.722066][T13400]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  786.722093][T13400]  tomoyo_realpath_from_path+0xe3/0x5d0
[  786.722115][T13400]  ? tomoyo_domain+0xd9/0x130
[  786.722141][T13400]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  786.722158][T13400]  tomoyo_path_number_perm+0x1e8/0x5a0
[  786.722180][T13400]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  786.722237][T13400]  ? __fget_files+0x2a/0x420
[  786.722259][T13400]  ? __fget_files+0x3a0/0x420
[  786.722273][T13400]  ? __fget_files+0x2a/0x420
[  786.722294][T13400]  security_file_ioctl+0xcb/0x2d0
[  786.722313][T13400]  __se_sys_ioctl+0x47/0x170
[  786.722336][T13400]  do_syscall_64+0xfa/0xfa0
[  786.722357][T13400]  ? lockdep_hardirqs_on+0x9c/0x150
[  786.722378][T13400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.722394][T13400]  ? clear_bhb_loop+0x60/0xb0
[  786.722414][T13400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.722430][T13400] RIP: 0033:0x7efff778eba9
[  786.722445][T13400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  786.722459][T13400] RSP: 002b:00007efff862b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  786.722485][T13400] RAX: ffffffffffffffda RBX: 00007efff79d5fa0 RCX: 00007efff778eba9
[  786.722498][T13400] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 0000000000000003
[  786.722508][T13400] RBP: 00007efff862b090 R08: 0000000000000000 R09: 0000000000000000
[  786.722518][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.722528][T13400] R13: 00007efff79d6038 R14: 00007efff79d5fa0 R15: 00007ffe8209b968
[  786.722559][T13400]  </TASK>
[  786.722566][T13400] ERROR: Out of memory at tomoyo_realpath_from_path.
[  786.809680][T13396] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  789.901749][T13415] delete_channel: no stack
[  790.222474][T13424] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  790.232212][T13424] XFS (loop3): SB validate failed with error -5.
[  791.138938][T13440] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  793.567259][T13471] netlink: 'syz.3.1976': attribute type 3 has an invalid length.
[  793.577369][T13471] gretap0: entered promiscuous mode
[  793.979100][ T5947] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  794.179270][ T5947] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  794.189115][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.217603][ T5947] usb 4-1: config 0 descriptor??
[  795.221162][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'.
[  795.345351][ T5947] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  795.533580][ T5947] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  795.553964][ T5947] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  795.597282][ T5947] asix 4-1:0.0: probe with driver asix failed with error -71
[  795.629599][ T5947] usb 4-1: USB disconnect, device number 48
[  795.637682][T13469] gretap0: left promiscuous mode
[  797.126770][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1987'.
[  798.354020][   T30] audit: type=1326 audit(1758176216.186:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13511 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  798.413533][T13516] new mount options do not match the existing superblock, will be ignored
[  798.940888][T13513] fuse: Unknown parameter '0x0000000000000005'
[  798.963430][   T30] audit: type=1326 audit(1758176216.186:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13511 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  799.032598][   T30] audit: type=1326 audit(1758176216.186:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13511 comm="syz.3.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  799.061771][T13516] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  799.428535][T13531] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  799.460543][T13539] bond0: (slave bridge0): Releasing backup interface
[  799.740460][T13539] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.747794][T13539] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.276839][T13539] bridge_slave_0: left allmulticast mode
[  800.287320][T13539] bridge_slave_0: left promiscuous mode
[  800.364312][T13539] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.797915][T13539] bridge_slave_1: left allmulticast mode
[  800.803812][T13539] bridge_slave_1: left promiscuous mode
[  800.810848][T13539] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.879491][T13539] bond0: (slave 
c
1�): Releasing backup interface
[  800.946181][T13539] bond0: (slave 
c
@0�): Releasing backup interface
[  800.983382][T13539] team0: Port device team_slave_0 removed
[  801.019812][T13539] team0: Port device team_slave_1 removed
[  801.050566][T13539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  801.058594][T13539] batman_adv: batadv0: Removing interface: batadv_slave_0
[  801.068019][T13539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  801.076320][T13539] batman_adv: batadv0: Removing interface: batadv_slave_1
[  801.086380][T13539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  801.314417][ T5974] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  801.613049][ T5974] usb 5-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  801.664220][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.676554][T13564] fuse: Bad value for 'fd'
[  801.788055][ T5974] usb 5-1: config 0 descriptor??
[  801.827510][ T5974] gspca_main: xirlink-cit-2.14.0 probing 0545:800d
[  801.874114][ T5974] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15
[  802.050959][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1995'.
[  802.117909][ T5974] usb 5-1: USB disconnect, device number 42
[  803.390812][T13590] netlink: 'syz.3.2009': attribute type 1 has an invalid length.
[  803.538954][   T13] Bluetooth: (null): Invalid header checksum
[  803.561458][   T13] Bluetooth: (null): Invalid header checksum
[  803.708791][   T70] Bluetooth: (null): Invalid header checksum
[  803.746963][T13595] syz_tun: entered allmulticast mode
[  803.756858][T13595] dvmrp0: entered allmulticast mode
[  803.856898][   T70] Bluetooth: (null): Invalid header checksum
[  803.954148][   T70] Bluetooth: (null): Invalid header checksum
[  804.022086][   T70] Bluetooth: (null): Invalid header checksum
[  804.118542][ T1098] Bluetooth: (null): Invalid header checksum
[  806.313115][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'.
[  808.649712][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  808.659131][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  808.866969][T13650] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  809.445307][T13660] comedi comedi3: board detection failed
[  810.661130][T13669] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  811.164161][    T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  811.303951][ T5921] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  811.335793][    T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  811.344335][    T9] usb 5-1: config 0 has no interface number 0
[  811.353251][    T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  811.365152][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.373408][    T9] usb 5-1: Product: syz
[  811.379376][    T9] usb 5-1: Manufacturer: syz
[  811.379922][T13694] overlayfs: missing 'lowerdir'
[  811.385984][    T9] usb 5-1: SerialNumber: syz
[  811.402998][    T9] usb 5-1: config 0 descriptor??
[  811.410197][T13694] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  811.419558][T13694] FAT-fs (loop5): unable to read boot sector
[  811.420295][    T9] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  811.437071][    T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82
[  811.451416][    T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  811.459802][    T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  811.468319][    T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  811.478977][    T9] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  811.584849][ T5974] usb 4-1: new low-speed USB device number 49 using dummy_hcd
[  811.613900][ T5921] usb 3-1: Using ep0 maxpacket: 16
[  811.634048][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short
[  811.645121][ T5921] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  811.648331][    T9] usb 5-1: USB disconnect, device number 43
[  811.658274][ T5921] usb 3-1: config 1 interface 0 has no altsetting 0
[  811.660750][ T5921] usb 3-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40
[  811.672895][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  811.753497][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.775923][ T5974] usb 4-1: no configurations
[  811.780612][ T5974] usb 4-1: can't read configurations, error -22
[  811.904189][ T5921] usb 3-1: Product: syz
[  811.952647][ T5974] usb 4-1: new low-speed USB device number 50 using dummy_hcd
[  812.007925][ T5921] usb 3-1: Manufacturer: syz
[  812.039384][ T5921] usb 3-1: SerialNumber: syz
[  812.135352][    T9] keyspan 5-1:0.133: device disconnected
[  812.222670][ T5974] usb 4-1: no configurations
[  812.228800][ T5974] usb 4-1: can't read configurations, error -22
[  812.235963][ T5974] usb usb4-port1: attempt power cycle
[  812.405247][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  812.441198][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  812.723433][ T5921] usbhid 3-1:1.0: can't add hid device: -22
[  812.729499][ T5921] usbhid 3-1:1.0: probe with driver usbhid failed with error -22
[  812.740099][ T5921] usb 3-1: USB disconnect, device number 43
[  812.869355][   T30] audit: type=1326 audit(1758176230.716:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.4.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  812.957742][T13715] new mount options do not match the existing superblock, will be ignored
[  812.969332][T13716] new mount options do not match the existing superblock, will be ignored
[  813.551725][T13719] fuse: Unknown parameter '0x0000000000000005'
[  813.560200][T13710] fuse: Unknown parameter '0x0000000000000005'
[  813.560412][ T5974] usb 4-1: new low-speed USB device number 51 using dummy_hcd
[  813.576987][   T30] audit: type=1326 audit(1758176230.716:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.4.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  813.667490][   T30] audit: type=1326 audit(1758176230.716:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.0.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  813.716697][T13715] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  813.723805][T13716] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  813.731480][ T5974] usb 4-1: no configurations
[  813.736212][ T5974] usb 4-1: can't read configurations, error -22
[  813.771769][   T30] audit: type=1326 audit(1758176230.716:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.0.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  813.837403][T13725] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  813.869219][   T30] audit: type=1326 audit(1758176230.726:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.0.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  813.982268][   T30] audit: type=1326 audit(1758176230.726:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.4.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  814.316410][ T5974] usb 4-1: new low-speed USB device number 52 using dummy_hcd
[  814.327791][   T30] audit: type=1326 audit(1758176231.536:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.0.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  814.383327][   T30] audit: type=1326 audit(1758176231.536:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.0.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  814.498326][   T30] audit: type=1326 audit(1758176231.546:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.4.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  814.562633][   T30] audit: type=1326 audit(1758176231.546:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.4.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e4b8eba9 code=0x7ffc0000
[  814.588654][ T5974] usb 4-1: device not accepting address 52, error -71
[  814.597411][ T5974] usb usb4-port1: unable to enumerate USB device
[  815.120101][T13751] usb usb1: check_ctrlrecip: process 13751 (syz.0.2061) requesting ep 01 but needs 81
[  815.133151][T13751] usb usb1: usbfs: process 13751 (syz.0.2061) did not claim interface 0 before use
[  817.619234][T13779] kvm: pic: non byte write
[  817.640599][T13779] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns
[  819.956612][   T30] audit: type=1326 audit(1758176237.826:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  820.028066][T13807] new mount options do not match the existing superblock, will be ignored
[  820.602456][T13803] fuse: Unknown parameter '0x0000000000000005'
[  820.824592][T13807] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  820.962386][   T30] audit: type=1326 audit(1758176237.826:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  821.037485][   T30] audit: type=1326 audit(1758176237.826:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.2.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f590718eba9 code=0x7ffc0000
[  823.778916][T13856] netlink: 'syz.0.2096': attribute type 10 has an invalid length.
[  824.470342][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  824.510615][T13855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  825.673992][ T5947] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  826.283935][ T5947] usb 3-1: device descriptor read/64, error -71
[  826.703620][ T5947] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  826.844238][ T5975] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  826.863952][ T5947] usb 3-1: device descriptor read/64, error -71
[  827.065651][ T5947] usb usb3-port1: attempt power cycle
[  827.115711][ T5975] usb 6-1: device descriptor read/64, error -71
[  828.245339][ T5975] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  828.543910][ T5975] usb 6-1: device descriptor read/64, error -71
[  828.665509][ T5975] usb usb6-port1: attempt power cycle
[  829.514248][ T5975] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  829.764313][ T5975] usb 6-1: device descriptor read/8, error -71
[  830.544505][T13949] comedi comedi3: board detection failed
[  831.991334][    T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  832.767829][    T9] usb 6-1: device descriptor read/64, error -71
[  832.951627][T13970] netlink: 'syz.4.2129': attribute type 50 has an invalid length.
[  833.024061][    T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  833.861648][    T9] usb 6-1: device descriptor read/64, error -71
[  834.067432][    T9] usb usb6-port1: attempt power cycle
[  835.989382][T13991] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  836.362844][   T30] audit: type=1326 audit(1758176254.226:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  836.440186][T14008] new mount options do not match the existing superblock, will be ignored
[  836.903900][   T30] audit: type=1326 audit(1758176254.226:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  836.926245][    C0] vkms_vblank_simulate: vblank timer overrun
[  836.957591][ T5947] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  837.000887][T14002] fuse: Unknown parameter 'L'
[  837.118256][   T30] audit: type=1326 audit(1758176254.226:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff37a38eba9 code=0x7ffc0000
[  837.202258][T14008] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  837.549473][ T5947] usb 6-1: device descriptor read/64, error -71
[  839.267462][ T5947] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  839.727332][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2146'.
[  842.222492][T14057] overlayfs: missing 'lowerdir'
[  842.258661][T14057] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  842.343294][T14057] FAT-fs (loop4): unable to read boot sector
[  845.103241][T14088] netlink: 'syz.3.2161': attribute type 7 has an invalid length.
[  845.145608][T14088] netlink: 'syz.3.2161': attribute type 8 has an invalid length.
[  845.191593][T14029] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  845.205269][T14088] random: crng reseeded on system resumption
[  845.225145][T14029] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  845.422148][T14097] fido_id[14097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  848.727094][T14144] overlayfs: missing 'lowerdir'
[  848.748904][T14144] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  848.758329][T14144] FAT-fs (loop2): unable to read boot sector
[  850.297536][T14170] FAULT_INJECTION: forcing a failure.
[  850.297536][T14170] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  850.353528][T14170] CPU: 1 UID: 0 PID: 14170 Comm: syz.3.2180 Not tainted syzkaller #0 PREEMPT(full) 
[  850.353552][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  850.353562][T14170] Call Trace:
[  850.353569][T14170]  <TASK>
[  850.353576][T14170]  dump_stack_lvl+0x189/0x250
[  850.353602][T14170]  ? __pfx____ratelimit+0x10/0x10
[  850.353622][T14170]  ? __pfx_dump_stack_lvl+0x10/0x10
[  850.353638][T14170]  ? __pfx__printk+0x10/0x10
[  850.353669][T14170]  should_fail_ex+0x414/0x560
[  850.353695][T14170]  _copy_to_user+0x31/0xb0
[  850.353713][T14170]  simple_read_from_buffer+0xe1/0x170
[  850.353742][T14170]  proc_fail_nth_read+0x1b3/0x220
[  850.353766][T14170]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  850.353789][T14170]  ? rw_verify_area+0x2a6/0x4d0
[  850.353819][T14170]  ? __lock_acquire+0xab9/0xd20
[  850.353836][T14170]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  850.353855][T14170]  vfs_read+0x200/0xa30
[  850.353875][T14170]  ? fdget_pos+0x247/0x320
[  850.353894][T14170]  ? __pfx___mutex_lock+0x10/0x10
[  850.353916][T14170]  ? __pfx_vfs_read+0x10/0x10
[  850.353939][T14170]  ? __fget_files+0x2a/0x420
[  850.353959][T14170]  ? __fget_files+0x3a0/0x420
[  850.353973][T14170]  ? __fget_files+0x2a/0x420
[  850.353997][T14170]  ksys_read+0x145/0x250
[  850.354021][T14170]  ? __pfx_ksys_read+0x10/0x10
[  850.354046][T14170]  ? do_syscall_64+0xbe/0xfa0
[  850.354070][T14170]  do_syscall_64+0xfa/0xfa0
[  850.354090][T14170]  ? lockdep_hardirqs_on+0x9c/0x150
[  850.354111][T14170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.354127][T14170]  ? clear_bhb_loop+0x60/0xb0
[  850.354148][T14170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.354162][T14170] RIP: 0033:0x7ff37a38d5bc
[  850.354178][T14170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  850.354194][T14170] RSP: 002b:00007ff37b2e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  850.354212][T14170] RAX: ffffffffffffffda RBX: 00007ff37a5d5fa0 RCX: 00007ff37a38d5bc
[  850.354225][T14170] RDX: 000000000000000f RSI: 00007ff37b2e50a0 RDI: 0000000000000004
[  850.354236][T14170] RBP: 00007ff37b2e5090 R08: 0000000000000000 R09: 0000000000000000
[  850.354246][T14170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.354256][T14170] R13: 00007ff37a5d6038 R14: 00007ff37a5d5fa0 R15: 00007fff47c97b98
[  850.354287][T14170]  </TASK>
[  852.446364][T14205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  852.835089][T14208] squashfs: Unknown parameter '�	��HDEe�	�A�I)P��-��C�^�ñwƧ��u*�����i��wE��c��r�%� �q�C�Ӱ����)gW��p�H3Z��EF7c�`J�!'��#��(쫤�좜r��T'
[  853.971185][T14220] comedi comedi3: board detection failed
[  856.924648][T14242] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  856.934135][T14242] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  856.994789][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  857.004713][T14242] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.014101][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  857.023629][T14242] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  857.031292][T14242] UDF-fs: Scanning with blocksize 512 failed
[  857.037802][T14242] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.047249][T14242] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.057024][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  857.066724][T14242] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.076194][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  857.085784][T14242] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  857.093398][T14242] UDF-fs: Scanning with blocksize 1024 failed
[  857.099927][T14242] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.109344][T14242] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.118803][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  857.128714][T14242] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.138193][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  857.147745][T14242] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  857.155371][T14242] UDF-fs: Scanning with blocksize 2048 failed
[  857.162116][T14242] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  857.171545][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  857.181285][T14242] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  857.190877][T14242] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  857.198537][T14242] UDF-fs: Scanning with blocksize 4096 failed
[  857.204961][T14242] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  857.573974][T14029] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  857.750952][T14029] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  857.824415][T14029] usb 5-1: config 0 has no interfaces?
[  858.077774][T14029] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  858.267564][T14029] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  858.343933][T14029] usb 5-1: Product: syz
[  858.355789][T14029] usb 5-1: Manufacturer: syz
[  858.361059][T14029] usb 5-1: SerialNumber: syz
[  858.380563][T14029] usb 5-1: config 0 descriptor??
[  860.211398][T14298] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  860.828399][ T9993] usb 5-1: USB disconnect, device number 44
[  861.186231][T14308] ntfs3(loop5): try to read out of volume at offset 0x0
[  861.970248][    T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  862.375577][    T9] usb 4-1: Using ep0 maxpacket: 16
[  862.398565][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.419500][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  862.457308][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  862.499016][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.610167][    T9] usb 4-1: config 0 descriptor??
[  862.632287][    T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  865.632740][    T9] usb 4-1: USB disconnect, device number 53
[  866.676908][T14356] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  870.089007][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  870.096613][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  870.865329][T14029] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  871.184104][T14029] usb 5-1: Using ep0 maxpacket: 32
[  871.280443][T14029] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  871.448724][T14029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.461629][T14029] usb 5-1: config 0 descriptor??
[  871.527465][T14029] gspca_main: sq930x-2.14.0 probing 041e:403c
[  872.713937][T14029] gspca_sq930x: reg_w 0105 bf00 failed -71
[  872.720131][T14029] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  873.284093][T14029] usb 5-1: USB disconnect, device number 45
[  873.878960][T14485] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2272'.
[  874.492116][T14485] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2272'.
[  878.227225][T14528] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  878.264961][T14528] overlayfs: missing 'lowerdir'
[  878.427694][T14528] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  878.439769][T14528] overlayfs: missing 'lowerdir'
[  878.446683][T14528] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  878.496456][T14528] overlayfs: missing 'lowerdir'
[  878.524186][T14528] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  878.578205][T14528] overlayfs: missing 'lowerdir'
[  881.190725][T14560] blk_print_req_error: 2 callbacks suppressed
[  881.190746][T14560] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  881.219241][T14560] MINIX-fs: unable to read superblock
[  881.577414][T14564] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  881.588995][T14564] EXT4-fs (loop2): unable to read superblock
[  882.500588][ T5974] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  883.231824][ T5974] usb 4-1: Using ep0 maxpacket: 16
[  883.260562][ T5974] usb 4-1: config 0 has no interfaces?
[  883.298199][ T5974] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  883.369219][T14585] netlink: 'syz.0.2302': attribute type 3 has an invalid length.
[  883.377469][T14585] netlink: 'syz.0.2302': attribute type 1 has an invalid length.
[  883.385208][T14585] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2302'.
[  883.394237][T14585] NCSI netlink: No device for ifindex 33022
[  883.415606][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  883.424258][ T5974] usb 4-1: Manufacturer: syz
[  884.032073][ T5974] usb 4-1: config 0 descriptor??
[  884.053554][T14589] netlink: 'syz.2.2303': attribute type 15 has an invalid length.
[  884.063938][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2303'.
[  884.093616][T14589] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  884.103159][T14589] EXT4-fs (loop2): unable to read superblock
[  884.141919][T14589] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  884.150734][T14589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  884.848371][ T5974] usb 4-1: USB disconnect, device number 54
[  888.504395][ T5875] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  888.714420][ T5875] usb 5-1: device descriptor read/64, error -71
[  889.013709][ T5975] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  889.194138][ T5975] usb 4-1: Using ep0 maxpacket: 16
[  889.217541][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.232234][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  889.254505][ T5875] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  889.274197][ T5975] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  889.284610][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.648062][ T5975] usb 4-1: config 0 descriptor??
[  889.682844][ T5975] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  889.823165][T14661] tipc: Failed to remove unknown binding: 66,1,1/0:1954676068/1954676070
[  889.867246][T14661] tipc: Failed to remove unknown binding: 66,1,1/0:1954676068/1954676070
[  890.340841][T14661] tipc: Failed to remove unknown binding: 66,1,1/0:1954676068/1954676070
[  891.353965][T14678] vfat: Unknown parameter 'shortna��0V'
[  891.722059][ T5875] usb 4-1: USB disconnect, device number 55
[  891.742515][T14680] overlayfs: missing 'lowerdir'
[  891.776739][T14680] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  891.786666][T14680] FAT-fs (loop0): unable to read boot sector
[  891.834551][T14683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2331'.
[  892.754431][ T9183] syz_tun (unregistering): left allmulticast mode
[  893.404687][    T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  893.500787][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.625080][    T9] usb 5-1: Using ep0 maxpacket: 32
[  893.686303][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  893.756908][    T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  893.803905][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.814954][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.832740][    T9] usb 5-1: Product: syz
[  893.844837][    T9] usb 5-1: Manufacturer: syz
[  893.849525][    T9] usb 5-1: SerialNumber: syz
[  893.881266][    T9] usb 5-1: config 0 descriptor??
[  893.947928][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.145495][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.843832][    C0] hrtimer: interrupt took 53980 ns
[  894.973997][    T9] gs_usb 5-1:0.0: Couldn't send data format (err=-110)
[  894.974036][   T49] bridge_slave_1: left allmulticast mode
[  894.989739][    T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110
[  895.015806][   T49] bridge_slave_1: left promiscuous mode
[  895.022768][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.055720][    T9] usb 5-1: USB disconnect, device number 48
[  895.065802][   T49] bridge_slave_0: left allmulticast mode
[  895.071492][   T49] bridge_slave_0: left promiscuous mode
[  895.100994][T14711] kvm: pic: non byte write
[  895.104318][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.633285][T14707] kvm: pic: non byte write
[  895.743425][   T49] bond_slave_0: left promiscuous mode
[  895.772008][   T49] bond_slave_1: left promiscuous mode
[  895.952177][T14728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2343'.
[  896.060242][T14732] overlayfs: missing 'lowerdir'
[  896.081156][T14732] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  896.090677][T14732] FAT-fs (loop0): unable to read boot sector
[  896.820501][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  896.845406][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  896.854098][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  896.864638][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  896.872450][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  897.562842][   T49] dvmrp0 (unregistering): left allmulticast mode
[  897.846309][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  897.877869][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  897.888448][   T49] bond0 (unregistering): Released all slaves
[  899.333956][ T5866] Bluetooth: hci3: command tx timeout
[  900.041094][T14774] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  900.767742][T14781] vfat: Unknown parameter 'shortna��0V'
[  901.335995][T14774] EXT4-fs (loop4): unable to read superblock
[  901.365467][   T53] Bluetooth: hci3: command tx timeout
[  901.604227][T14029] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  902.213900][T14029] usb 4-1: Using ep0 maxpacket: 32
[  902.268639][T14029] usb 4-1: config 0 interface 0 has no altsetting 0
[  902.327278][T14029] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  902.363699][T14029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.404470][T14800] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  902.417292][T14800] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  902.426599][T14800] FAT-fs (loop0): unable to read boot sector
[  902.651006][T14029] usb 4-1: Product: syz
[  902.655325][T14029] usb 4-1: Manufacturer: syz
[  902.659976][T14029] usb 4-1: SerialNumber: syz
[  902.684877][T14029] usb 4-1: config 0 descriptor??
[  902.934157][T14029] gs_usb 4-1:0.0: Couldn't send data format (err=-71)
[  903.099434][T14029] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  903.277526][T14029] usb 4-1: USB disconnect, device number 56
[  903.444000][   T53] Bluetooth: hci3: command tx timeout
[  905.524025][   T53] Bluetooth: hci3: command tx timeout
[  905.826074][T14724] chnl_net:caif_netlink_parms(): no params data found
[  906.112065][   T49] hsr_slave_0: left promiscuous mode
[  906.119565][   T49] hsr_slave_1: left promiscuous mode
[  906.145227][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  906.154735][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  906.192320][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  906.201630][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  906.585111][   T49] veth1_macvtap: left promiscuous mode
[  906.621264][   T49] veth0_macvtap: left promiscuous mode
[  906.635250][   T49] veth1_vlan: left promiscuous mode
[  906.650974][   T49] veth0_vlan: left promiscuous mode
[  906.663468][T14847] overlayfs: missing 'lowerdir'
[  906.676662][T14847] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  906.685970][T14847] FAT-fs (loop3): unable to read boot sector
[  908.151027][T14858] netlink: 'syz.3.2368': attribute type 1 has an invalid length.
[  908.422730][T14287] Bluetooth: (null): Invalid header checksum
[  908.432785][T14287] Bluetooth: (null): Invalid header checksum
[  908.460869][T14287] Bluetooth: (null): Invalid header checksum
[  908.751936][T14864] vfat: Unknown parameter 'shortna��0V'
[  910.111081][   T49] team0 (unregistering): Port device team_slave_1 removed
[  910.190035][T14863] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  910.277344][T14871] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  910.695369][   T49] team0 (unregistering): Port device team_slave_0 removed
[  912.039582][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'.
[  912.062540][ T5921] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  912.173108][T14724] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.190731][T14724] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.203216][T14724] bridge_slave_0: entered allmulticast mode
[  912.223753][T14724] bridge_slave_0: entered promiscuous mode
[  912.255012][T14724] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.263457][T14724] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.293054][T14724] bridge_slave_1: entered allmulticast mode
[  912.325148][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  912.338004][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  912.338548][T14724] bridge_slave_1: entered promiscuous mode
[  912.373916][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  912.397441][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  912.412861][T14891] overlayfs: missing 'lowerdir'
[  912.433235][ T5921] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  912.460560][T14891] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  912.462720][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.470071][T14891] FAT-fs (loop2): unable to read boot sector
[  912.580439][ T5921] usb 5-1: config 0 descriptor??
[  913.233422][ T5921] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max
[  913.313638][T14724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.377064][ T5921] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  913.429887][T14724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  913.829212][T14910] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2379'.
[  914.509473][T14724] team0: Port device team_slave_0 added
[  914.547855][   T49] IPVS: stop unused estimator thread 0...
[  914.568966][T14724] team0: Port device team_slave_1 added
[  914.811944][T14724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  914.823546][T14724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.851891][T14724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  914.881774][T14724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.095342][T14924] netlink: 'syz.3.2382': attribute type 1 has an invalid length.
[  915.303010][ T1098] Bluetooth: (null): Invalid header checksum
[  915.314358][T14724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.343201][ T1098] Bluetooth: (null): Invalid header checksum
[  915.391898][T14929] FAULT_INJECTION: forcing a failure.
[  915.391898][T14929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  915.403159][T14724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.413966][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.4.2384 Not tainted syzkaller #0 PREEMPT(full) 
[  915.413991][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  915.414002][T14929] Call Trace:
[  915.414010][T14929]  <TASK>
[  915.414017][T14929]  dump_stack_lvl+0x189/0x250
[  915.414041][T14929]  ? __pfx____ratelimit+0x10/0x10
[  915.414063][T14929]  ? __pfx_dump_stack_lvl+0x10/0x10
[  915.414082][T14929]  ? __pfx__printk+0x10/0x10
[  915.414115][T14929]  should_fail_ex+0x414/0x560
[  915.414139][T14929]  _copy_to_user+0x31/0xb0
[  915.414157][T14929]  simple_read_from_buffer+0xe1/0x170
[  915.414186][T14929]  proc_fail_nth_read+0x1b3/0x220
[  915.414210][T14929]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  915.414232][T14929]  ? rw_verify_area+0x2a6/0x4d0
[  915.414252][T14929]  ? __lock_acquire+0xab9/0xd20
[  915.414271][T14929]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  915.414292][T14929]  vfs_read+0x200/0xa30
[  915.414312][T14929]  ? fdget_pos+0x247/0x320
[  915.414331][T14929]  ? __pfx___mutex_lock+0x10/0x10
[  915.414354][T14929]  ? __pfx_vfs_read+0x10/0x10
[  915.414376][T14929]  ? __fget_files+0x2a/0x420
[  915.414395][T14929]  ? __fget_files+0x3a0/0x420
[  915.414408][T14929]  ? __fget_files+0x2a/0x420
[  915.414431][T14929]  ksys_read+0x145/0x250
[  915.414455][T14929]  ? __pfx_ksys_read+0x10/0x10
[  915.414480][T14929]  ? do_syscall_64+0xbe/0xfa0
[  915.414505][T14929]  do_syscall_64+0xfa/0xfa0
[  915.414524][T14929]  ? lockdep_hardirqs_on+0x9c/0x150
[  915.414544][T14929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.414560][T14929]  ? clear_bhb_loop+0x60/0xb0
[  915.414579][T14929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.414595][T14929] RIP: 0033:0x7f01e4b8d5bc
[  915.414611][T14929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  915.414624][T14929] RSP: 002b:00007f01e5a89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  915.414643][T14929] RAX: ffffffffffffffda RBX: 00007f01e4dd5fa0 RCX: 00007f01e4b8d5bc
[  915.414655][T14929] RDX: 000000000000000f RSI: 00007f01e5a890a0 RDI: 0000000000000003
[  915.414665][T14929] RBP: 00007f01e5a89090 R08: 0000000000000000 R09: 0000000000000000
[  915.414675][T14929] R10: 00000000162fc162 R11: 0000000000000246 R12: 0000000000000001
[  915.414685][T14929] R13: 00007f01e4dd6038 R14: 00007f01e4dd5fa0 R15: 00007ffc5b48b3e8
[  915.414713][T14929]  </TASK>
[  915.695127][T14029] usb 5-1: USB disconnect, device number 49
[  916.646918][T14936] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  917.171876][T14724] hsr_slave_0: entered promiscuous mode
[  917.188106][T14724] hsr_slave_1: entered promiscuous mode
[  917.195387][T14724] debugfs: 'hsr0' already exists in 'hsr'
[  917.201227][T14724] Cannot create hsr debugfs directory
[  917.913184][T14972] comedi comedi3: board detection failed
[  918.442216][   T30] audit: type=1326 audit(1758176336.316:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.514021][   T30] audit: type=1326 audit(1758176336.316:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.556199][   T30] audit: type=1326 audit(1758176336.356:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.595169][   T30] audit: type=1326 audit(1758176336.356:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.620084][T14960] rdma_op ffff88805ac861f0 conn xmit_rdma 0000000000000000
[  918.620250][T14983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2395'.
[  918.646031][   T30] audit: type=1326 audit(1758176336.356:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.646079][   T30] audit: type=1326 audit(1758176336.356:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.646115][   T30] audit: type=1326 audit(1758176336.356:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.646153][   T30] audit: type=1326 audit(1758176336.356:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.646190][   T30] audit: type=1326 audit(1758176336.356:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  918.646226][   T30] audit: type=1326 audit(1758176336.356:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.0.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  919.173593][T14960] tty tty4: ldisc open failed (-12), clearing slot 3
[  919.288902][T14724] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  919.311732][T14724] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  919.332475][T14724] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  919.357451][T14724] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  920.195555][T14724] 8021q: adding VLAN 0 to HW filter on device bond0
[  920.212738][T15023] delete_channel: no stack
[  920.910185][T14724] 8021q: adding VLAN 0 to HW filter on device team0
[  921.097459][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[  921.104724][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[  921.243159][T15049] comedi comedi3: board detection failed
[  921.295740][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.303144][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  921.325846][T15051] vfat: Unknown parameter 'shortna��0V'
[  922.631832][T14724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  924.896589][T14724] veth0_vlan: entered promiscuous mode
[  924.924694][T15112] netlink: 'syz.4.2418': attribute type 1 has an invalid length.
[  924.932585][T14724] veth1_vlan: entered promiscuous mode
[  925.182964][T15116] 8021q: adding VLAN 0 to HW filter on device bond4
[  925.198409][T15116] bond3: (slave bond4): making interface the new active one
[  925.240649][T15116] bond3: (slave bond4): Enslaving as an active interface with an up link
[  925.311888][T15117] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  925.364563][T15117] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  925.479136][T14724] veth0_macvtap: entered promiscuous mode
[  925.564455][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2420'.
[  925.573460][T15134] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2420'.
[  925.585471][T14724] veth1_macvtap: entered promiscuous mode
[  925.661936][T14724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  925.685055][T14724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  925.744257][   T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  927.145149][   T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  927.289787][ T1119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  927.333864][ T1119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  927.607148][T15157] squashfs: Unknown parameter '�	��HDEe�	�A�I)P��-��C�^�ñwƧ��u*�����i��wE��c��r�%� �q�C�Ӱ����)gW��p�H3Z��EF7c�`J�!'��#��(쫤�좜r��T'
[  927.973859][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.419887][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.595517][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.603348][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.692546][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2427'.
[  929.511194][T15172] kvm: pic: non byte write
[  929.515834][T15172] kvm: pic: non byte write
[  930.150912][T15187] vfat: Unknown parameter 'shortna��0V'
[  930.465131][T15191] lo speed is unknown, defaulting to 1000
[  930.480996][T15191] lo speed is unknown, defaulting to 1000
[  930.509175][T15191] lo speed is unknown, defaulting to 1000
[  930.570214][T15191] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  930.773195][T15195] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  931.211269][T15191] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  931.534354][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  931.540819][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  931.835488][T15191] lo speed is unknown, defaulting to 1000
[  931.879912][T15191] lo speed is unknown, defaulting to 1000
[  931.975882][T15191] lo speed is unknown, defaulting to 1000
[  931.999323][T15191] lo speed is unknown, defaulting to 1000
[  932.041339][T15191] lo speed is unknown, defaulting to 1000
[  933.159537][T15215] ntfs3(nullb0): Primary boot signature is not NTFS.
[  933.167363][T15215] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  934.454388][T15230] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2440'.
[  934.863705][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2444'.
[  935.043897][ T5875] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  935.219667][ T5875] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  935.274236][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.282535][ T5875] usb 3-1: Product: syz
[  935.287534][ T5875] usb 3-1: Manufacturer: syz
[  935.292374][ T5875] usb 3-1: SerialNumber: syz
[  935.302603][ T5875] usb 3-1: config 0 descriptor??
[  935.313754][ T5875] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  935.521431][T15232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2442'.
[  935.857162][ T5875] sonixb 3-1:0.0: Error reading register 00: -110
[  936.593206][T15253] squashfs: Unknown parameter '�	��HDEe�	�A�I)P��-��C�^�ñwƧ��u*�����i��wE��c��r�%� �q�C�Ӱ����)gW��p�H3Z��EF7c�`J�!'��#��(쫤�좜r��T'
[  938.180160][ T5947] usb 3-1: USB disconnect, device number 47
[  938.517163][    T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  939.047184][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  939.047200][   T30] audit: type=1326 audit(1758176356.926:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.168455][   T30] audit: type=1326 audit(1758176357.046:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.204528][   T30] audit: type=1326 audit(1758176357.076:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.355034][T15283] vfat: Unknown parameter 'shortna��0V'
[  939.384759][    T9] usb 6-1: device descriptor read/64, error -71
[  939.388057][   T30] audit: type=1326 audit(1758176357.076:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.440500][   T30] audit: type=1326 audit(1758176357.206:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.484385][   T30] audit: type=1326 audit(1758176357.206:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.537253][   T30] audit: type=1326 audit(1758176357.226:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.553376][   T67] Bluetooth: hci5: Frame reassembly failed (-84)
[  939.573543][   T30] audit: type=1326 audit(1758176357.256:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.668902][   T30] audit: type=1326 audit(1758176357.256:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.703235][   T30] audit: type=1326 audit(1758176357.256:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.0.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff778eba9 code=0x7ffc0000
[  939.726078][    T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  939.874078][    T9] usb 6-1: device descriptor read/64, error -71
[  939.997707][    T9] usb usb6-port1: attempt power cycle
[  941.482339][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  941.875398][T15299] syz_tun: entered allmulticast mode
[  941.932307][T15299] dvmrp0: entered allmulticast mode
[  942.987240][T15314] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2464'.
[  943.820510][T15329] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2467'.
[  944.236766][T15332] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  946.139307][T15361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2474'.
[ 1051.533751][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1051.540750][    C0] rcu: 	1-...!: (1 GPs behind) idle=fdac/1/0x4000000000000000 softirq=73475/73476 fqs=0
[ 1051.551793][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=60333, q=278 ncpus=2)
[ 1051.559535][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1051.559571][    C1] NMI backtrace for cpu 1
[ 1051.559593][    C1] CPU: 1 UID: 0 PID: 15366 Comm: syz.0.2477 Not tainted syzkaller #0 PREEMPT(full) 
[ 1051.559631][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1051.559643][    C1] RIP: 0010:__lock_acquire+0x742/0xd20
[ 1051.559676][    C1] Code: 83 e0 05 00 00 48 8d 04 9b 45 8b 66 20 48 8b 4c 24 10 8b 44 c1 f8 44 31 e0 25 00 60 00 00 31 c9 89 c2 f7 da 48 19 c9 49 09 cf <85> c0 b8 01 00 00 00 0f 45 e8 eb 4b 48 89 fb 4c 89 f6 a9 00 00 03
[ 1051.559690][    C1] RSP: 0018:ffffc90000a08b70 EFLAGS: 00000086
[ 1051.559704][    C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffffffffffff
[ 1051.559716][    C1] RDX: 00000000ffffc000 RSI: ffff888025318b58 RDI: ffff888025318000
[ 1051.559728][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81add142
[ 1051.559739][    C1] R10: dffffc0000000000 R11: fffffbfff1f887c7 R12: 00000000000c406e
[ 1051.559750][    C1] R13: 0000000000000002 R14: ffff888025318b58 R15: ffffffffffffffff
[ 1051.559762][    C1] FS:  00007efff862b6c0(0000) GS:ffff888125ae1000(0000) knlGS:0000000000000000
[ 1051.559776][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1051.559787][    C1] CR2: 000000110c27a717 CR3: 000000005f064000 CR4: 00000000003526f0
[ 1051.559801][    C1] Call Trace:
[ 1051.559809][    C1]  <IRQ>
[ 1051.559822][    C1]  ? __hrtimer_run_queues+0x602/0xc60
[ 1051.559845][    C1]  lock_acquire+0x120/0x360
[ 1051.559864][    C1]  ? __hrtimer_run_queues+0x602/0xc60
[ 1051.559887][    C1]  ? advance_sched+0x9f8/0xc90
[ 1051.559902][    C1]  ? advance_sched+0x9f8/0xc90
[ 1051.559915][    C1]  ? advance_sched+0x9f8/0xc90
[ 1051.559929][    C1]  _raw_spin_lock_irq+0xa2/0xf0
[ 1051.559949][    C1]  ? __hrtimer_run_queues+0x602/0xc60
[ 1051.559970][    C1]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 1051.559993][    C1]  __hrtimer_run_queues+0x602/0xc60
[ 1051.560021][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1051.560042][    C1]  ? read_tsc+0x9/0x20
[ 1051.560064][    C1]  hrtimer_interrupt+0x45b/0xaa0
[ 1051.560095][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[ 1051.560119][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1051.560141][    C1]  </IRQ>
[ 1051.560146][    C1]  <TASK>
[ 1051.560152][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1051.560169][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[ 1051.560189][    C1] Code: 74 05 e8 ab a0 41 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 31 0a f6 65 8b 05 dc 08 3e 07 85 c0 74 40 48 c7 04 24 0e 36
[ 1051.560202][    C1] RSP: 0018:ffffc9001bbaf9e0 EFLAGS: 00000206
[ 1051.560215][    C1] RAX: be2e1e7f86105c00 RBX: 0000000000000a06 RCX: be2e1e7f86105c00
[ 1051.560226][    C1] RDX: 0000000000000007 RSI: ffffffff8dbbfea8 RDI: 0000000000000001
[ 1051.560236][    C1] RBP: ffffc9001bbafa70 R08: ffffffff8fc43e37 R09: 1ffffffff1f887c6
[ 1051.560248][    C1] R10: dffffc0000000000 R11: fffffbfff1f887c7 R12: dffffc0000000000
[ 1051.560260][    C1] R13: ffff8880b8627ac0 R14: ffff8880b8627ac0 R15: 1ffff92003775f3c
[ 1051.560278][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1051.560297][    C1]  ? read_tsc+0x9/0x20
[ 1051.560318][    C1]  clock_was_set+0x63b/0x7c0
[ 1051.560340][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1051.560362][    C1]  ? __pfx_clock_was_set+0x10/0x10
[ 1051.560382][    C1]  ? __x64_sys_clock_adjtime+0x1f7/0x2b0
[ 1051.560403][    C1]  do_adjtimex+0x8f0/0xb20
[ 1051.560420][    C1]  ? __x64_sys_clock_adjtime+0x1f7/0x2b0
[ 1051.560439][    C1]  ? __pfx_do_adjtimex+0x10/0x10
[ 1051.560467][    C1]  __x64_sys_clock_adjtime+0x1f7/0x2b0
[ 1051.560487][    C1]  ? __pfx___x64_sys_clock_adjtime+0x10/0x10
[ 1051.560513][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1051.560538][    C1]  ? do_syscall_64+0xbe/0xfa0
[ 1051.560559][    C1]  do_syscall_64+0xfa/0xfa0
[ 1051.560579][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1051.560598][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.560613][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1051.560630][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.560644][    C1] RIP: 0033:0x7efff778eba9
[ 1051.560660][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1051.560679][    C1] RSP: 002b:00007efff862b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[ 1051.560694][    C1] RAX: ffffffffffffffda RBX: 00007efff79d5fa0 RCX: 00007efff778eba9
[ 1051.560706][    C1] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000000
[ 1051.560716][    C1] RBP: 00007efff7811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1051.560726][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1051.560735][    C1] R13: 00007efff79d6038 R14: 00007efff79d5fa0 R15: 00007ffe8209b968
[ 1051.560753][    C1]  </TASK>
[ 1051.561564][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g60333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1052.030128][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1052.040099][    C0] rcu: RCU grace-period kthread stack dump:
[ 1052.045985][    C0] task:rcu_preempt     state:R  running task     stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1052.059491][    C0] Call Trace:
[ 1052.062805][    C0]  <TASK>
[ 1052.065737][    C0]  __schedule+0x1798/0x4cc0
[ 1052.070272][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1052.075141][    C0]  ? __pfx___schedule+0x10/0x10
[ 1052.080023][    C0]  ? schedule+0x91/0x360
[ 1052.084273][    C0]  schedule+0x165/0x360
[ 1052.088456][    C0]  schedule_timeout+0x12b/0x270
[ 1052.093314][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1052.098695][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1052.103997][    C0]  ? prepare_to_swait_event+0x341/0x380
[ 1052.109556][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[ 1052.114428][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1052.119372][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1052.124575][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1052.129866][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1052.135079][    C0]  ? finish_swait+0xcd/0x1f0
[ 1052.139671][    C0]  rcu_gp_kthread+0x99/0x390
[ 1052.144268][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1052.149472][    C0]  ? __kthread_parkme+0x7b/0x200
[ 1052.154415][    C0]  ? __kthread_parkme+0x1a1/0x200
[ 1052.159448][    C0]  kthread+0x711/0x8a0
[ 1052.163527][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1052.168741][    C0]  ? __pfx_kthread+0x10/0x10
[ 1052.173340][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1052.178544][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1052.183749][    C0]  ? __pfx_kthread+0x10/0x10
[ 1052.188345][    C0]  ret_from_fork+0x4bc/0x870
[ 1052.192971][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1052.198096][    C0]  ? __switch_to_asm+0x39/0x70
[ 1052.202867][    C0]  ? __switch_to_asm+0x33/0x70
[ 1052.207641][    C0]  ? __pfx_kthread+0x10/0x10
[ 1052.212242][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1052.217030][    C0]  </TASK>
[ 1052.220046][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1052.226367][    C0] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[ 1052.235649][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1052.245724][    C0] Workqueue: events_unbound toggle_allocation_gate
[ 1052.252233][    C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[ 1052.258922][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 e6 77 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 91 73 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 75 73
[ 1052.278531][    C0] RSP: 0018:ffffc90000ba7640 EFLAGS: 00000293
[ 1052.284610][    C0] RAX: ffffffff81b4692b RBX: 1ffff110170e8005 RCX: ffff888021ac0000
[ 1052.292585][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1052.300562][    C0] RBP: ffffc90000ba77c0 R08: ffffffff8fc43e37 R09: 1ffffffff1f887c6
[ 1052.308541][    C0] R10: dffffc0000000000 R11: fffffbfff1f887c7 R12: ffff8880b8740028
[ 1052.316516][    C0] R13: dffffc0000000000 R14: ffff8880b863b240 R15: 0000000000000001
[ 1052.324490][    C0] FS:  0000000000000000(0000) GS:ffff8881259e1000(0000) knlGS:0000000000000000
[ 1052.333422][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1052.340008][    C0] CR2: 0000001b33421ff8 CR3: 000000000e138000 CR4: 00000000003526f0
[ 1052.347981][    C0] Call Trace:
[ 1052.351260][    C0]  <TASK>
[ 1052.354195][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 1052.359232][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1052.365569][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 1052.370952][    C0]  ? __kvmalloc_node_noprof+0x170/0x910
[ 1052.376515][    C0]  ? __pfx___text_poke+0x10/0x10
[ 1052.381456][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1052.386233][    C0]  ? trace_contention_end+0x39/0x120
[ 1052.391537][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 1052.396569][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[ 1052.401709][    C0]  smp_text_poke_batch_finish+0x5f9/0x1130
[ 1052.407524][    C0]  ? arch_jump_label_transform_apply+0x17/0x30
[ 1052.413706][    C0]  ? __pfx___mutex_lock+0x10/0x10
[ 1052.418745][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 1052.424996][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[ 1052.431253][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[ 1052.437238][    C0]  static_key_enable_cpuslocked+0x128/0x250
[ 1052.443139][    C0]  static_key_enable+0x1a/0x20
[ 1052.447902][    C0]  toggle_allocation_gate+0xad/0x240
[ 1052.453182][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1052.459071][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1052.464800][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1052.470523][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1052.476247][    C0]  process_scheduled_works+0xae1/0x17b0
[ 1052.481829][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1052.487834][    C0]  worker_thread+0x8a0/0xda0
[ 1052.492463][    C0]  kthread+0x711/0x8a0
[ 1052.496539][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1052.501657][    C0]  ? __pfx_kthread+0x10/0x10
[ 1052.506248][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1052.511448][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1052.516649][    C0]  ? __pfx_kthread+0x10/0x10
[ 1052.521240][    C0]  ret_from_fork+0x4bc/0x870
[ 1052.525838][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1052.530968][    C0]  ? __switch_to_asm+0x39/0x70
[ 1052.535732][    C0]  ? __switch_to_asm+0x33/0x70
[ 1052.540495][    C0]  ? __pfx_kthread+0x10/0x10
[ 1052.545087][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1052.549880][    C0]  </TASK>