last executing test programs:

5m51.318553696s ago: executing program 3 (id=3627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[], 0xe)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x3f00, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000)

5m50.06890903s ago: executing program 3 (id=3630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000d9b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000400)="b8000005000000db79c2448c203f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5m49.851210632s ago: executing program 3 (id=3633):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
r7 = syz_open_dev$amidi(&(0x7f0000000080), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f0000000100)={0x1})
syz_usb_disconnect(r0)
writev(r6, &(0x7f0000000600)=[{&(0x7f0000000040)="01f1", 0x2}], 0x1)

5m45.670377252s ago: executing program 3 (id=3643):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x1ff, 0x20000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4080, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0x2}}, 0x20)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x212d099, 0x0)
timer_create(0x9, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000ca38f40d813110062d0010203010902120001000000000904"], 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0})
mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

5m42.451938874s ago: executing program 3 (id=3652):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601200b000303a0000000000000000000000000000000000ff0200"/52], 0x0)

5m37.957154764s ago: executing program 3 (id=3657):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
capset(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030f46404c84ef4c3976252c4f73030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18, 0x29, 0x32, {0x3c}}}], 0x18}}], 0x1, 0x40004)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
r5 = syz_open_dev$dri(&(0x7f0000000200), 0x1000, 0x46201)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]})
syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x6, 0x0, 0x4, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x400000040a004fc, 0x0, 0x6, 0xfffffffc, 0x8b, 0x0, 0x2000, 0x6, 0x0, 0xee01, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, 0x0, &(0x7f0000000140)='f2fs\x00', 0x4000, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600001e42000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290", 0x4c}], 0x1, 0x0, 0x0, 0x2663}, 0x4)
r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000005280)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1ff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, &(0x7f0000001d00)=ANY=[@ANYBLOB="000f350000003523c8f77c97a5ed98e539ebe481c5a52632234be1d06f5939fb429ec65c42a1566f39f55c3f58e7aa20c471153eee97264469df9dc55c315acc9f0bc4e864d552d3871996f3fbd2ce402848724004cdceee07356a8ee2e64680cbc78856065022ecb9e2f8084c4216d793168ba0fe887a247de7721e737d60d7604cbe32aba2ba077317b0675a7624b53cc8e5f37efe0247c1b1688c6e60c6187f7a42cd1bd45a286a4d489b0dbbe2b95ba41764c373ae6bfb7eef101bb2eb65941aaa0dd54ca59784"], &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000001b40)={0x44, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000980)={0x20, 0x81, 0x3, "b74871"}, &(0x7f0000000780)=ANY=[@ANYBLOB="378202000000e6c995588dff45d28e6987f5dc7c2f2e35b0d6eb06e4d0e1c2459f619c839e01c376dae3a60dba5da3e2151d4dc7df435d640681e5105176fe621d6781fcaee38c"], &(0x7f0000000640)=ANY=[@ANYBLOB="20f1034ec983030000000000084bc28add60d33ab742b32431d713154a51"], &(0x7f0000000a40)={0x20, 0x84, 0x3, "d13a14"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "cbc863"}})
accept4$nfc_llcp(r6, 0x0, &(0x7f00000001c0), 0x80000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioperm(0x0, 0x6, 0x2da3b9f3)
fspick(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_read(r0, 0x93, 0x1000, &(0x7f0000000b40)=""/4096)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e1d, 0x487, @mcast1, 0x400}, 0x1c)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty}, 0x1c)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00141a0000"], 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000400)={0x5, 0xc5e1, 0xf7, 0x81, &(0x7f00000004c0)=""/129, 0x1000, &(0x7f0000004280)=""/4096, 0x94, &(0x7f0000000580)=""/148})
syz_usb_control_io$printer(r0, 0x0, 0x0)

5m36.932237262s ago: executing program 32 (id=3657):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
capset(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030f46404c84ef4c3976252c4f73030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18, 0x29, 0x32, {0x3c}}}], 0x18}}], 0x1, 0x40004)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
r5 = syz_open_dev$dri(&(0x7f0000000200), 0x1000, 0x46201)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]})
syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x6, 0x0, 0x4, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x400000040a004fc, 0x0, 0x6, 0xfffffffc, 0x8b, 0x0, 0x2000, 0x6, 0x0, 0xee01, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, 0x0, &(0x7f0000000140)='f2fs\x00', 0x4000, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600001e42000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290", 0x4c}], 0x1, 0x0, 0x0, 0x2663}, 0x4)
r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000005280)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1ff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, &(0x7f0000001d00)=ANY=[@ANYBLOB="000f350000003523c8f77c97a5ed98e539ebe481c5a52632234be1d06f5939fb429ec65c42a1566f39f55c3f58e7aa20c471153eee97264469df9dc55c315acc9f0bc4e864d552d3871996f3fbd2ce402848724004cdceee07356a8ee2e64680cbc78856065022ecb9e2f8084c4216d793168ba0fe887a247de7721e737d60d7604cbe32aba2ba077317b0675a7624b53cc8e5f37efe0247c1b1688c6e60c6187f7a42cd1bd45a286a4d489b0dbbe2b95ba41764c373ae6bfb7eef101bb2eb65941aaa0dd54ca59784"], &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000001b40)={0x44, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000980)={0x20, 0x81, 0x3, "b74871"}, &(0x7f0000000780)=ANY=[@ANYBLOB="378202000000e6c995588dff45d28e6987f5dc7c2f2e35b0d6eb06e4d0e1c2459f619c839e01c376dae3a60dba5da3e2151d4dc7df435d640681e5105176fe621d6781fcaee38c"], &(0x7f0000000640)=ANY=[@ANYBLOB="20f1034ec983030000000000084bc28add60d33ab742b32431d713154a51"], &(0x7f0000000a40)={0x20, 0x84, 0x3, "d13a14"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "cbc863"}})
accept4$nfc_llcp(r6, 0x0, &(0x7f00000001c0), 0x80000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioperm(0x0, 0x6, 0x2da3b9f3)
fspick(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_read(r0, 0x93, 0x1000, &(0x7f0000000b40)=""/4096)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e1d, 0x487, @mcast1, 0x400}, 0x1c)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty}, 0x1c)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00141a0000"], 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000400)={0x5, 0xc5e1, 0xf7, 0x81, &(0x7f00000004c0)=""/129, 0x1000, &(0x7f0000004280)=""/4096, 0x94, &(0x7f0000000580)=""/148})
syz_usb_control_io$printer(r0, 0x0, 0x0)

42.479407848s ago: executing program 4 (id=4440):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20201)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x5, 0x0)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
r6 = syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x3}}]}, 0x2c}}, 0x400c084)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000003c0)={0x0, @time={0x33d, 0xc0}, 0xff, {0x3, 0x86}, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r6, 0x2000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})

38.221162114s ago: executing program 4 (id=4451):
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x98}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8b251853e0c8764d148aafefed39cdb21f113281088b936c67e78bac7b7f77a554", 0x21}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x6004081)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1)
syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xe9, 0x11, 0xbd, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0x2}}]}}]}}]}}, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x6b48, 0x4, 0x1, {0x22, 0x317}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7f, 0x4c, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf9, 0x2, 0x2}}]}}}]}}]}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r3=>0x0})
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x158, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x8, 0x8, 0x1, 0x6, 0xcbd, 0x3}}, {0xa, 0x2, [0x4, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x9, 0x5, 0xfffffff7, 0x1, 0x7fff, 0x7fff, 0x4}}, {0x18, 0x2, [0x87, 0x0, 0xfb, 0x3a, 0xfff9, 0x7, 0x8, 0x1, 0x9, 0x9]}}, {{0x1c, 0x1, {0x4, 0x40, 0x8, 0x6, 0x1, 0x80, 0xffffffff, 0x1}}, {0x6, 0x2, [0x650]}}, {{0x1c, 0x1, {0x28, 0x80, 0x4, 0x0, 0x1, 0x6832, 0x9, 0xa}}, {0x18, 0x2, [0x91a, 0x0, 0x5, 0xfbfd, 0x92, 0x2200, 0x1, 0x3, 0xfffa, 0x2]}}, {{0x1c, 0x1, {0x5, 0x6, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x7}}, {0x12, 0x2, [0xfffc, 0x8819, 0x0, 0x5, 0x3, 0x61, 0x4000]}}, {{0x1c, 0x1, {0xf7, 0x1, 0x5, 0x8, 0x0, 0x0, 0x3, 0x4}}, {0xc, 0x2, [0x0, 0x6, 0x9, 0xffff]}}, {{0x1c, 0x1, {0x8, 0x0, 0x8, 0x97d, 0x2, 0x8, 0x4, 0x2}}, {0x8, 0x2, [0x8, 0x1]}}]}]}, 0x158}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x48, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0xc0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

34.240376778s ago: executing program 4 (id=4463):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x6a8003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x101c00, 0x0)
ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000300)={"aefe24883f0a2583951256d5a86a6804ece930a9e98e4d43e0fcc79a5c96", 0xa, 0x1, 0x401, 0x0, 0x3, 0x1, 0xffff, 0x0, [0xcb, 0x9, 0x100, 0xb28, 0xfffff208, 0xd, 0x8, 0x0, 0x48, 0x6, 0x9, 0x2, 0xf, 0xe, 0x100, 0x7, 0x0, 0x1ff]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)

33.473612737s ago: executing program 4 (id=4465):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x49a181, 0x16)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000280))
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f00000004c0)={0x11, 0x0, r1, 0x1, 0x10, 0x6, @multicast}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="00006003ffffffffffffffffffffffff08004500002000002000fc2f907800001fe1e0000001a12c"], 0x32)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r7 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080000ff019078ac1e0001ac1414aa030490781200183f2500000000000000000600007f0000017f00000100000000000000"], 0x0)
io_setup(0x23, &(0x7f0000000280)=<r8=>0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
io_submit(r8, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}])
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="9d87066e7595ad985142eca255cb021e37e25208678de38cd576316c9b410de3dc0c5c34bd16a994cb998739b06d115d1236e99f01e3e8bc1406b138fb39483359bfaebf77e5e7ac5769c03872bc3cfea5a27fd065105e51d6a97e2c1e2fa036dff138e78a044bead067f933b0d5e54d80e5c136ffe22c8b2a7c788bf8ab537dd2649908ad05d7ca9a2dda3a2fcec92243010b2a5fbfc9e2035299105c84308b6950f8b03266800e213f2dfa2b84f455f89d26a0a1c85efa17c11c723997d13e46c9559ef31dac9337cdccb7c44347ebc162a4676379f6934e", 0xd9}, {&(0x7f0000000340)="ce21a58a120ecb3fdff8c0e7a2c607cb93bb8a6d0391945f957ca837989a041ffc9245eb9a836ba8cf4f27bda672d91b2948afcf7d101d779ff65ee9a5b8ddf2774031f438ce43e8e81de4468381381abf20044e15d0bd7dcc675e49060dd22ba0a42098f6b249742c868567234c27021cca09e4bca0e0834b83911808bb02617a602eb182161e43c225d2e9eafb56095db05680e986fc62314eff1740749df1ebca17b9", 0xa4}, {&(0x7f0000000400)="2aad517b8031bc1e726e8ede2e78a3bec13d10b480f9cb078b9efddab2f0b44caa6642bb598cc45d387cd41833a23fd44aa5001fd04753bcb531459d9c34cfd10e7c11fde553c88ee5e7891027a258285fa9398cbe01a391e605f1a3da75b5d02bf012129903dc35639d33e2b2ef3562f8528343c0f47292f20eab3d30c268b75ebaebeed3c9ec83fb43cdd9476a043be5e2f806e5891b1d08ed44d09cc0efc744d8aef0954c31658225cdf34ba267cf96080fa014b15a763180d3", 0xbb}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x24)

31.943621984s ago: executing program 4 (id=4467):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x14c03)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r1 = dup(r0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
r2 = syz_io_uring_setup(0x141c, &(0x7f0000000440)={0x0, 0x40ac, 0x10000, 0x2, 0x42, 0x0, r1}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c000580"], 0x34}}, 0x0)

31.735902933s ago: executing program 4 (id=4468):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
iopl(0x3)
prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x35, &(0x7f000000cf3d)=""/195}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0)

31.154449606s ago: executing program 33 (id=4468):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
iopl(0x3)
prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x35, &(0x7f000000cf3d)=""/195}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0)

15.395269197s ago: executing program 1 (id=4519):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4b8d}, 0x94)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'wg1\x00', 0x1})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYBLOB="c46b53feceb047edcb14b2aa66221ec018d57cac7ea4e34356c40db0bea123ac0ada1ef55d49f8b063113f43e8e56bba6e271176067a1e4006776750ce7bf4a8c3589c35d41638b6e25a4c989a87df3ae760cca412100986562b7f7490dcadcd123d01680f036ebc73c22ba40ad84ed687582026daaf902a802cc32be2c223ff7ffe119303d96b3d4456a4f36d93875b74721e077713d1e9c3f04c2e9ca28f7ad54f0f2f9ef629ee00f7d9a36541053dc909951de687f68f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x55)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r6, &(0x7f0000002980)={0x2020}, 0x2020)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58)
setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000400)=0x6, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x7287})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)

15.20905492s ago: executing program 5 (id=4521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
getrlimit(0x1, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100"/24])
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

14.479809396s ago: executing program 1 (id=4523):
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000ff030000180000000300000017800200", @ANYRES32=r2, @ANYBLOB="00000000e4ffffffffffffff0000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="4600000002000000000000000b00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
setresgid(0xee00, 0xee01, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
close_range(r3, r3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
setregid(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)

13.750042048s ago: executing program 0 (id=4524):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r2)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400001b01010101000000000000000002000000050000000000"], 0x44}}, 0x10)
r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x80)
ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000300))
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xa, 0x0, 0x0, @void, @value=0x0}, 0x20)
mknodat$loop(0xffffffffffffffff, 0x0, 0x20, 0x1)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)

13.682957594s ago: executing program 5 (id=4525):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$video4linux(0x0, 0x92e2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020)

11.347838211s ago: executing program 0 (id=4527):
mkdir(&(0x7f0000000140)='./file0\x00', 0x12)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=<r2=>0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x1c00000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000001ff0), 0x10)
sendmsg$can_bcm(r4, 0x0, 0x0)

10.916159538s ago: executing program 2 (id=4528):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000000)={'netdevsim0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

10.894565893s ago: executing program 2 (id=4529):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x6a8003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x101c00, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000300)={"aefe24883f0a2583951256d5a86a6804ece930a9e98e4d43e0fcc79a5c96", 0xa, 0x1, 0x401, 0x0, 0x3, 0x1, 0xffff, 0x0, [0xcb, 0x9, 0x100, 0xb28, 0xfffff208, 0xd, 0x8, 0x0, 0x48, 0x6, 0x9, 0x2, 0xf, 0xe, 0x100, 0x7, 0x0, 0x1ff]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(0xffffffffffffffff, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)

10.266711179s ago: executing program 2 (id=4530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000003c0)="5123389a049928575eec5d3707b4fddfbaf8a4b92909b37ced5adbd58cc0af4d157d5ebe76b7af34671d486395f228760800e32daa72b3194d31c3689025690ab3579cba542b9bf1bf002acb11a43f3ac9a38b5a2078a72793639240bbe6b8ccdc47617a8135", 0x1000, r1}, 0x38)

9.651546846s ago: executing program 2 (id=4531):
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x19c, &(0x7f0000000400)={[{0x20, 0x4e00, "373b781c663c13d335279b718ffab4c997e02fdff24232b64e4f9b489443d9c5"}, {0x89, 0x4e00, "e13ba960da62ea7847f7862dea5729b9246fc4ea91eebac23925879c5531245651e9bcc6dcbb7edb8d090ad0293f1469d5c2f621c633dc4899b8719004ba74fed0e54834be6d14428aa706e6d07a1777da1f0cdf70bc6e9a892c440c2d1489842adbd25e8adfcee4f6235e9bbf706e745c971a1501837eaa1d0fa19fee0bce5eaee86fe3b545b44079"}, {0xe3, 0x4e00, "ea10f8d7459aee9744b36e96424018739f3f01f2d67e68167766fc1a7103235e0f38bdaebccbba0396ee75ca5f0acc99604f261a7a3555a2c851c0fe5928cc6248db079e2ff784f0aa49a46bd850605b7655fbaa1403f86a383feae3454d115ed9603169de953a32e210601b69fe83c15bae19535af290df5e05b8a2f229c09261bb5485f9cceeceddbe6b37b953db4ff3ccaab8e959af1ebd389444c320b10458573fee99e26d0bcb6ad9bcf5b386125fd2d6be56615de47e306b4796b643ac8b3ea4658866614dcc094f513807942f276b578f693c417946b3ec87d910a7fc1696f3"}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x1}, 0x94)
r3 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x3)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc0984124, &(0x7f0000000c40))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}, 0xfffffffe}], 0x400000000000115, 0x40002121, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r4, @ANYRESOCT=r1], 0xf4}, 0x1, 0x0, 0x0, 0xc0c0}, 0x48001)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x100)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x4, 0xac, 0x4d, 0x0, 0x2f, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403})
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"])
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='ocfs2\x00', 0x5, 0x0)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, 0x0)

8.985920277s ago: executing program 5 (id=4532):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x6a8003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x101c00, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000300)={"aefe24883f0a2583951256d5a86a6804ece930a9e98e4d43e0fcc79a5c96", 0xa, 0x1, 0x401, 0x0, 0x3, 0x1, 0xffff, 0x0, [0xcb, 0x9, 0x100, 0xb28, 0xfffff208, 0xd, 0x8, 0x0, 0x48, 0x6, 0x9, 0x2, 0xf, 0xe, 0x100, 0x7, 0x0, 0x1ff]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)

8.768458804s ago: executing program 2 (id=4533):
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x53)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40})
ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000200)={0x0, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x400, 0x4})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

8.624854442s ago: executing program 6 (id=4469):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r3})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x25, 0x5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r9, 0x400455c8, 0x4)

6.25629346s ago: executing program 1 (id=4534):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
sched_setaffinity(0x0, 0xfffffffffffffcba, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00')
read$eventfd(r2, &(0x7f0000000080), 0x8)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000b40)={0x1, r2})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000904f0a22bd000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x9a, &(0x7f00000002c0)=""/154, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffa}, 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400), 0x0, 0xe7, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], <r5=>0x0, 0xe3, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000b2a460c95d010000000000e7000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe})
syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18300000000000000000000003000000a11f0000000b0000b695fe602a684e"], &(0x7f0000000180)='syzkaller\x00', 0x20000009, 0x99, &(0x7f0000000240)=""/153, 0x40f00, 0x42}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
close(r0)

6.161806879s ago: executing program 5 (id=4535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept(r7, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a, <r8=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8, 0x5}, &(0x7f0000000100)=0x8)
r9 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x60401)
syz_genetlink_get_family_id$mptcp(0x0, r6)
ioctl$BLKTRACESTART(r9, 0x1274, 0x0)
r10 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
r11 = fsmount(r10, 0x0, 0x1)
fchdir(r11)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r12 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8)

6.049444945s ago: executing program 0 (id=4536):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5e9a2099}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1e, 0x9, 0x78, 0x3, 0x7fffffff, 0xd, 0x0, 0x2, 0xca9e}}}}]}, 0x58}}, 0x4000010)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240))
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r5, &(0x7f0000000280)=""/37, 0x34)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="68eefd4eec335fba0000000016e67519aa33ca55", @ANYRES32=0x0, @ANYBLOB="80000200fbc40100"], 0x20}}, 0x0)

5.989377946s ago: executing program 6 (id=4537):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x20000000)
r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
fcntl$setsig(r1, 0xa, 0x40)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1})
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12)
accept4(r5, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x10)
msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x102, 0xffff}, 0x0, 0x0, 0x400000000200, 0x7, 0xfffffffffffff734, 0x400000000040, 0x5, 0x4, 0xfffd, 0x344c})

4.947911745s ago: executing program 1 (id=4538):
r0 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000012c0)='bpf\x00', 0x0, r0)

4.21152452s ago: executing program 5 (id=4539):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0)
syz_clone(0xa0910100, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
io_setup(0x7, &(0x7f0000000280))
socket(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000240)=0xc)
r7 = fsmount(r6, 0x0, 0x0)
syz_usbip_server_init(0x5)
fchdir(r7)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f00000000c0)='.\x00', 0x20800, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
read$FUSE(r8, &(0x7f00000007c0)={0x2020}, 0x2020)

3.962095747s ago: executing program 6 (id=4540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000003c0)="5123389a049928575eec5d3707b4fddfbaf8a4b92909b37ced5adbd58cc0af4d157d5ebe76b7af34671d486395f228760800e32daa72b3194d31c3689025690ab3579cba542b9bf1bf002acb11a43f3ac9a38b5a2078a72793639240bbe6b8ccdc47617a8135", 0x1000, r1}, 0x38)

3.864224186s ago: executing program 0 (id=4541):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$video4linux(0x0, 0x92e2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020)

3.690941891s ago: executing program 1 (id=4542):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x2000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000001000084020000000a000000030000000000000100000000000000010500000020000000000000000000000b020000000061006774302e61006161"], 0x0, 0x58}, 0x28)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x7e, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a410400000000000000000100000708000b4000000000400004803c00018008000100636d7000300002801c00038005000100f41c295a5a6a65593d89a9057aa772a700000000080001400000050008000240000000000900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x100000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0xfc, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4cda2ed3b8adf962396ce23cd46124d210f050e14f67e575"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ed2a0d01d05675abc9187948d83a8511e3022c05e4343a4f"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "576828aecf121effc2f87c468a187c8fb570486e6348aac3"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0282d91bc59abf36a023242a17c82cb32a3f29ae49d80747"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xfc}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0c009900060000004c0000000000000000000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)

3.320541563s ago: executing program 6 (id=4543):
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x19c, &(0x7f0000000400)={[{0x20, 0x4e00, "373b781c663c13d335279b718ffab4c997e02fdff24232b64e4f9b489443d9c5"}, {0x89, 0x4e00, "e13ba960da62ea7847f7862dea5729b9246fc4ea91eebac23925879c5531245651e9bcc6dcbb7edb8d090ad0293f1469d5c2f621c633dc4899b8719004ba74fed0e54834be6d14428aa706e6d07a1777da1f0cdf70bc6e9a892c440c2d1489842adbd25e8adfcee4f6235e9bbf706e745c971a1501837eaa1d0fa19fee0bce5eaee86fe3b545b44079"}, {0xe3, 0x4e00, "ea10f8d7459aee9744b36e96424018739f3f01f2d67e68167766fc1a7103235e0f38bdaebccbba0396ee75ca5f0acc99604f261a7a3555a2c851c0fe5928cc6248db079e2ff784f0aa49a46bd850605b7655fbaa1403f86a383feae3454d115ed9603169de953a32e210601b69fe83c15bae19535af290df5e05b8a2f229c09261bb5485f9cceeceddbe6b37b953db4ff3ccaab8e959af1ebd389444c320b10458573fee99e26d0bcb6ad9bcf5b386125fd2d6be56615de47e306b4796b643ac8b3ea4658866614dcc094f513807942f276b578f693c417946b3ec87d910a7fc1696f3"}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x1}, 0x94)
r3 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x3)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc0984124, &(0x7f0000000c40))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}, 0xfffffffe}], 0x400000000000115, 0x40002121, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r4, @ANYRESOCT=r1], 0xf4}, 0x1, 0x0, 0x0, 0xc0c0}, 0x48001)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x100)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x4, 0xac, 0x4d, 0x0, 0x2f, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403})
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"])
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='ocfs2\x00', 0x5, 0x0)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, 0x0)

1.195318306s ago: executing program 5 (id=4544):
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000ff030000180000000300000017800200", @ANYRES32=r2, @ANYBLOB="00000000e4ffffffffffffff0000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="4600000002000000000000000b00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
setresgid(0xee00, 0xee01, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
close_range(r3, r3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
setregid(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)

1.072357612s ago: executing program 0 (id=4545):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x20004000) (fail_nth: 7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec85000000370000008500000007000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

219.016723ms ago: executing program 2 (id=4546):
madvise(&(0x7f0000d82000/0x2000)=nil, 0x2000, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
write$proc_mixer(r2, &(0x7f0000000080)=ANY=[], 0xb0)
dup3(r3, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000040), 0x4)
recvmsg$kcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000240)=""/19, 0x13}], 0x2}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840)
socket(0x2c, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001200), 0x414200, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r10, 0x0, &(0x7f0000000600)="a03efb55a0fbaa930e089cca7d6c82ea79ef447031970029ef603fea6ea54d84b469d58d7254ad727946a387ef22196427081d38e6a697bbf2efe8945cc0033ad229afa81e48df5f1d4641d8ab889eb9e081623f7674", 0x811dde53575526b0, 0x41f2e})
open_tree(r8, &(0x7f0000001240)='./file0\x00', 0x80800)

45.592083ms ago: executing program 1 (id=4547):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r3})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x25, 0x5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r9, 0x400455c8, 0x4)

0s ago: executing program 0 (id=4548):
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='syzkaller1\x00'})
socket$kcm(0x29, 0x2, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x100)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={<r2=>0x0, 0x7d, "07e24577d5900cd2185681742b016e0681645849471dd26a49f7247d62aeb091dabb554569870c0916933b284a109477f16cd0a8a3849615cc73b3ef46fe674f77fba7418bf2a2ff5cbed264503688ae6f95d6c7dec8275a9fb435869859d1dcef13e5fef370f50c5272f705c1bafebce3a2ad190b80b27e1f3325a564"}, &(0x7f0000000180)=0x85)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x0, 0x30}, 0xc)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x46401, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x200040, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000280))
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
readahead(r3, 0x9, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x80000000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x80400, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000380), 0x10d2, 0x40000)
ioctl$SNDCTL_SEQ_GETTIME(r4, 0x80045113, &(0x7f00000003c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x10)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000580)={r2, 0x3}, &(0x7f00000005c0)=0x8)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000600)=0x7)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000640))
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000009c0)={{&(0x7f0000000940)={'Accelerator0\x00', {&(0x7f0000000680)=@adf_dec={@bank={'Bank', '1', 'CoreAffinity\x00'}, {0xffffffffffffffff}}}, {&(0x7f00000008c0)={'Accelerator1\x00', {&(0x7f0000000800)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x81}, {&(0x7f0000000740)=@adf_hex={@format={'Dc', '0', 'RingAsymTx\x00'}, {0xa0f2}}}}}}}}}, 0x1})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000a00)=@assoc_value={r2, 0x1}, 0x8)
r7 = getuid()
mount$9p_fd(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x2100000, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@loose}, {@noxattr}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@debug={'debug', 0x3d, 0x2}}, {@cache_readahead}, {@loose}], [{@obj_role={'obj_role', 0x3d, 'M'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x14'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x33, 0x30, 0x65, 0x38, 0x35, 0x31], 0x2d, [0x39, 0x65, 0x39, 0x36], 0x2d, [0x66, 0x30, 0x34, 0x64], 0x2d, [0x7, 0x31, 0x61, 0x62], 0x2d, [0x32, 0x63, 0x6d, 0x61, 0x61, 0x39, 0x66, 0x61]}}}]}})
connect$inet6(r5, &(0x7f0000000bc0)={0xa, 0x4e24, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000c00)=<r8=>0x0)
capget(&(0x7f0000000c40)={0x20071026, r8}, &(0x7f0000000c80)={0xfffff800, 0x9, 0x480000, 0xb39b, 0xca, 0x10001})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)

kernel console output (not intermixed with test programs):

: new high-speed USB device number 76 using dummy_hcd
[ 1834.701331][T21146] (syz.4.4035,21146,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1834.726832][T21146] (syz.4.4035,21146,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1834.790865][T21151] netlink: 496 bytes leftover after parsing attributes in process `syz.2.4037'.
[ 1834.851459][ T5915] usb 2-1: device descriptor read/64, error -71
[ 1835.016584][ T5915] usb usb2-port1: attempt power cycle
[ 1835.377746][ T5915] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1835.408552][ T5915] usb 2-1: device descriptor read/8, error -71
[ 1835.591928][T21165] netlink: 380 bytes leftover after parsing attributes in process `syz.4.4043'.
[ 1835.667926][ T5915] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1835.701221][ T5915] usb 2-1: device descriptor read/8, error -71
[ 1835.821610][ T5915] usb usb2-port1: unable to enumerate USB device
[ 1835.937794][T17559] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1836.117952][T17559] usb 5-1: Using ep0 maxpacket: 8
[ 1836.136993][T17559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1836.163253][T17559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1836.183584][T17559] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1836.202989][T17559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[ 1836.233300][T17559] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1836.247765][T17559] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1836.266598][T17559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1836.289941][T17559] usb 5-1: config 0 descriptor??
[ 1836.333238][T21165] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1837.020309][T20753] usb 5-1: USB disconnect, device number 91
[ 1837.021782][T17654] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[ 1837.045060][T21177] netlink: 'syz.1.4046': attribute type 2 has an invalid length.
[ 1837.205189][T21177] �: entered promiscuous mode
[ 1837.284545][T21181] FAULT_INJECTION: forcing a failure.
[ 1837.284545][T21181] name failslab, interval 1, probability 0, space 0, times 0
[ 1837.321331][T21181] CPU: 0 UID: 0 PID: 21181 Comm: syz.2.4048 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1837.321359][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1837.321372][T21181] Call Trace:
[ 1837.321381][T21181]  <TASK>
[ 1837.321391][T21181]  dump_stack_lvl+0x189/0x250
[ 1837.321419][T21181]  ? __pfx____ratelimit+0x10/0x10
[ 1837.321439][T21181]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1837.321461][T21181]  ? __pfx__printk+0x10/0x10
[ 1837.321502][T21181]  should_fail_ex+0x414/0x560
[ 1837.321528][T21181]  should_failslab+0xa8/0x100
[ 1837.321553][T21181]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1837.321572][T21181]  ? skb_clone+0x212/0x3a0
[ 1837.321597][T21181]  skb_clone+0x212/0x3a0
[ 1837.321620][T21181]  __netlink_deliver_tap+0x404/0x850
[ 1837.321658][T21181]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1837.321685][T21181]  netlink_deliver_tap+0x19c/0x1b0
[ 1837.321713][T21181]  netlink_sendskb+0x68/0x140
[ 1837.321743][T21181]  netlink_rcv_skb+0x28c/0x470
[ 1837.321769][T21181]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1837.321791][T21181]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1837.321828][T21181]  ? bpf_lsm_capable+0x9/0x20
[ 1837.321863][T21181]  ? security_capable+0x7e/0x2e0
[ 1837.321895][T21181]  nfnetlink_rcv+0x26a/0x2520
[ 1837.321919][T21181]  ? __dev_queue_xmit+0x1cd7/0x3a70
[ 1837.321944][T21181]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1837.321965][T21181]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1837.321985][T21181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1837.322012][T21181]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1837.322032][T21181]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1837.322065][T21181]  ? ref_tracker_free+0x63a/0x7d0
[ 1837.322085][T21181]  ? __copy_skb_header+0xa7/0x550
[ 1837.322106][T21181]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1837.322124][T21181]  ? __skb_clone+0x63/0x7a0
[ 1837.322145][T21181]  ? __skb_clone+0x483/0x7a0
[ 1837.322171][T21181]  ? skb_clone+0x246/0x3a0
[ 1837.322194][T21181]  ? __netlink_deliver_tap+0x807/0x850
[ 1837.322219][T21181]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1837.322252][T21181]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1837.322277][T21181]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1837.322316][T21181]  netlink_unicast+0x75c/0x8e0
[ 1837.322352][T21181]  netlink_sendmsg+0x805/0xb30
[ 1837.322390][T21181]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1837.322425][T21181]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1837.322445][T21181]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1837.322472][T21181]  __sock_sendmsg+0x21c/0x270
[ 1837.322496][T21181]  ____sys_sendmsg+0x505/0x830
[ 1837.322529][T21181]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1837.322567][T21181]  ? import_iovec+0x74/0xa0
[ 1837.322597][T21181]  ___sys_sendmsg+0x21f/0x2a0
[ 1837.322628][T21181]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1837.322693][T21181]  ? __fget_files+0x2a/0x420
[ 1837.322714][T21181]  ? __fget_files+0x3a0/0x420
[ 1837.322747][T21181]  __x64_sys_sendmsg+0x19b/0x260
[ 1837.322779][T21181]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1837.322819][T21181]  ? __pfx_ksys_write+0x10/0x10
[ 1837.322836][T21181]  ? rcu_is_watching+0x15/0xb0
[ 1837.322863][T21181]  ? do_syscall_64+0xbe/0x3b0
[ 1837.322891][T21181]  do_syscall_64+0xfa/0x3b0
[ 1837.322910][T21181]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1837.322931][T21181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1837.322950][T21181]  ? clear_bhb_loop+0x60/0xb0
[ 1837.322974][T21181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1837.322993][T21181] RIP: 0033:0x7f9a3778ebe9
[ 1837.323012][T21181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1837.323029][T21181] RSP: 002b:00007f9a3853d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1837.323050][T21181] RAX: ffffffffffffffda RBX: 00007f9a379b5fa0 RCX: 00007f9a3778ebe9
[ 1837.323063][T21181] RDX: 0000000000004100 RSI: 0000200000004300 RDI: 0000000000000003
[ 1837.323077][T21181] RBP: 00007f9a3853d090 R08: 0000000000000000 R09: 0000000000000000
[ 1837.323089][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1837.323102][T21181] R13: 00007f9a379b6038 R14: 00007f9a379b5fa0 R15: 00007ffcb1146c98
[ 1837.323135][T21181]  </TASK>
[ 1839.364277][T21197] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1839.633117][   T30] kauditd_printk_skb: 2851 callbacks suppressed
[ 1839.633138][   T30] audit: type=1400 audit(1755082460.528:1296738): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21184 comm="syz.1.4049" name="newroot" dev="tmpfs" ino=2
[ 1839.692937][T17595] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1839.693607][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1839.706080][    C0] audit: audit_lost=707964 audit_rate_limit=0 audit_backlog_limit=64
[ 1839.714295][    C0] audit: backlog limit exceeded
[ 1839.728798][T21199] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1839.736486][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1839.743616][T17595] audit: audit_lost=707965 audit_rate_limit=0 audit_backlog_limit=64
[ 1839.757767][   T30] audit: type=1400 audit(1755082460.528:1296739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21184 comm="syz.1.4049" name="/" dev="devtmpfs" ino=1
[ 1839.777035][T21199] audit: audit_lost=707966 audit_rate_limit=0 audit_backlog_limit=64
[ 1840.424152][T15532] IPVS: starting estimator thread 0...
[ 1840.548310][T21210] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1841.333206][T15532] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1841.724868][T15532] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=af.57
[ 1841.755240][T15532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1841.783151][T15532] usb 3-1: Product: syz
[ 1841.798315][T15532] usb 3-1: Manufacturer: syz
[ 1841.813124][T15532] usb 3-1: SerialNumber: syz
[ 1841.835552][T15532] usb 3-1: config 0 descriptor??
[ 1842.559027][T21238] netlink: 'syz.1.4063': attribute type 4 has an invalid length.
[ 1842.567399][T21238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4063'.
[ 1842.624227][T21243] netlink: 'syz.0.4061': attribute type 10 has an invalid length.
[ 1842.659527][T21243] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1842.913244][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4064'.
[ 1843.933035][T13544] usb 3-1: USB disconnect, device number 80
[ 1844.603423][T21253] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4067'.
[ 1844.637772][   T30] kauditd_printk_skb: 3092 callbacks suppressed
[ 1844.637790][   T30] audit: type=1400 audit(1755082465.788:1299456): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1844.691751][T17595] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1844.699287][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1844.705869][    C0] audit: audit_lost=708092 audit_rate_limit=0 audit_backlog_limit=64
[ 1844.714006][    C0] audit: backlog limit exceeded
[ 1844.714362][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1844.719045][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1844.719059][    C0] audit: audit_lost=708093 audit_rate_limit=0 audit_backlog_limit=64
[ 1844.719073][    C0] audit: backlog limit exceeded
[ 1844.719598][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1844.771671][T21263] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1845.706258][T21282] overlayfs: failed to resolve './file0': -2
[ 1846.038708][T21288] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1847.088085][T21300] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4082'.
[ 1850.113932][   T30] kauditd_printk_skb: 3233 callbacks suppressed
[ 1850.113954][   T30] audit: type=1400 audit(1755082470.708:1301589): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=21320 comm="syz.4.4089" opid=21320 ocomm="syz.4.4089"
[ 1850.233667][T17595] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1850.241110][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1850.247734][    C0] audit: audit_lost=708462 audit_rate_limit=0 audit_backlog_limit=64
[ 1850.255843][    C0] audit: backlog limit exceeded
[ 1850.261547][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1850.268118][    C0] audit: audit_lost=708463 audit_rate_limit=0 audit_backlog_limit=64
[ 1850.276272][    C0] audit: backlog limit exceeded
[ 1850.281677][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1850.288306][    C0] audit: audit_lost=708464 audit_rate_limit=0 audit_backlog_limit=64
[ 1851.918229][T21341] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1852.799875][T21350] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4095'.
[ 1853.197463][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.237775][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.494490][T21357] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1853.541407][T21357] overlayfs: missing 'lowerdir'
[ 1855.119441][   T30] kauditd_printk_skb: 1606 callbacks suppressed
[ 1855.119459][   T30] audit: type=1400 audit(1755082476.278:1303007): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=16668 comm="syz-executor" name="238" dev="tmpfs" ino=1286
[ 1855.125295][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1855.125768][   T30] audit: type=1400 audit(1755082476.278:1303008): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=16668 comm="syz-executor" name="file0" dev="tmpfs" ino=1291
[ 1855.148481][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1855.178316][    C0] audit: audit_lost=708528 audit_rate_limit=0 audit_backlog_limit=64
[ 1855.181243][T21369] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1855.186388][    C0] audit: backlog limit exceeded
[ 1855.186970][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1855.204383][    C0] audit: audit_lost=708529 audit_rate_limit=0 audit_backlog_limit=64
[ 1855.212534][    C0] audit: backlog limit exceeded
[ 1856.515328][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4104'.
[ 1857.349698][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4108'.
[ 1857.949093][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4110'.
[ 1858.527940][T16059] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1858.597761][T15532] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1858.677824][T16059] usb 5-1: Using ep0 maxpacket: 8
[ 1858.687228][T16059] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[ 1858.704543][T16059] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[ 1858.723750][T16059] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1858.768703][T16059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1858.778266][T15532] usb 2-1: Using ep0 maxpacket: 16
[ 1858.802222][T21419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1858.853255][T15532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1858.873280][T15532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1858.886139][T15532] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1858.897830][T15532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1858.916338][T15532] usb 2-1: config 0 descriptor??
[ 1859.083905][T16059] usb 5-1: string descriptor 0 read error: -71
[ 1859.094507][T16059] hub 5-1:32.0: USB hub found
[ 1859.104955][T16059] hub 5-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1859.231787][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'.
[ 1859.609175][T16059] usb 5-1: USB disconnect, device number 92
[ 1859.837394][T15532] usbhid 2-1:0.0: can't add hid device: -71
[ 1860.015122][T15532] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1860.083707][T15532] usb 2-1: USB disconnect, device number 79
[ 1860.136288][   T30] kauditd_printk_skb: 3046 callbacks suppressed
[ 1860.136306][   T30] audit: type=1400 audit(1755082481.288:1305238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17322 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1860.165161][   T30] audit: type=1400 audit(1755082481.318:1305239): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17322 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1860.177274][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1860.184886][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1860.197990][    C0] audit: audit_lost=708803 audit_rate_limit=0 audit_backlog_limit=64
[ 1860.198133][T21436] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1860.206112][    C0] audit: backlog limit exceeded
[ 1860.216277][T17322] audit: audit_lost=708804 audit_rate_limit=0 audit_backlog_limit=64
[ 1860.218145][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1860.232382][    C0] audit: audit_lost=708805 audit_rate_limit=0 audit_backlog_limit=64
[ 1860.338431][T21442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4120'.
[ 1861.211293][T21457] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1862.455401][T21462] FAULT_INJECTION: forcing a failure.
[ 1862.455401][T21462] name failslab, interval 1, probability 0, space 0, times 0
[ 1862.503831][T21462] CPU: 1 UID: 0 PID: 21462 Comm: syz.1.4125 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1862.503862][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1862.503875][T21462] Call Trace:
[ 1862.503882][T21462]  <TASK>
[ 1862.503891][T21462]  dump_stack_lvl+0x189/0x250
[ 1862.503919][T21462]  ? __pfx____ratelimit+0x10/0x10
[ 1862.503940][T21462]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1862.503966][T21462]  ? __pfx__printk+0x10/0x10
[ 1862.503993][T21462]  ? ref_tracker_alloc+0x318/0x460
[ 1862.504017][T21462]  should_fail_ex+0x414/0x560
[ 1862.504039][T21462]  should_failslab+0xa8/0x100
[ 1862.504061][T21462]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1862.504079][T21462]  ? skb_clone+0x212/0x3a0
[ 1862.504103][T21462]  skb_clone+0x212/0x3a0
[ 1862.504124][T21462]  __netlink_deliver_tap+0x404/0x850
[ 1862.504162][T21462]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1862.504189][T21462]  netlink_deliver_tap+0x19c/0x1b0
[ 1862.504216][T21462]  netlink_unicast+0x730/0x8e0
[ 1862.504253][T21462]  netlink_sendmsg+0x805/0xb30
[ 1862.504289][T21462]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1862.504326][T21462]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1862.504344][T21462]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1862.504372][T21462]  __sock_sendmsg+0x21c/0x270
[ 1862.504400][T21462]  ____sys_sendmsg+0x505/0x830
[ 1862.504435][T21462]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1862.504471][T21462]  ? import_iovec+0x74/0xa0
[ 1862.504496][T21462]  ___sys_sendmsg+0x21f/0x2a0
[ 1862.504523][T21462]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1862.504593][T21462]  ? __fget_files+0x2a/0x420
[ 1862.504613][T21462]  ? __fget_files+0x3a0/0x420
[ 1862.504646][T21462]  __x64_sys_sendmsg+0x19b/0x260
[ 1862.504679][T21462]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1862.504717][T21462]  ? __pfx_ksys_write+0x10/0x10
[ 1862.504732][T21462]  ? rcu_is_watching+0x15/0xb0
[ 1862.504758][T21462]  ? do_syscall_64+0xbe/0x3b0
[ 1862.504786][T21462]  do_syscall_64+0xfa/0x3b0
[ 1862.504806][T21462]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1862.504827][T21462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1862.504847][T21462]  ? clear_bhb_loop+0x60/0xb0
[ 1862.504871][T21462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1862.504890][T21462] RIP: 0033:0x7f6cad98ebe9
[ 1862.504908][T21462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1862.504926][T21462] RSP: 002b:00007f6cae73e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1862.504947][T21462] RAX: ffffffffffffffda RBX: 00007f6cadbb5fa0 RCX: 00007f6cad98ebe9
[ 1862.504971][T21462] RDX: 0000000000004080 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1862.504984][T21462] RBP: 00007f6cae73e090 R08: 0000000000000000 R09: 0000000000000000
[ 1862.504997][T21462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1862.505010][T21462] R13: 00007f6cadbb6038 R14: 00007f6cadbb5fa0 R15: 00007ffe0d7bc008
[ 1862.505043][T21462]  </TASK>
[ 1862.989346][T21466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4128'.
[ 1864.017322][T21471] FAULT_INJECTION: forcing a failure.
[ 1864.017322][T21471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1864.242463][T21471] CPU: 1 UID: 0 PID: 21471 Comm: syz.5.4129 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1864.242491][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1864.242503][T21471] Call Trace:
[ 1864.242511][T21471]  <TASK>
[ 1864.242520][T21471]  dump_stack_lvl+0x189/0x250
[ 1864.242546][T21471]  ? __pfx____ratelimit+0x10/0x10
[ 1864.242568][T21471]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1864.242595][T21471]  ? __pfx__printk+0x10/0x10
[ 1864.242618][T21471]  ? __might_fault+0xb0/0x130
[ 1864.242646][T21471]  should_fail_ex+0x414/0x560
[ 1864.242670][T21471]  _copy_from_user+0x2d/0xb0
[ 1864.242693][T21471]  ___sys_recvmsg+0x12e/0x510
[ 1864.242716][T21471]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1864.242757][T21471]  ? __fget_files+0x3a0/0x420
[ 1864.242788][T21471]  __x64_sys_recvmsg+0x198/0x260
[ 1864.242807][T21471]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 1864.242834][T21471]  ? __pfx_ksys_write+0x10/0x10
[ 1864.242850][T21471]  ? rcu_is_watching+0x15/0xb0
[ 1864.242876][T21471]  ? do_syscall_64+0xbe/0x3b0
[ 1864.242901][T21471]  do_syscall_64+0xfa/0x3b0
[ 1864.242919][T21471]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1864.242938][T21471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1864.242957][T21471]  ? clear_bhb_loop+0x60/0xb0
[ 1864.242980][T21471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1864.242997][T21471] RIP: 0033:0x7f7f6338ebe9
[ 1864.243014][T21471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1864.243032][T21471] RSP: 002b:00007f7f6422b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1864.243051][T21471] RAX: ffffffffffffffda RBX: 00007f7f635b5fa0 RCX: 00007f7f6338ebe9
[ 1864.243067][T21471] RDX: 0000000000000040 RSI: 00002000000006c0 RDI: 0000000000000004
[ 1864.243079][T21471] RBP: 00007f7f6422b090 R08: 0000000000000000 R09: 0000000000000000
[ 1864.243090][T21471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1864.243102][T21471] R13: 00007f7f635b6038 R14: 00007f7f635b5fa0 R15: 00007ffe52cfd368
[ 1864.243133][T21471]  </TASK>
[ 1864.587867][T12785] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1864.795840][T12785] usb 2-1: device descriptor read/64, error -71
[ 1864.889883][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4133'.
[ 1865.277968][   T30] kauditd_printk_skb: 1764 callbacks suppressed
[ 1865.277988][   T30] audit: type=1400 audit(1755082486.408:1306823): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17322 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1865.333984][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1865.340753][T17322] audit: audit_lost=708866 audit_rate_limit=0 audit_backlog_limit=64
[ 1865.349225][T17595] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1865.349690][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1865.362376][    C0] audit: audit_lost=708867 audit_rate_limit=0 audit_backlog_limit=64
[ 1865.370455][    C0] audit: backlog limit exceeded
[ 1865.375760][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1865.377062][T17322] audit: backlog limit exceeded
[ 1865.382292][    C0] audit: audit_lost=708868 audit_rate_limit=0 audit_backlog_limit=64
[ 1865.451469][T12785] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1865.631010][T12785] usb 2-1: device descriptor read/64, error -71
[ 1865.872799][T12785] usb usb2-port1: attempt power cycle
[ 1865.877050][T21496] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4137'.
[ 1866.078023][T21499] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1866.854126][T12785] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1866.980701][T12785] usb 2-1: device descriptor read/8, error -71
[ 1867.382181][T12785] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1868.638090][T12785] usb 2-1: device not accepting address 83, error -71
[ 1868.799215][T21502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4138'.
[ 1868.818011][T12785] usb usb2-port1: unable to enumerate USB device
[ 1870.092789][T21524] ISOFS: Unable to identify CD-ROM format.
[ 1870.289510][   T30] kauditd_printk_skb: 1441 callbacks suppressed
[ 1870.289529][   T30] audit: type=1400 audit(1755082491.438:1308124): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=21525 comm="syz-executor" name="250" dev="tmpfs" ino=1353
[ 1870.416853][   T30] audit: type=1400 audit(1755082491.438:1308125): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21525 comm="syz-executor" name="250" dev="tmpfs" ino=1353
[ 1870.453136][T17595] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1870.460924][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1870.467566][    C0] audit: audit_lost=708916 audit_rate_limit=0 audit_backlog_limit=64
[ 1870.475701][    C0] audit: backlog limit exceeded
[ 1870.481472][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1870.488050][    C0] audit: audit_lost=708917 audit_rate_limit=0 audit_backlog_limit=64
[ 1870.496216][    C0] audit: backlog limit exceeded
[ 1870.501359][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1870.502588][T21531] program syz.2.4145 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1871.041811][T21540] random: crng reseeded on system resumption
[ 1872.707775][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4147'.
[ 1873.110477][T21545] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1875.404066][   T30] kauditd_printk_skb: 1246 callbacks suppressed
[ 1875.404100][   T30] audit: type=1400 audit(1755082496.558:1309029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21547 comm="syz.0.4151" name="newroot" dev="tmpfs" ino=2
[ 1875.552474][T21564] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1875.560455][T21564] audit: audit_lost=709033 audit_rate_limit=0 audit_backlog_limit=64
[ 1875.568838][T21564] audit: backlog limit exceeded
[ 1875.604972][T21564] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4151'.
[ 1875.831023][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1875.858341][   T30] audit: type=1400 audit(1755082496.558:1309030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21547 comm="syz.0.4151" name="/" dev="devtmpfs" ino=1
[ 1875.973262][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1875.987870][T17054] audit: audit_lost=709034 audit_rate_limit=0 audit_backlog_limit=64
[ 1875.996608][T17054] audit: backlog limit exceeded
[ 1875.998993][T17322] audit: audit_lost=709035 audit_rate_limit=0 audit_backlog_limit=64
[ 1876.827343][T21580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4156'.
[ 1878.129655][T21597] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1878.744022][T21600] syzkaller1: entered allmulticast mode
[ 1879.205629][T21609] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4166'.
[ 1880.407833][   T30] kauditd_printk_skb: 2509 callbacks suppressed
[ 1880.407873][   T30] audit: type=1400 audit(1755082501.488:1311350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21626 comm="syz.2.4173" name="newroot" dev="tmpfs" ino=2
[ 1880.865589][   T30] audit: type=1400 audit(1755082501.488:1311351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21626 comm="syz.2.4173" name="/" dev="devtmpfs" ino=1
[ 1880.887784][   T30] audit: type=1400 audit(1755082501.498:1311352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=21626 comm="syz.2.4173" name="kvm" dev="devtmpfs" ino=84
[ 1880.907311][   T30] audit: type=1400 audit(1755082501.498:1311353): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21626 comm="syz.2.4173" path="/dev/kvm" dev="devtmpfs" ino=84
[ 1880.926637][   T30] audit: type=1400 audit(1755082501.598:1311354): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21631 comm="syz-executor" name="255" dev="tmpfs" ino=1380
[ 1880.946015][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1880.959534][   T30] audit: type=1400 audit(1755082501.598:1311355): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21631 comm="syz-executor" name="255" dev="tmpfs" ino=1380
[ 1880.979762][   T30] audit: type=1400 audit(1755082501.658:1311356): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=21631 comm="syz-executor" name="255" dev="tmpfs" ino=1380
[ 1881.000212][   T30] audit: type=1400 audit(1755082502.008:1311357): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21631 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1881.030320][   T30] audit: type=1400 audit(1755082502.008:1311358): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21631 comm="syz-executor" name="/" dev="proc" ino=1
[ 1881.044065][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1884.714350][T21651] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1885.418020][   T30] kauditd_printk_skb: 1219 callbacks suppressed
[ 1885.418038][   T30] audit: type=1400 audit(1755082506.568:1311793): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1885.447083][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1885.449627][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1885.457781][T17054] audit: audit_lost=709361 audit_rate_limit=0 audit_backlog_limit=64
[ 1885.460133][    C0] audit: audit_lost=709362 audit_rate_limit=0 audit_backlog_limit=64
[ 1885.476359][    C0] audit: backlog limit exceeded
[ 1885.482015][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1885.487710][T17054] audit: backlog limit exceeded
[ 1885.488677][    C0] audit: audit_lost=709363 audit_rate_limit=0 audit_backlog_limit=64
[ 1885.493833][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1885.807931][T12785] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1886.140909][T12785] usb 3-1: Using ep0 maxpacket: 8
[ 1887.623299][T12785] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[ 1887.708430][T12785] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[ 1887.767737][T12785] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1887.801386][T12785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1887.814194][T21655] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1888.032261][T12785] usb 3-1: string descriptor 0 read error: -71
[ 1888.051290][T12785] hub 3-1:32.0: USB hub found
[ 1888.067427][T12785] hub 3-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1888.358505][T12785] usb 3-1: USB disconnect, device number 81
[ 1889.136472][T21691] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -26339, delta: 1
[ 1889.175361][T21691] ref_ctr increment failed for inode: 0x519 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802eef1400
[ 1890.489064][T21702] kAFS: Can only specify source 'none' with -o dyn
[ 1890.500904][   T30] kauditd_printk_skb: 1719 callbacks suppressed
[ 1890.500924][   T30] audit: type=1400 audit(1755082510.708:1313165): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21696 comm="syz.4.4192" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 1890.531988][   T30] audit: type=1400 audit(1755082510.708:1313166): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21696 comm="syz.4.4192" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 1890.561194][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1890.577964][T17054] audit: audit_lost=709480 audit_rate_limit=0 audit_backlog_limit=64
[ 1890.586325][T17054] audit: backlog limit exceeded
[ 1890.592367][T21703] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1890.601003][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1890.601855][T21703] audit: audit_lost=709481 audit_rate_limit=0 audit_backlog_limit=64
[ 1890.607548][    C0] audit: audit_lost=709482 audit_rate_limit=0 audit_backlog_limit=64
[ 1890.607566][    C0] audit: backlog limit exceeded
[ 1892.092176][T21728] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4199'.
[ 1892.505663][T21734] vlan0: left promiscuous mode
[ 1892.647008][T21734] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1892.654494][T21734] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1892.666499][T21734] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1892.689142][T21734] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1892.720356][T21734] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1892.744308][T21734] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1892.805875][T21734] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1892.819591][T21734] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1892.841384][T21734] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1894.697941][T17654] Bluetooth: hci1: command 0x0406 tx timeout
[ 1894.704980][ T5160] Bluetooth: hci2: command 0x0406 tx timeout
[ 1894.778325][ T5160] Bluetooth: hci5: command 0x0406 tx timeout
[ 1894.863578][ T5160] Bluetooth: hci4: command 0x0405 tx timeout
[ 1895.048592][T21783] syz.5.4213: attempt to access beyond end of device
[ 1895.048592][T21783] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1895.087589][T21783] (syz.5.4213,21783,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1895.118559][T21783] (syz.5.4213,21783,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1895.157267][T21783] (syz.5.4213,21783,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1895.397931][T21783] (syz.5.4213,21783,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1895.483193][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'.
[ 1895.978702][   T30] kauditd_printk_skb: 3357 callbacks suppressed
[ 1895.978723][   T30] audit: type=1400 audit(1755082517.118:1315995): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21784 comm="syz.4.4214" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 1896.007705][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1896.155377][T21787] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1896.155413][T17595] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1896.162898][    C0] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1896.168660][T17595] audit: audit_lost=709659 audit_rate_limit=0 audit_backlog_limit=64
[ 1896.175121][    C0] audit: audit_lost=709660 audit_rate_limit=0 audit_backlog_limit=64
[ 1896.183327][T17595] audit: backlog limit exceeded
[ 1896.191265][    C0] audit: backlog limit exceeded
[ 1896.196180][T17595] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1896.201303][    C0] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1896.779635][ T5160] Bluetooth: hci2: command 0x0406 tx timeout
[ 1896.785968][T17654] Bluetooth: hci1: command 0x0406 tx timeout
[ 1896.858351][T17654] Bluetooth: hci5: command 0x0406 tx timeout
[ 1896.937820][T17654] Bluetooth: hci4: command 0x0405 tx timeout
[ 1897.184364][ T9652] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1899.274013][T17654] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1899.281212][ T5160] Bluetooth: hci3: command 0x1003 tx timeout
[ 1899.738603][T21814] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4222'.
[ 1900.122857][T21819] FAULT_INJECTION: forcing a failure.
[ 1900.122857][T21819] name failslab, interval 1, probability 0, space 0, times 0
[ 1900.148577][T21819] CPU: 0 UID: 0 PID: 21819 Comm: syz.0.4224 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1900.148606][T21819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1900.148618][T21819] Call Trace:
[ 1900.148627][T21819]  <TASK>
[ 1900.148637][T21819]  dump_stack_lvl+0x189/0x250
[ 1900.148664][T21819]  ? __pfx____ratelimit+0x10/0x10
[ 1900.148685][T21819]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1900.148707][T21819]  ? __pfx__printk+0x10/0x10
[ 1900.148735][T21819]  ? __pfx___might_resched+0x10/0x10
[ 1900.148756][T21819]  ? fs_reclaim_acquire+0x7d/0x100
[ 1900.148785][T21819]  should_fail_ex+0x414/0x560
[ 1900.148811][T21819]  should_failslab+0xa8/0x100
[ 1900.148833][T21819]  __kmalloc_noprof+0xcb/0x4f0
[ 1900.148852][T21819]  ? tomoyo_encode+0x28b/0x550
[ 1900.148882][T21819]  tomoyo_encode+0x28b/0x550
[ 1900.148913][T21819]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1900.148950][T21819]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1900.148969][T21819]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1900.148993][T21819]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1900.149034][T21819]  ? __lock_acquire+0xab9/0xd20
[ 1900.149076][T21819]  ? __fget_files+0x2a/0x420
[ 1900.149102][T21819]  ? __fget_files+0x2a/0x420
[ 1900.149122][T21819]  ? __fget_files+0x3a0/0x420
[ 1900.149137][T21819]  ? __fget_files+0x2a/0x420
[ 1900.149156][T21819]  security_file_ioctl+0xcb/0x2d0
[ 1900.149183][T21819]  __se_sys_ioctl+0x47/0x170
[ 1900.149215][T21819]  do_syscall_64+0xfa/0x3b0
[ 1900.149236][T21819]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1900.149258][T21819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1900.149277][T21819]  ? clear_bhb_loop+0x60/0xb0
[ 1900.149302][T21819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1900.149322][T21819] RIP: 0033:0x7fd95e38ebe9
[ 1900.149341][T21819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1900.149359][T21819] RSP: 002b:00007fd95f161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1900.149401][T21819] RAX: ffffffffffffffda RBX: 00007fd95e5b6090 RCX: 00007fd95e38ebe9
[ 1900.149416][T21819] RDX: 00002000000000c0 RSI: 0000000000008926 RDI: 0000000000000003
[ 1900.149430][T21819] RBP: 00007fd95f161090 R08: 0000000000000000 R09: 0000000000000000
[ 1900.149443][T21819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1900.149455][T21819] R13: 00007fd95e5b6128 R14: 00007fd95e5b6090 R15: 00007ffc67187738
[ 1900.149489][T21819]  </TASK>
[ 1900.149511][T21819] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1900.996740][   T30] kauditd_printk_skb: 1929 callbacks suppressed
[ 1900.996759][   T30] audit: type=1400 audit(1755082522.148:1317295): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1901.016863][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1901.032376][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1901.038988][    C0] audit: audit_lost=709872 audit_rate_limit=0 audit_backlog_limit=64
[ 1901.047110][    C0] audit: backlog limit exceeded
[ 1901.052912][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1901.059474][    C0] audit: audit_lost=709873 audit_rate_limit=0 audit_backlog_limit=64
[ 1901.067562][    C0] audit: backlog limit exceeded
[ 1901.072903][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1901.079537][    C0] audit: audit_lost=709874 audit_rate_limit=0 audit_backlog_limit=64
[ 1901.237934][T16059] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1901.777756][T16059] usb 3-1: Using ep0 maxpacket: 8
[ 1902.909003][T16059] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[ 1902.923547][T16059] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[ 1902.935600][T16059] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1902.945749][T16059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1902.982777][T21831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1903.327097][T16059] usb 3-1: string descriptor 0 read error: -71
[ 1903.334563][T16059] hub 3-1:32.0: USB hub found
[ 1903.440957][T21849] netlink: 'syz.1.4231': attribute type 1 has an invalid length.
[ 1903.456577][T21849] delete_channel: no stack
[ 1903.461908][T21849] delete_channel: no stack
[ 1903.945805][T16059] hub 3-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1904.043642][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4232'.
[ 1904.459830][T16059] usb 3-1: USB disconnect, device number 82
[ 1904.722076][T21857] FAULT_INJECTION: forcing a failure.
[ 1904.722076][T21857] name failslab, interval 1, probability 0, space 0, times 0
[ 1904.727853][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805714ac00: rx timeout, send abort
[ 1904.772785][T21857] CPU: 1 UID: 0 PID: 21857 Comm: syz.0.4235 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1904.772814][T21857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1904.772826][T21857] Call Trace:
[ 1904.772834][T21857]  <TASK>
[ 1904.772843][T21857]  dump_stack_lvl+0x189/0x250
[ 1904.772871][T21857]  ? __pfx____ratelimit+0x10/0x10
[ 1904.772893][T21857]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1904.772912][T21857]  ? __pfx__printk+0x10/0x10
[ 1904.772944][T21857]  ? ref_tracker_alloc+0x318/0x460
[ 1904.772969][T21857]  should_fail_ex+0x414/0x560
[ 1904.772995][T21857]  should_failslab+0xa8/0x100
[ 1904.773018][T21857]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1904.773038][T21857]  ? skb_clone+0x212/0x3a0
[ 1904.773062][T21857]  skb_clone+0x212/0x3a0
[ 1904.773084][T21857]  __netlink_deliver_tap+0x404/0x850
[ 1904.773122][T21857]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1904.773147][T21857]  netlink_deliver_tap+0x19c/0x1b0
[ 1904.773171][T21857]  netlink_unicast+0x730/0x8e0
[ 1904.773192][T21857]  netlink_sendmsg+0x805/0xb30
[ 1904.773212][T21857]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1904.773232][T21857]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1904.773243][T21857]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1904.773258][T21857]  __sock_sendmsg+0x21c/0x270
[ 1904.773273][T21857]  ____sys_sendmsg+0x505/0x830
[ 1904.773292][T21857]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1904.773319][T21857]  ? import_iovec+0x74/0xa0
[ 1904.773337][T21857]  ___sys_sendmsg+0x21f/0x2a0
[ 1904.773354][T21857]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1904.773391][T21857]  ? __fget_files+0x2a/0x420
[ 1904.773402][T21857]  ? __fget_files+0x3a0/0x420
[ 1904.773420][T21857]  __x64_sys_sendmsg+0x19b/0x260
[ 1904.773438][T21857]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1904.773459][T21857]  ? __pfx_ksys_write+0x10/0x10
[ 1904.773467][T21857]  ? rcu_is_watching+0x15/0xb0
[ 1904.773482][T21857]  ? do_syscall_64+0xbe/0x3b0
[ 1904.773496][T21857]  do_syscall_64+0xfa/0x3b0
[ 1904.773507][T21857]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1904.773518][T21857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1904.773528][T21857]  ? clear_bhb_loop+0x60/0xb0
[ 1904.773541][T21857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1904.773551][T21857] RIP: 0033:0x7fd95e38ebe9
[ 1904.773561][T21857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1904.773570][T21857] RSP: 002b:00007fd95f182038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1904.773582][T21857] RAX: ffffffffffffffda RBX: 00007fd95e5b5fa0 RCX: 00007fd95e38ebe9
[ 1904.773590][T21857] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003
[ 1904.773597][T21857] RBP: 00007fd95f182090 R08: 0000000000000000 R09: 0000000000000000
[ 1904.773604][T21857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1904.773610][T21857] R13: 00007fd95e5b6038 R14: 00007fd95e5b5fa0 R15: 00007ffc67187738
[ 1904.773627][T21857]  </TASK>
[ 1904.774601][T21857] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 !
[ 1905.096878][T21861] syz.2.4237(21861): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1905.245200][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805714ac00: abort rx timeout. Force session deactivation
[ 1905.416668][T21870] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:19489
[ 1906.046726][   T30] kauditd_printk_skb: 1443 callbacks suppressed
[ 1906.046778][   T30] audit: type=1400 audit(1755082527.118:1318700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21871 comm="syz.1.4240" name="newroot" dev="tmpfs" ino=2
[ 1906.088050][   T30] audit: type=1400 audit(1755082527.118:1318701): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21871 comm="syz.1.4240" name="/" dev="devtmpfs" ino=1
[ 1906.108345][   T30] audit: type=1400 audit(1755082527.118:1318702): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21871 comm="syz.1.4240" name="snd" dev="devtmpfs" ino=1283
[ 1906.414172][   T30] audit: type=1400 audit(1755082527.118:1318703): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=21871 comm="syz.1.4240" name="seq" dev="devtmpfs" ino=1285
[ 1906.466677][   T30] audit: type=1400 audit(1755082527.128:1318704): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21871 comm="syz.1.4240" path="/dev/snd/seq" dev="devtmpfs" ino=1285
[ 1906.530626][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1906.541737][   T30] audit: type=1400 audit(1755082527.128:1318705): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=21871 comm="syz.1.4240" path="/dev/snd/seq" dev="devtmpfs" ino=1285
[ 1906.557740][T19814] audit: audit_lost=709888 audit_rate_limit=0 audit_backlog_limit=64
[ 1906.574273][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1906.581546][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1907.146595][T21879] FAULT_INJECTION: forcing a failure.
[ 1907.146595][T21879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1907.710764][T21879] CPU: 0 UID: 0 PID: 21879 Comm: syz.2.4242 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1907.710790][T21879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1907.710803][T21879] Call Trace:
[ 1907.710811][T21879]  <TASK>
[ 1907.710820][T21879]  dump_stack_lvl+0x189/0x250
[ 1907.710845][T21879]  ? __pfx____ratelimit+0x10/0x10
[ 1907.710865][T21879]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1907.710882][T21879]  ? __pfx__printk+0x10/0x10
[ 1907.710919][T21879]  should_fail_ex+0x414/0x560
[ 1907.710941][T21879]  _copy_to_user+0x31/0xb0
[ 1907.710966][T21879]  ? __pfx_virtio_read+0x10/0x10
[ 1907.710982][T21879]  rng_dev_read+0x3f2/0x770
[ 1907.711016][T21879]  ? __pfx_rng_dev_read+0x10/0x10
[ 1907.711048][T21879]  ? bpf_lsm_file_permission+0x9/0x20
[ 1907.711069][T21879]  ? security_file_permission+0x75/0x290
[ 1907.711092][T21879]  ? rw_verify_area+0x258/0x650
[ 1907.711124][T21879]  vfs_readv+0x5aa/0x850
[ 1907.711147][T21879]  ? __pfx_rng_dev_read+0x10/0x10
[ 1907.711176][T21879]  ? __pfx_vfs_readv+0x10/0x10
[ 1907.711209][T21879]  ? __fget_files+0x2a/0x420
[ 1907.711231][T21879]  ? __fget_files+0x3a0/0x420
[ 1907.711248][T21879]  ? __fget_files+0x2a/0x420
[ 1907.711275][T21879]  __x64_sys_preadv+0x197/0x2a0
[ 1907.711297][T21879]  ? __pfx___x64_sys_preadv+0x10/0x10
[ 1907.711319][T21879]  ? do_syscall_64+0xbe/0x3b0
[ 1907.711343][T21879]  do_syscall_64+0xfa/0x3b0
[ 1907.711361][T21879]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1907.711379][T21879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1907.711398][T21879]  ? clear_bhb_loop+0x60/0xb0
[ 1907.711421][T21879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1907.711439][T21879] RIP: 0033:0x7f9a3778ebe9
[ 1907.711455][T21879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1907.711469][T21879] RSP: 002b:00007f9a3851c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1907.711489][T21879] RAX: ffffffffffffffda RBX: 00007f9a379b6090 RCX: 00007f9a3778ebe9
[ 1907.711503][T21879] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
[ 1907.711515][T21879] RBP: 00007f9a3851c090 R08: 0000000000000000 R09: 0000000000000000
[ 1907.711526][T21879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1907.711537][T21879] R13: 00007f9a379b6128 R14: 00007f9a379b6090 R15: 00007ffcb1146c98
[ 1907.711566][T21879]  </TASK>
[ 1908.795816][T21891] syz.2.4245: attempt to access beyond end of device
[ 1908.795816][T21891] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1908.824422][T21891] (syz.2.4245,21891,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1908.854469][T21891] (syz.2.4245,21891,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1908.882768][T21891] (syz.2.4245,21891,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1908.917822][T21891] (syz.2.4245,21891,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1909.923443][T21912] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4250'.
[ 1909.933404][T21912] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4250'.
[ 1911.072616][   T30] kauditd_printk_skb: 1873 callbacks suppressed
[ 1911.072628][   T30] audit: type=1400 audit(1755082532.228:1320517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1911.107594][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1911.125980][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1911.128284][T21920] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1911.133260][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1911.139184][T17054] audit: audit_lost=709910 audit_rate_limit=0 audit_backlog_limit=64
[ 1911.145611][    C0] audit: audit_lost=709911 audit_rate_limit=0 audit_backlog_limit=64
[ 1911.162185][    C0] audit: backlog limit exceeded
[ 1911.168670][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1911.175234][    C0] audit: audit_lost=709912 audit_rate_limit=0 audit_backlog_limit=64
[ 1911.663306][T21928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4254'.
[ 1912.977738][  T977] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1913.147744][  T977] usb 3-1: Using ep0 maxpacket: 32
[ 1913.160628][  T977] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1913.179864][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1913.196619][  T977] usb 3-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[ 1913.206213][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1913.214283][  T977] usb 3-1: Product: syz
[ 1913.218866][  T977] usb 3-1: Manufacturer: syz
[ 1913.223559][  T977] usb 3-1: SerialNumber: syz
[ 1913.251596][  T977] usb 3-1: config 0 descriptor??
[ 1913.290946][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[ 1913.300151][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[ 1913.310930][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[ 1913.740012][T21937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1913.757587][T21937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1913.872195][T21517] usb 3-1: USB disconnect, device number 83
[ 1915.042654][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1915.049112][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.340144][T21977] ISOFS: Unable to identify CD-ROM format.
[ 1915.630797][T21517] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[ 1915.645796][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4268'.
[ 1916.078773][   T30] kauditd_printk_skb: 2324 callbacks suppressed
[ 1916.078813][   T30] audit: type=1400 audit(1755082537.238:1322530): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=21982 comm="syz.4.4270" opid=21982 ocomm="syz.4.4270"
[ 1916.113252][T21517] usb 2-1: config 0 has an invalid interface number: 11 but max is 0
[ 1916.135097][T21517] usb 2-1: config 0 has no interface number 0
[ 1916.141838][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1916.148723][T21517] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 1916.160745][T19814] audit: audit_lost=710017 audit_rate_limit=0 audit_backlog_limit=64
[ 1916.169151][   T30] audit: type=1400 audit(1755082537.238:1322531): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=21973 comm="syz.1.4266" path="/dev/raw-gadget" dev="devtmpfs" ino=820
[ 1916.171686][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1916.189316][T19814] audit: backlog limit exceeded
[ 1916.195572][    C0] audit: audit_lost=710018 audit_rate_limit=0 audit_backlog_limit=64
[ 1916.195593][    C0] audit: backlog limit exceeded
[ 1916.197888][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1916.220264][    C0] audit: audit_lost=710019 audit_rate_limit=0 audit_backlog_limit=64
[ 1916.233422][T21517] usb 2-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1916.270201][T21517] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x86 has an invalid bInterval 0, changing to 10
[ 1916.302323][T21517] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1916.356196][T21517] usb 2-1: config 0 interface 11 has no altsetting 0
[ 1916.380717][T21517] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1916.407675][T21517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1916.430781][T21517] usb 2-1: config 0 descriptor??
[ 1916.438853][T21974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1916.448718][T21517] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected
[ 1916.456659][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87
[ 1916.498071][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81
[ 1916.505944][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82
[ 1916.546518][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1
[ 1916.570627][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2
[ 1916.587549][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85
[ 1916.615186][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5
[ 1916.632037][T21517] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1916.658037][  T977] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1916.972012][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83
[ 1916.984908][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84
[ 1917.003615][  T977] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1917.010386][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3
[ 1917.025582][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4
[ 1917.030186][  T977] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1917.045459][T21517] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6
[ 1917.078632][T21517] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1917.085839][  T977] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1917.104505][  T977] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1917.108220][T21517] usb 2-1: USB disconnect, device number 84
[ 1917.124726][  T977] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1917.135704][  T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1917.185037][  T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1917.230897][  T977] usb 5-1: invalid MIDI out EP 0
[ 1917.232043][T21517] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1917.301963][T21517] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1917.328988][T21517] keyspan 2-1:0.11: device disconnected
[ 1917.414618][  T977] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1917.450729][  T977] usb 5-1: USB disconnect, device number 93
[ 1919.224955][T22034] syz.2.4283: attempt to access beyond end of device
[ 1919.224955][T22034] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1919.238539][T22034] (syz.2.4283,22034,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1919.246219][T22034] (syz.2.4283,22034,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1919.331724][T22038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4286'.
[ 1919.341657][T22038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4286'.
[ 1920.056244][T22034] (syz.2.4283,22034,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1920.058106][T22039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4285'.
[ 1920.585549][T22034] (syz.2.4283,22034,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1921.152948][   T30] kauditd_printk_skb: 2947 callbacks suppressed
[ 1921.152996][   T30] audit: type=1400 audit(1755082542.298:1324857): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17595 comm="syz-executor" opid=22020 ocomm="syz.4.4282"
[ 1921.569186][T22043] bond0: Error: Cannot enslave bond to itself.
[ 1921.655475][   T30] audit: type=1400 audit(1755082542.298:1324858): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17595 comm="syz-executor" opid=22020 ocomm="syz.4.4282"
[ 1921.913727][   T30] audit: type=1400 audit(1755082542.388:1324859): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22044 comm="kworker/u8:11" name="/" dev="sda1" ino=2
[ 1922.057412][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1922.064047][    C0] audit: audit_lost=710227 audit_rate_limit=0 audit_backlog_limit=64
[ 1922.072288][    C0] audit: backlog limit exceeded
[ 1922.081409][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1922.088008][    C0] audit: audit_lost=710228 audit_rate_limit=0 audit_backlog_limit=64
[ 1922.096174][    C0] audit: backlog limit exceeded
[ 1922.102743][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1922.713337][T22050] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4289'.
[ 1923.672865][T22062] kAFS: Can only specify source 'none' with -o dyn
[ 1924.588257][T22075] ISOFS: Unable to identify CD-ROM format.
[ 1925.787249][T22087] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1925.874596][T22091] loop6: detected capacity change from 0 to 524288000
[ 1925.897044][T22091] buffer_io_error: 4 callbacks suppressed
[ 1925.897063][T22091] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1925.912209][T22091] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1925.961547][T22091] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1925.972200][T22091] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1926.033171][T22096] loop6: detected capacity change from 524288000 to 0
[ 1926.033235][T22091] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1926.079138][T22091] ldm_validate_partition_table(): Disk read failed.
[ 1926.090358][T22091] Dev loop6: unable to read RDB block 0
[ 1926.103011][T22091]  loop6: unable to read partition table
[ 1926.135400][T22091] loop6: partition table beyond EOD, truncated
[ 1926.174891][T22091] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1926.196370][   T30] kauditd_printk_skb: 3080 callbacks suppressed
[ 1926.196387][   T30] audit: type=1400 audit(1755082547.348:1327185): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1926.209327][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1926.223235][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1926.223257][    C0] audit: audit_lost=710481 audit_rate_limit=0 audit_backlog_limit=64
[ 1926.223274][    C0] audit: backlog limit exceeded
[ 1926.223412][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1926.223427][    C0] audit: audit_lost=710482 audit_rate_limit=0 audit_backlog_limit=64
[ 1926.223444][    C0] audit: backlog limit exceeded
[ 1926.231457][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1926.279736][T17054] audit: audit_lost=710483 audit_rate_limit=0 audit_backlog_limit=64
[ 1927.548911][T22130] comedi comedi2: aio_iiro_16: I/O port conflict (0x3,8)
[ 1929.696603][T22148] 
: renamed from bond_slave_0 (while UP)
[ 1931.246090][   T30] kauditd_printk_skb: 3238 callbacks suppressed
[ 1931.246110][   T30] audit: type=1400 audit(1755082552.398:1329632): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1931.342803][T22182] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1931.350074][T22182] audit: audit_lost=710748 audit_rate_limit=0 audit_backlog_limit=64
[ 1931.359058][   T30] audit: type=1400 audit(1755082552.398:1329633): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1931.381834][T22182] audit: backlog limit exceeded
[ 1931.397216][T22182] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1931.403787][T22182] audit: audit_lost=710749 audit_rate_limit=0 audit_backlog_limit=64
[ 1931.411877][T22182] audit: backlog limit exceeded
[ 1931.428270][   T30] audit: type=1400 audit(1755082552.398:1329634): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16668 comm="syz-executor" name="281" dev="tmpfs" ino=1511
[ 1932.112175][T22182] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1933.633161][T22205] syz.4.4337: attempt to access beyond end of device
[ 1933.633161][T22205] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1933.647311][T22205] (syz.4.4337,22205,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1933.659183][T22205] (syz.4.4337,22205,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1933.677222][T22205] (syz.4.4337,22205,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1933.724451][T22205] (syz.4.4337,22205,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1934.014053][T22212] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4338'.
[ 1934.552345][T22217] netlink: 'syz.5.4340': attribute type 1 has an invalid length.
[ 1934.758558][T22222] netlink: 'syz.5.4340': attribute type 1 has an invalid length.
[ 1936.667749][   T30] kauditd_printk_skb: 2618 callbacks suppressed
[ 1936.667769][   T30] audit: type=1400 audit(1755082557.388:1331598): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22231 comm="syz.1.4343" name="281" dev="tmpfs" ino=1494
[ 1936.854841][   T30] audit: type=1400 audit(1755082557.388:1331599): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22231 comm="syz.1.4343" name="281" dev="tmpfs" ino=1494
[ 1936.902871][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1936.915253][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1936.921941][    C0] audit: audit_lost=710969 audit_rate_limit=0 audit_backlog_limit=64
[ 1936.930086][    C0] audit: backlog limit exceeded
[ 1936.935575][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1936.942203][    C0] audit: audit_lost=710970 audit_rate_limit=0 audit_backlog_limit=64
[ 1936.950635][    C0] audit: backlog limit exceeded
[ 1936.956593][   T30] audit: type=1400 audit(1755082557.398:1331600): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22231 comm="syz.1.4343" name="281" dev="tmpfs" ino=1494
[ 1937.178622][ T5160] Bluetooth: hci2: command 0x0406 tx timeout
[ 1938.575297][T22266] fuse: Unknown parameter ''
[ 1938.725034][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'.
[ 1938.744163][T22266] netlink: 'syz.4.4351': attribute type 29 has an invalid length.
[ 1939.425745][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4354'.
[ 1940.751705][T22291] FAULT_INJECTION: forcing a failure.
[ 1940.751705][T22291] name failslab, interval 1, probability 0, space 0, times 0
[ 1940.847773][T22291] CPU: 0 UID: 0 PID: 22291 Comm: syz.2.4358 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1940.847802][T22291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1940.847815][T22291] Call Trace:
[ 1940.847824][T22291]  <TASK>
[ 1940.847834][T22291]  dump_stack_lvl+0x189/0x250
[ 1940.847863][T22291]  ? __pfx____ratelimit+0x10/0x10
[ 1940.847885][T22291]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1940.847908][T22291]  ? __pfx__printk+0x10/0x10
[ 1940.847940][T22291]  ? __pfx___might_resched+0x10/0x10
[ 1940.847962][T22291]  ? fs_reclaim_acquire+0x7d/0x100
[ 1940.847991][T22291]  should_fail_ex+0x414/0x560
[ 1940.848020][T22291]  should_failslab+0xa8/0x100
[ 1940.848044][T22291]  __kmalloc_noprof+0xcb/0x4f0
[ 1940.848063][T22291]  ? snd_pcm_hw_refine+0x967/0x1640
[ 1940.848098][T22291]  snd_pcm_hw_refine+0x967/0x1640
[ 1940.848130][T22291]  ? __kasan_kmalloc+0x93/0xb0
[ 1940.848147][T22291]  ? snd_pcm_oss_change_params_locked+0x1048/0x3e40
[ 1940.848168][T22291]  ? vfs_readv+0x5aa/0x850
[ 1940.848187][T22291]  ? do_syscall_64+0xfa/0x3b0
[ 1940.848206][T22291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.848267][T22291]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[ 1940.848338][T22291]  snd_pcm_hw_param_first+0x3e9/0xaf0
[ 1940.848369][T22291]  snd_pcm_hw_param_near+0x460/0x500
[ 1940.848393][T22291]  ? snd_pcm_oss_change_params_locked+0xff9/0x3e40
[ 1940.848417][T22291]  ? snd_pcm_hw_param_value+0x2b9/0x510
[ 1940.848445][T22291]  snd_pcm_oss_change_params_locked+0x1048/0x3e40
[ 1940.848484][T22291]  ? trace_contention_end+0x39/0x120
[ 1940.848522][T22291]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1940.848544][T22291]  ? snd_pcm_oss_read+0x1f9/0x8d0
[ 1940.848590][T22291]  ? __asan_memset+0x22/0x50
[ 1940.848619][T22291]  snd_pcm_oss_read+0x26a/0x8d0
[ 1940.848659][T22291]  vfs_readv+0x5aa/0x850
[ 1940.848683][T22291]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[ 1940.848708][T22291]  ? __pfx_vfs_readv+0x10/0x10
[ 1940.848747][T22291]  ? __fget_files+0x2a/0x420
[ 1940.848774][T22291]  ? __fget_files+0x3a0/0x420
[ 1940.848794][T22291]  ? __fget_files+0x2a/0x420
[ 1940.848826][T22291]  do_readv+0x14d/0x2d0
[ 1940.848852][T22291]  ? __pfx_do_readv+0x10/0x10
[ 1940.848872][T22291]  ? rcu_is_watching+0x15/0xb0
[ 1940.848898][T22291]  ? do_syscall_64+0xbe/0x3b0
[ 1940.848924][T22291]  do_syscall_64+0xfa/0x3b0
[ 1940.848945][T22291]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1940.848965][T22291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.848985][T22291]  ? clear_bhb_loop+0x60/0xb0
[ 1940.849010][T22291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.849028][T22291] RIP: 0033:0x7f9a3778ebe9
[ 1940.849047][T22291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1940.849064][T22291] RSP: 002b:00007f9a3853d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 1940.849085][T22291] RAX: ffffffffffffffda RBX: 00007f9a379b5fa0 RCX: 00007f9a3778ebe9
[ 1940.849099][T22291] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1940.849112][T22291] RBP: 00007f9a3853d090 R08: 0000000000000000 R09: 0000000000000000
[ 1940.849124][T22291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1940.849136][T22291] R13: 00007f9a379b6038 R14: 00007f9a379b5fa0 R15: 00007ffcb1146c98
[ 1940.849168][T22291]  </TASK>
[ 1941.383423][T22297] netlink: 'syz.0.4359': attribute type 10 has an invalid length.
[ 1941.392123][T22297] veth0_macvtap: left promiscuous mode
[ 1941.402953][T22297] batman_adv: batadv0: Adding interface: macvtap0
[ 1941.409499][T22297] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1941.436107][T22297] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[ 1941.695383][   T30] kauditd_printk_skb: 2691 callbacks suppressed
[ 1941.695420][   T30] audit: type=1400 audit(1755082562.818:1333539): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22301 comm="syz.1.4362" name="newroot" dev="tmpfs" ino=2
[ 1941.722370][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1942.078385][T22303] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1942.085084][T22303] audit: audit_lost=711222 audit_rate_limit=0 audit_backlog_limit=64
[ 1942.093779][T22303] audit: backlog limit exceeded
[ 1942.099381][T22303] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1942.105911][T22303] audit: audit_lost=711223 audit_rate_limit=0 audit_backlog_limit=64
[ 1942.114920][T22303] audit: backlog limit exceeded
[ 1942.158386][T22303] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1942.165067][T22303] audit: audit_lost=711224 audit_rate_limit=0 audit_backlog_limit=64
[ 1942.185400][T22303] audit: backlog limit exceeded
[ 1942.797090][T22324] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4367'.
[ 1943.492961][T22332] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard
[ 1943.504525][T22332] syz.1.4369: attempt to access beyond end of device
[ 1943.504525][T22332] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1943.517708][T22332] exFAT-fs (nbd1): unable to read boot sector
[ 1943.523836][T22332] exFAT-fs (nbd1): failed to read boot sector
[ 1943.530026][T22332] exFAT-fs (nbd1): failed to recognize exfat type
[ 1944.379776][T22341] FAULT_INJECTION: forcing a failure.
[ 1944.379776][T22341] name failslab, interval 1, probability 0, space 0, times 0
[ 1944.553926][T22341] CPU: 1 UID: 0 PID: 22341 Comm: syz.0.4374 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1944.553953][T22341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1944.553966][T22341] Call Trace:
[ 1944.553975][T22341]  <TASK>
[ 1944.553984][T22341]  dump_stack_lvl+0x189/0x250
[ 1944.554010][T22341]  ? __pfx____ratelimit+0x10/0x10
[ 1944.554030][T22341]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1944.554050][T22341]  ? __pfx__printk+0x10/0x10
[ 1944.554077][T22341]  ? __pfx___might_resched+0x10/0x10
[ 1944.554097][T22341]  ? fs_reclaim_acquire+0x7d/0x100
[ 1944.554144][T22341]  should_fail_ex+0x414/0x560
[ 1944.554170][T22341]  should_failslab+0xa8/0x100
[ 1944.554192][T22341]  __kmalloc_noprof+0xcb/0x4f0
[ 1944.554210][T22341]  ? tomoyo_encode+0x28b/0x550
[ 1944.554237][T22341]  tomoyo_encode+0x28b/0x550
[ 1944.554266][T22341]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1944.554292][T22341]  ? tomoyo_domain+0xda/0x130
[ 1944.554323][T22341]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1944.554344][T22341]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1944.554366][T22341]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1944.554404][T22341]  ? __lock_acquire+0xab9/0xd20
[ 1944.554446][T22341]  ? __fget_files+0x2a/0x420
[ 1944.554470][T22341]  ? __fget_files+0x2a/0x420
[ 1944.554491][T22341]  ? __fget_files+0x3a0/0x420
[ 1944.554512][T22341]  ? __fget_files+0x2a/0x420
[ 1944.554538][T22341]  security_file_ioctl+0xcb/0x2d0
[ 1944.554562][T22341]  __se_sys_ioctl+0x47/0x170
[ 1944.554593][T22341]  do_syscall_64+0xfa/0x3b0
[ 1944.554615][T22341]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1944.554635][T22341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1944.554655][T22341]  ? clear_bhb_loop+0x60/0xb0
[ 1944.554679][T22341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1944.554697][T22341] RIP: 0033:0x7fd95e38ebe9
[ 1944.554714][T22341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1944.554735][T22341] RSP: 002b:00007fd95f182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1944.554755][T22341] RAX: ffffffffffffffda RBX: 00007fd95e5b5fa0 RCX: 00007fd95e38ebe9
[ 1944.554770][T22341] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000003
[ 1944.554783][T22341] RBP: 00007fd95f182090 R08: 0000000000000000 R09: 0000000000000000
[ 1944.554796][T22341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1944.554809][T22341] R13: 00007fd95e5b6038 R14: 00007fd95e5b5fa0 R15: 00007ffc67187738
[ 1944.554848][T22341]  </TASK>
[ 1944.555154][T22341] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1944.756082][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1945.386617][   T43] IPVS: starting estimator thread 0...
[ 1945.477733][T22351] IPVS: using max 49 ests per chain, 117600 per kthread
[ 1945.892901][T22359] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4379'.
[ 1946.157838][    T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1946.373318][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1946.485450][T22368] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4381'.
[ 1946.515428][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1946.643995][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1946.827873][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1946.837923][   T30] kauditd_printk_skb: 3009 callbacks suppressed
[ 1946.837938][   T30] audit: type=1400 audit(1755082567.988:1335568): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1946.840352][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1946.844217][   T30] audit: type=1400 audit(1755082567.988:1335569): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1946.890383][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1946.890406][    C0] audit: audit_lost=711552 audit_rate_limit=0 audit_backlog_limit=64
[ 1946.890429][    C0] audit: backlog limit exceeded
[ 1946.890554][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1946.890569][    C0] audit: audit_lost=711553 audit_rate_limit=0 audit_backlog_limit=64
[ 1946.890577][    C0] audit: backlog limit exceeded
[ 1946.897210][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1946.962323][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1946.997707][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1947.041993][    T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1947.075931][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1947.098899][    T9] usb 3-1: Product: syz
[ 1947.110473][    T9] usb 3-1: Manufacturer: syz
[ 1947.142915][    T9] usb 3-1: SerialNumber: syz
[ 1947.187950][    T9] usb 3-1: config 0 descriptor??
[ 1947.483125][T22378] kAFS: Can only specify source 'none' with -o dyn
[ 1948.303051][    T9] iforce 3-1:0.0: usb_submit_urb failed: -110
[ 1948.480278][    T9] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 1948.492421][    T9] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 1948.533036][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.543788][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.552228][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.579800][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.599335][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.605934][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.619881][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.788347][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.810870][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.820814][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.830413][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.841042][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.849488][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1948.868175][T22388] kAFS: Can only specify source 'none' with -o dyn
[ 1949.543457][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1949.565994][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1949.749080][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1950.076542][    T9] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1950.088529][    T9] input input73: Timeout waiting for response from device.
[ 1950.558402][ T5915] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1950.714358][    T9] usb 3-1: USB disconnect, device number 84
[ 1950.935264][ T5915] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1950.975366][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1951.124786][T22407] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4390'.
[ 1951.138677][T22407] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4390'.
[ 1951.406917][ T5915] usb 2-1: Product: syz
[ 1951.472434][ T5915] usb 2-1: Manufacturer: syz
[ 1951.518660][ T5915] usb 2-1: SerialNumber: syz
[ 1951.555471][ T5915] usb 2-1: config 0 descriptor??
[ 1951.586151][ T5915] ch341 2-1:0.0: ch341-uart converter detected
[ 1951.678258][T22411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4391'.
[ 1951.687541][T22411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4391'.
[ 1952.458121][   T30] kauditd_printk_skb: 1901 callbacks suppressed
[ 1952.458143][   T30] audit: type=1400 audit(1755082573.178:1337105): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=22394 comm="syz.1.4388" path="/dev/raw-gadget" dev="devtmpfs" ino=820
[ 1952.518887][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1952.527785][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1952.534428][T16668] audit: audit_lost=711677 audit_rate_limit=0 audit_backlog_limit=64
[ 1952.558578][T19814] audit: audit_lost=711678 audit_rate_limit=0 audit_backlog_limit=64
[ 1952.567313][T22395] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1952.574123][T22395] audit: audit_lost=711679 audit_rate_limit=0 audit_backlog_limit=64
[ 1952.582334][T22395] audit: backlog limit exceeded
[ 1952.582485][   T30] audit: type=1400 audit(1755082573.328:1337106): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=22394 comm="syz.1.4388" path="/dev/raw-gadget" dev="devtmpfs" ino=820
[ 1952.587468][T22395] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1953.534164][T22428] kAFS: Can only specify source 'none' with -o dyn
[ 1953.761943][ T5915] ch341-uart ttyUSB0: failed to read break control: -71
[ 1953.780939][ T5915] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1953.796673][ T5915] usb 2-1: USB disconnect, device number 85
[ 1953.804633][ T5915] ch341 2-1:0.0: device disconnected
[ 1954.219516][T22436] syz.4.4400: attempt to access beyond end of device
[ 1954.219516][T22436] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1954.246519][T22436] (syz.4.4400,22436,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1954.262348][T22436] (syz.4.4400,22436,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1954.279664][T22436] (syz.4.4400,22436,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1954.312226][T22436] (syz.4.4400,22436,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1957.690985][   T30] kauditd_printk_skb: 1937 callbacks suppressed
[ 1957.691004][   T30] audit: type=1400 audit(1755082578.848:1338799): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=22429 comm="syz.1.4399" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 1957.732304][T22467] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1957.740163][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1957.746713][T19814] audit: audit_lost=711761 audit_rate_limit=0 audit_backlog_limit=64
[ 1957.753423][   T30] audit: type=1400 audit(1755082578.858:1338800): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 1957.901463][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1957.907260][T19814] audit: backlog limit exceeded
[ 1957.910015][T17595] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1957.913200][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1957.926136][    C0] audit: audit_lost=711762 audit_rate_limit=0 audit_backlog_limit=64
[ 1959.526998][T22482] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1959.536195][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'.
[ 1959.600924][T22485] kAFS: unable to lookup cell 'sy/0'
[ 1959.618439][T22484] FAULT_INJECTION: forcing a failure.
[ 1959.618439][T22484] name failslab, interval 1, probability 0, space 0, times 0
[ 1959.679237][T22484] CPU: 0 UID: 0 PID: 22484 Comm: syz.2.4413 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1959.679267][T22484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1959.679280][T22484] Call Trace:
[ 1959.679288][T22484]  <TASK>
[ 1959.679298][T22484]  dump_stack_lvl+0x189/0x250
[ 1959.679326][T22484]  ? __pfx____ratelimit+0x10/0x10
[ 1959.679357][T22484]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1959.679379][T22484]  ? __pfx__printk+0x10/0x10
[ 1959.679409][T22484]  ? ref_tracker_alloc+0x318/0x460
[ 1959.679436][T22484]  should_fail_ex+0x414/0x560
[ 1959.679462][T22484]  should_failslab+0xa8/0x100
[ 1959.679485][T22484]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1959.679504][T22484]  ? skb_clone+0x212/0x3a0
[ 1959.679528][T22484]  skb_clone+0x212/0x3a0
[ 1959.679552][T22484]  __netlink_deliver_tap+0x404/0x850
[ 1959.679589][T22484]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1959.679606][T22484]  netlink_deliver_tap+0x19c/0x1b0
[ 1959.679621][T22484]  netlink_unicast+0x730/0x8e0
[ 1959.679646][T22484]  netlink_sendmsg+0x805/0xb30
[ 1959.679666][T22484]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1959.679690][T22484]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1959.679701][T22484]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1959.679716][T22484]  __sock_sendmsg+0x21c/0x270
[ 1959.679730][T22484]  ____sys_sendmsg+0x505/0x830
[ 1959.679749][T22484]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1959.679771][T22484]  ? import_iovec+0x74/0xa0
[ 1959.679788][T22484]  ___sys_sendmsg+0x21f/0x2a0
[ 1959.679805][T22484]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1959.679841][T22484]  ? __fget_files+0x2a/0x420
[ 1959.679852][T22484]  ? __fget_files+0x3a0/0x420
[ 1959.679870][T22484]  __x64_sys_sendmsg+0x19b/0x260
[ 1959.679887][T22484]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1959.679908][T22484]  ? __pfx_ksys_write+0x10/0x10
[ 1959.679917][T22484]  ? rcu_is_watching+0x15/0xb0
[ 1959.679932][T22484]  ? do_syscall_64+0xbe/0x3b0
[ 1959.679945][T22484]  do_syscall_64+0xfa/0x3b0
[ 1959.679956][T22484]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1959.679968][T22484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1959.679978][T22484]  ? clear_bhb_loop+0x60/0xb0
[ 1959.679991][T22484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1959.680001][T22484] RIP: 0033:0x7f9a3778ebe9
[ 1959.680012][T22484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1959.680021][T22484] RSP: 002b:00007f9a3853d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1959.680033][T22484] RAX: ffffffffffffffda RBX: 00007f9a379b5fa0 RCX: 00007f9a3778ebe9
[ 1959.680041][T22484] RDX: 00000000000048c0 RSI: 0000200000000440 RDI: 0000000000000003
[ 1959.680048][T22484] RBP: 00007f9a3853d090 R08: 0000000000000000 R09: 0000000000000000
[ 1959.680054][T22484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1959.680060][T22484] R13: 00007f9a379b6038 R14: 00007f9a379b5fa0 R15: 00007ffcb1146c98
[ 1959.680077][T22484]  </TASK>
[ 1960.192073][T22490] syz.2.4414: attempt to access beyond end of device
[ 1960.192073][T22490] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1960.208314][T22490] (syz.2.4414,22490,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1960.310710][T22490] (syz.2.4414,22490,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1960.409798][T22490] (syz.2.4414,22490,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1960.454067][T22490] (syz.2.4414,22490,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1960.496532][T22495] loop6: detected capacity change from 0 to 524288000
[ 1960.542365][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.568070][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.586364][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.609402][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.642048][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.678314][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.696863][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.778042][T22497] loop6: detected capacity change from 524288000 to 0
[ 1960.787335][T22495] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1960.798421][T22495] ldm_validate_partition_table(): Disk read failed.
[ 1960.805449][T22495] Dev loop6: unable to read RDB block 0
[ 1960.814418][T22495]  loop6: unable to read partition table
[ 1960.826231][T22495] loop6: partition table beyond EOD, truncated
[ 1960.834952][T22495] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1960.917774][T21840] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1961.078812][T21840] usb 2-1: Using ep0 maxpacket: 16
[ 1961.099920][T21840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1961.117707][T21840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1961.128864][T21840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1961.147880][T21840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1961.167778][T21840] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1961.192842][T21840] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1961.207749][T21840] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1961.215802][T21840] usb 2-1: Manufacturer: syz
[ 1961.241719][T21840] usb 2-1: config 0 descriptor??
[ 1961.920737][T21840] rc_core: IR keymap rc-hauppauge not found
[ 1961.927375][T21840] Registered IR keymap rc-empty
[ 1961.932751][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1961.977928][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.019183][T21840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1962.042179][T21840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input74
[ 1962.077158][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.137771][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.168158][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.206183][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.250911][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.409817][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.437771][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.481171][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1962.712497][T16668] audit_log_start: 2373 callbacks suppressed
[ 1962.712539][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1962.743637][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1962.750485][    C0] audit: audit_lost=711948 audit_rate_limit=0 audit_backlog_limit=64
[ 1962.758707][    C0] audit: backlog limit exceeded
[ 1962.765518][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1962.772225][    C0] audit: audit_lost=711949 audit_rate_limit=0 audit_backlog_limit=64
[ 1962.780476][    C0] audit: backlog limit exceeded
[ 1962.786907][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1962.793594][    C0] audit: audit_lost=711950 audit_rate_limit=0 audit_backlog_limit=64
[ 1962.801750][    C0] audit: backlog limit exceeded
[ 1963.058062][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1963.157885][T21840] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1963.250915][T22517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4421'.
[ 1963.263541][T22517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4421'.
[ 1964.081364][T21840] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 1964.827918][T21840] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1964.859060][T21840] usb 2-1: USB disconnect, device number 86
[ 1965.328052][T22532] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4424'.
[ 1966.463767][T22548] syz.5.4427: attempt to access beyond end of device
[ 1966.463767][T22548] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1966.551126][T22548] (syz.5.4427,22548,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1966.718222][T22548] (syz.5.4427,22548,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1966.800197][T22548] (syz.5.4427,22548,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1966.870958][T22548] (syz.5.4427,22548,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1967.058096][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4431'.
[ 1967.738955][   T30] kauditd_printk_skb: 2675 callbacks suppressed
[ 1967.739011][   T30] audit: type=1400 audit(1755082588.868:1342601): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22565 comm="syz.0.4433" name="newroot" dev="tmpfs" ino=2
[ 1967.764840][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1967.920756][   T30] audit: type=1400 audit(1755082588.868:1342602): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22565 comm="syz.0.4433" name="/" dev="devtmpfs" ino=1
[ 1967.940234][T22573] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1967.940254][T22573] audit: audit_lost=712183 audit_rate_limit=0 audit_backlog_limit=64
[ 1967.940270][T22573] audit: backlog limit exceeded
[ 1967.940287][T22573] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1967.940301][T22573] audit: audit_lost=712184 audit_rate_limit=0 audit_backlog_limit=64
[ 1967.940316][T22573] audit: backlog limit exceeded
[ 1967.940334][T22573] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1967.940347][T22573] audit: audit_lost=712185 audit_rate_limit=0 audit_backlog_limit=64
[ 1969.981347][T22588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4439'.
[ 1970.503353][T22596] 9pnet_fd: Insufficient options for proto=fd
[ 1970.953395][T22608] /dev/nullb0: Can't open blockdev
[ 1971.437108][T22614] netlink: 'syz.0.4443': attribute type 1 has an invalid length.
[ 1971.445074][T22614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1971.512735][T22614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4443'.
[ 1972.063133][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4447'.
[ 1972.809021][   T30] kauditd_printk_skb: 2374 callbacks suppressed
[ 1972.809039][   T30] audit: type=1400 audit(1755082593.968:1344094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22629 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1972.855764][   T30] audit: type=1400 audit(1755082593.968:1344095): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22629 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1972.876880][   T30] audit: type=1400 audit(1755082593.968:1344096): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22629 comm="syz-executor" name="300" dev="tmpfs" ino=1595
[ 1972.898787][T22633] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1972.906333][T22633] audit: audit_lost=712480 audit_rate_limit=0 audit_backlog_limit=64
[ 1972.915215][   T30] audit: type=1400 audit(1755082593.968:1344097): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=22629 comm="syz-executor" opid=22629 ocomm="syz-executor"
[ 1972.935453][T22633] audit: backlog limit exceeded
[ 1972.941774][T22633] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1972.948964][T22633] audit: audit_lost=712481 audit_rate_limit=0 audit_backlog_limit=64
[ 1972.957111][T22633] audit: backlog limit exceeded
[ 1973.218781][T22637] syz.5.4446: attempt to access beyond end of device
[ 1973.218781][T22637] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1973.719375][T22637] (syz.5.4446,22637,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1974.012321][T22637] (syz.5.4446,22637,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1974.023083][T22637] (syz.5.4446,22637,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1974.032999][T22637] (syz.5.4446,22637,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1974.735250][   T43] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1975.307776][   T43] usb 5-1: Using ep0 maxpacket: 16
[ 1976.405257][   T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1976.414334][   T43] usb 5-1: config 0 has no interface number 0
[ 1976.433820][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.448156][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.502813][   T43] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[ 1976.512267][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1976.528016][   T43] usb 5-1: Product: syz
[ 1976.538033][   T43] usb 5-1: Manufacturer: syz
[ 1976.552213][   T43] usb 5-1: SerialNumber: syz
[ 1976.571430][   T43] usb 5-1: config 0 descriptor??
[ 1976.590498][   T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1976.615405][T22655] ISOFS: Unable to identify CD-ROM format.
[ 1976.803785][T22649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1976.877516][T22649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1977.125920][   T43] usb 5-1: USB disconnect, device number 94
[ 1978.083875][   T30] kauditd_printk_skb: 2302 callbacks suppressed
[ 1978.083915][   T30] audit: type=1400 audit(1755082599.238:1345982): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=22671 comm="syz.1.4460" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 1978.278977][T17595] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1978.285760][T17595] audit: audit_lost=712622 audit_rate_limit=0 audit_backlog_limit=64
[ 1978.296533][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1978.307216][T17322] audit: audit_lost=712623 audit_rate_limit=0 audit_backlog_limit=64
[ 1978.370425][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1978.377419][T17054] audit: audit_lost=712624 audit_rate_limit=0 audit_backlog_limit=64
[ 1978.388665][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1978.395223][    C0] audit: audit_lost=712625 audit_rate_limit=0 audit_backlog_limit=64
[ 1978.397112][   T30] audit: type=1400 audit(1755082599.318:1345983): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17322 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1978.698138][T22685] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4464'.
[ 1980.477978][  T977] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1980.691137][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1980.709566][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1980.725297][  T977] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1980.744228][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1980.794546][  T977] usb 3-1: config 0 descriptor??
[ 1980.901753][ T9655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1980.947317][ T9655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1981.142185][ T9655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1981.167936][ T9655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1981.261883][ T9655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1981.277433][ T9655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1981.395160][ T9655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1981.415992][ T9655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1982.163156][ T9655] bridge_slave_1: left allmulticast mode
[ 1982.172718][ T9655] bridge_slave_1: left promiscuous mode
[ 1982.179957][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1982.196778][ T9655] bridge_slave_0: left allmulticast mode
[ 1982.203800][ T9655] bridge_slave_0: left promiscuous mode
[ 1982.210460][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1982.504758][  T977] usbhid 3-1:0.0: can't add hid device: -71
[ 1982.524177][  T977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1982.589206][  T977] usb 3-1: USB disconnect, device number 85
[ 1982.675788][T22714] input: syz0 as /devices/virtual/input/input75
[ 1983.089411][   T30] kauditd_printk_skb: 2236 callbacks suppressed
[ 1983.089448][   T30] audit: type=1400 audit(1755082604.238:1347448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22720 comm="syz-executor" name="/" dev="proc" ino=1
[ 1983.447167][T17054] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1983.459227][   T30] audit: type=1400 audit(1755082604.248:1347449): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=22711 comm="syz.2.4474" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 1983.482922][   T30] audit: type=1400 audit(1755082604.278:1347450): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22720 comm="syz-executor" name="1060" dev="proc" ino=88497
[ 1983.502720][   T30] audit: type=1400 audit(1755082604.288:1347451): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=22720 comm="syz-executor" name="oom_score_adj" dev="proc" ino=88498
[ 1983.522992][   T30] audit: type=1400 audit(1755082604.298:1347452): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22720 comm="syz-executor" path="/proc/1060/oom_score_adj" dev="proc" ino=88498
[ 1983.553436][T17054] audit: audit_lost=712882 audit_rate_limit=0 audit_backlog_limit=64
[ 1983.575807][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1983.582962][T17054] audit: backlog limit exceeded
[ 1983.590950][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1983.692050][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1983.705577][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1983.726070][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1983.741831][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1983.894315][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1985.021210][T22738] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4479'.
[ 1985.983215][ T5848] Bluetooth: hci3: command tx timeout
[ 1986.146360][T22762] FAULT_INJECTION: forcing a failure.
[ 1986.146360][T22762] name failslab, interval 1, probability 0, space 0, times 0
[ 1986.174741][ T9655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1986.211750][T22762] CPU: 1 UID: 0 PID: 22762 Comm: syz.0.4483 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1986.211781][T22762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1986.211794][T22762] Call Trace:
[ 1986.211801][T22762]  <TASK>
[ 1986.211811][T22762]  dump_stack_lvl+0x189/0x250
[ 1986.211846][T22762]  ? __pfx____ratelimit+0x10/0x10
[ 1986.211867][T22762]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1986.211888][T22762]  ? __pfx__printk+0x10/0x10
[ 1986.211917][T22762]  ? __pfx___might_resched+0x10/0x10
[ 1986.211942][T22762]  should_fail_ex+0x414/0x560
[ 1986.211966][T22762]  should_failslab+0xa8/0x100
[ 1986.211989][T22762]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1986.212008][T22762]  ? ptlock_alloc+0x20/0x70
[ 1986.212031][T22762]  ptlock_alloc+0x20/0x70
[ 1986.212051][T22762]  pte_alloc_one+0x7d/0x170
[ 1986.212071][T22762]  __pte_alloc+0x25/0x1a0
[ 1986.212097][T22762]  __handle_mm_fault+0x4b8a/0x5620
[ 1986.212142][T22762]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1986.212187][T22762]  ? find_vma+0xe7/0x160
[ 1986.212202][T22762]  ? __pfx_find_vma+0x10/0x10
[ 1986.212223][T22762]  handle_mm_fault+0x2d5/0x7f0
[ 1986.212263][T22762]  do_user_addr_fault+0x764/0x1390
[ 1986.212310][T22762]  exc_page_fault+0x76/0xf0
[ 1986.212335][T22762]  asm_exc_page_fault+0x26/0x30
[ 1986.212353][T22762] RIP: 0010:rep_movs_alternative+0xf/0x90
[ 1986.212380][T22762] Code: c4 10 e9 14 01 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e
[ 1986.212396][T22762] RSP: 0018:ffffc9000504fbd8 EFLAGS: 00050202
[ 1986.212412][T22762] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004
[ 1986.212424][T22762] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000504fc60
[ 1986.212437][T22762] RBP: ffffc9000504fcd0 R08: 0000000000000003 R09: 0000000000000004
[ 1986.212449][T22762] R10: dffffc0000000000 R11: fffff52000a09f8c R12: 0000000000004b46
[ 1986.212463][T22762] R13: ffffc9000504fc60 R14: ffffc9000504fc60 R15: 0000200000000040
[ 1986.212497][T22762]  _copy_from_user+0x7a/0xb0
[ 1986.212524][T22762]  vt_do_kdsk_ioctl+0xbb/0xbe0
[ 1986.212549][T22762]  ? rcu_is_watching+0x15/0xb0
[ 1986.212570][T22762]  ? cap_capable+0x11f/0x460
[ 1986.212588][T22762]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1986.212608][T22762]  ? __pfx_vt_do_kdsk_ioctl+0x10/0x10
[ 1986.212636][T22762]  ? bpf_lsm_capable+0x9/0x20
[ 1986.212659][T22762]  ? security_capable+0x7e/0x2e0
[ 1986.212690][T22762]  vt_ioctl+0x9ae/0x1f00
[ 1986.212718][T22762]  ? __pfx_vt_ioctl+0x10/0x10
[ 1986.212737][T22762]  ? __asan_memset+0x22/0x50
[ 1986.212762][T22762]  ? smack_file_ioctl+0x24a/0x340
[ 1986.212783][T22762]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1986.212817][T22762]  ? __fget_files+0x3a0/0x420
[ 1986.212848][T22762]  ? __fget_files+0x2a/0x420
[ 1986.212872][T22762]  tty_ioctl+0x926/0xde0
[ 1986.212899][T22762]  ? __pfx_tty_ioctl+0x10/0x10
[ 1986.212926][T22762]  __se_sys_ioctl+0xfc/0x170
[ 1986.212958][T22762]  do_syscall_64+0xfa/0x3b0
[ 1986.212979][T22762]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1986.212996][T22762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1986.213015][T22762]  ? clear_bhb_loop+0x60/0xb0
[ 1986.213038][T22762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1986.213055][T22762] RIP: 0033:0x7fd95e38ebe9
[ 1986.213072][T22762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1986.213088][T22762] RSP: 002b:00007fd95f182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1986.213108][T22762] RAX: ffffffffffffffda RBX: 00007fd95e5b5fa0 RCX: 00007fd95e38ebe9
[ 1986.213123][T22762] RDX: 0000200000000040 RSI: 0000000000004b46 RDI: 0000000000000003
[ 1986.213137][T22762] RBP: 00007fd95f182090 R08: 0000000000000000 R09: 0000000000000000
[ 1986.213149][T22762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1986.213162][T22762] R13: 00007fd95e5b6038 R14: 00007fd95e5b5fa0 R15: 00007ffc67187738
[ 1986.213195][T22762]  </TASK>
[ 1986.239990][ T9655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1986.244959][ T9655] bond0 (unregistering): Released all slaves
[ 1987.113849][ T9655] hsr_slave_0: left promiscuous mode
[ 1987.116817][ T9655] hsr_slave_1: left promiscuous mode
[ 1987.118436][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1987.118481][ T9655] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1987.123331][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1987.123360][ T9655] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1987.620799][ T9655] veth1_macvtap: left promiscuous mode
[ 1987.631938][ T9655] veth0_macvtap: left promiscuous mode
[ 1987.632882][ T9655] veth1_vlan: left promiscuous mode
[ 1987.633379][ T9655] veth0_vlan: left promiscuous mode
[ 1988.067127][ T5848] Bluetooth: hci3: command tx timeout
[ 1988.100538][   T30] kauditd_printk_skb: 2675 callbacks suppressed
[ 1988.100558][   T30] audit: type=1400 audit(1755082609.238:1349677): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1988.100603][   T30] audit: type=1400 audit(1755082609.238:1349678): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1988.100649][   T30] audit: type=1400 audit(1755082609.238:1349679): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1988.100691][   T30] audit: type=1400 audit(1755082609.238:1349680): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1988.100733][   T30] audit: type=1400 audit(1755082609.238:1349681): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=17054 comm="syz-executor" name="313" dev="tmpfs" ino=1663
[ 1988.100774][   T30] audit: type=1400 audit(1755082609.238:1349682): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17054 comm="syz-executor" path="/313" dev="tmpfs" ino=1663
[ 1988.100813][   T30] audit: type=1400 audit(1755082609.238:1349683): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=17054 comm="syz-executor" path="/313" dev="tmpfs" ino=1663
[ 1988.100861][   T30] audit: type=1400 audit(1755082609.238:1349684): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1988.100903][   T30] audit: type=1400 audit(1755082609.238:1349685): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1988.100943][   T30] audit: type=1400 audit(1755082609.238:1349686): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="313" dev="tmpfs" ino=1663
[ 1988.120239][T21517] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1988.276102][T21517] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1988.402493][T21517] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1988.413160][T21517] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1988.423984][T21517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1988.446792][T22777] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1988.484324][T21517] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1988.733268][T21517] usb 3-1: USB disconnect, device number 86
[ 1989.227458][ T9655] team0 (unregistering): Port device team_slave_1 removed
[ 1989.323919][ T9655] team0 (unregistering): Port device team_slave_0 removed
[ 1990.146331][ T5848] Bluetooth: hci3: command tx timeout
[ 1990.553339][T22800] mmap: syz.0.4497 (22800): VmData 37597184 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[ 1992.127796][  T977] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1992.229342][ T5848] Bluetooth: hci3: command tx timeout
[ 1992.235581][T22724] chnl_net:caif_netlink_parms(): no params data found
[ 1992.307922][  T977] usb 3-1: device descriptor read/64, error -71
[ 1992.408611][T22820] nvme_fabrics: unknown parameter or missing value '�' in ctrl creation request
[ 1992.688799][  T977] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1992.987723][  T977] usb 3-1: device descriptor read/64, error -71
[ 1993.030882][ T9655] IPVS: stop unused estimator thread 0...
[ 1993.098339][  T977] usb usb3-port1: attempt power cycle
[ 1993.109172][   T30] kauditd_printk_skb: 2309 callbacks suppressed
[ 1993.109190][   T30] audit: type=1400 audit(1755082614.268:1351603): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=22811 comm="syz.2.4501" path="/dev/raw-gadget" dev="devtmpfs" ino=820
[ 1993.155820][   T30] audit: type=1400 audit(1755082614.288:1351604): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22829 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1993.180649][   T30] audit: type=1400 audit(1755082614.288:1351605): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22829 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1993.202657][   T30] audit: type=1400 audit(1755082614.288:1351606): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22829 comm="syz-executor" name="150" dev="tmpfs" ino=798
[ 1993.223491][   T30] audit: type=1400 audit(1755082614.288:1351607): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=22829 comm="syz-executor" opid=22829 ocomm="syz-executor"
[ 1993.232446][T22724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1993.244636][   T30] audit: type=1400 audit(1755082614.288:1351608): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22829 comm="syz-executor" name="150" dev="tmpfs" ino=798
[ 1993.253300][T22724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1993.290785][T22724] bridge_slave_0: entered allmulticast mode
[ 1993.301877][T22724] bridge_slave_0: entered promiscuous mode
[ 1993.321500][T22724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1993.332142][T22724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1993.343538][T22724] bridge_slave_1: entered allmulticast mode
[ 1993.354324][T22724] bridge_slave_1: entered promiscuous mode
[ 1993.367710][   T30] audit: type=1400 audit(1755082614.288:1351609): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22829 comm="syz-executor" name="150" dev="tmpfs" ino=798
[ 1993.449345][   T30] audit: type=1400 audit(1755082614.288:1351610): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22829 comm="syz-executor" name="150" dev="tmpfs" ino=798
[ 1993.537820][  T977] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1993.582363][T22724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1993.589849][T16668] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1993.599180][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1993.623401][  T977] usb 3-1: device descriptor read/8, error -71
[ 1993.641456][T22724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1993.745628][T22724] team0: Port device team_slave_0 added
[ 1993.758942][T22724] team0: Port device team_slave_1 added
[ 1993.866717][T22724] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1993.874317][  T977] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1993.886601][T22724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1993.913984][T22724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1993.928756][  T977] usb 3-1: device descriptor read/8, error -71
[ 1993.937965][T22724] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1993.945354][T22724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1994.014251][T22724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1994.047960][  T977] usb usb3-port1: unable to enumerate USB device
[ 1994.624631][T22724] hsr_slave_0: entered promiscuous mode
[ 1994.641888][T22724] hsr_slave_1: entered promiscuous mode
[ 1994.884733][T22851] syz.2.4510: attempt to access beyond end of device
[ 1994.884733][T22851] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1995.548594][T22851] (syz.2.4510,22851,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1995.566838][T22851] (syz.2.4510,22851,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1995.576225][T22851] (syz.2.4510,22851,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1995.631117][T22851] (syz.2.4510,22851,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1995.956577][T22724] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1995.972104][T22724] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1996.059348][T22724] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1996.071610][T22724] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1996.376835][T22724] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1996.489676][T22874] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4515'.
[ 1996.522952][T22879] syz.2.4517: attempt to access beyond end of device
[ 1996.522952][T22879] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1996.543496][T22879] (syz.2.4517,22879,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1996.551584][T22874] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4515'.
[ 1996.577458][T22724] 8021q: adding VLAN 0 to HW filter on device team0
[ 1996.595112][T17002] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1996.599159][T22879] (syz.2.4517,22879,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1996.602330][T17002] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1996.626444][T22879] (syz.2.4517,22879,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1996.650386][T22879] (syz.2.4517,22879,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1996.714434][ T9652] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1996.721819][ T9652] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1997.830795][T22896] pim6reg: entered allmulticast mode
[ 1997.874112][T22901] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1997.936069][T22895] pim6reg: left allmulticast mode
[ 1998.166811][   T30] kauditd_printk_skb: 3431 callbacks suppressed
[ 1998.166830][   T30] audit: type=1400 audit(1755082619.248:1354780): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1998.405108][T17005] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1998.481553][   T30] audit: type=1400 audit(1755082619.258:1354781): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 1998.743624][T19814] audit: audit_backlog=66 > audit_backlog_limit=64
[ 1998.753314][   T30] audit: type=1400 audit(1755082619.258:1354782): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17054 comm="syz-executor" name="319" dev="tmpfs" ino=1697
[ 1998.783464][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1998.790125][    C0] audit: audit_lost=713253 audit_rate_limit=0 audit_backlog_limit=64
[ 1998.798431][    C0] audit: backlog limit exceeded
[ 1998.804605][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1998.811430][    C0] audit: audit_lost=713254 audit_rate_limit=0 audit_backlog_limit=64
[ 1998.819567][    C0] audit: backlog limit exceeded
[ 2000.207365][T22724] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2000.394453][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 2001.780083][T22724] veth0_vlan: entered promiscuous mode
[ 2001.812891][T22724] veth1_vlan: entered promiscuous mode
[ 2002.364925][T22724] veth0_macvtap: entered promiscuous mode
[ 2002.379586][T22724] veth1_macvtap: entered promiscuous mode
[ 2002.900023][T22942] syz.2.4531: attempt to access beyond end of device
[ 2002.900023][T22942] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2002.932095][T22942] (syz.2.4531,22942,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 2002.964388][T22942] (syz.2.4531,22942,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 2002.984436][T22942] (syz.2.4531,22942,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 2002.989209][T22724] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2003.047337][T22942] (syz.2.4531,22942,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 2003.073061][T22724] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2003.123992][T22724] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2003.137546][T22724] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2003.170476][T22724] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2003.184256][T22724] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2003.287295][   T30] kauditd_printk_skb: 2704 callbacks suppressed
[ 2003.287315][   T30] audit: type=1400 audit(1755082624.438:1356516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22724 comm="syz-executor" name="/" dev="sda1" ino=2
[ 2003.316184][   T30] audit: type=1400 audit(1755082624.438:1356517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22724 comm="syz-executor" name="/" dev="devtmpfs" ino=1
[ 2003.354403][   T30] audit: type=1400 audit(1755082624.438:1356518): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=22724 comm="syz-executor" name="rfkill" dev="devtmpfs" ino=2
[ 2003.375164][   T30] audit: type=1400 audit(1755082624.438:1356519): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22724 comm="syz-executor" path="/dev/rfkill" dev="devtmpfs" ino=2
[ 2003.406465][T17015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2003.433432][T17015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2003.503248][   T30] audit: type=1400 audit(1755082624.658:1356520): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 2003.525600][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2003.536104][T19814] audit: audit_lost=713579 audit_rate_limit=0 audit_backlog_limit=64
[ 2003.545116][T17007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2003.571308][T17007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2003.581833][T19814] audit: backlog limit exceeded
[ 2003.581884][   T30] audit: type=1400 audit(1755082624.658:1356521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 2003.586917][T19814] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2006.378504][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 2006.379089][ T5160] Bluetooth: hci4: command 0x1003 tx timeout
[ 2007.254894][T22966] sctp: [Deprecated]: syz.5.4535 (pid 22966) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2007.254894][T22966] Use struct sctp_sack_info instead
[ 2008.289160][   T30] kauditd_printk_skb: 1195 callbacks suppressed
[ 2008.289211][   T30] audit: type=1400 audit(1755082629.438:1357694): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 2008.418372][   T30] audit: type=1400 audit(1755082629.448:1357695): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19814 comm="syz-executor" name="161" dev="tmpfs" ino=860
[ 2008.421884][T22973] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2008.440656][   T30] audit: type=1400 audit(1755082629.448:1357696): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 2008.448099][T17322] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2008.491683][T22724] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2008.509036][T22974] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2008.515696][T22974] audit: audit_lost=713588 audit_rate_limit=0 audit_backlog_limit=64
[ 2008.521277][   T30] audit: type=1400 audit(1755082629.448:1357697): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[ 2008.524678][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2009.182006][T22982] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[ 2009.188681][T22982] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 2009.253107][T22982] vhci_hcd vhci_hcd.0: Device attached
[ 2009.284508][T22983] vhci_hcd: connection closed
[ 2009.329848][T22990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4542'.
[ 2009.345913][T22990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4542'.
[ 2009.362242][T17005] vhci_hcd: stop threads
[ 2009.402228][T17005] vhci_hcd: release socket
[ 2009.449368][T17005] vhci_hcd: disconnect device
[ 2010.885967][   T43] usb usb44-port1: attempt power cycle
[ 2011.311710][T22994] syz.6.4543: attempt to access beyond end of device
[ 2011.311710][T22994] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2011.369019][T22994] (syz.6.4543,22994,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 2011.376795][T22994] (syz.6.4543,22994,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 2011.398709][T22994] (syz.6.4543,22994,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 2011.434185][T22994] (syz.6.4543,22994,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 2011.649351][   T43] usb usb44-port1: unable to enumerate USB device
[ 2011.767202][T23003] FAULT_INJECTION: forcing a failure.
[ 2011.767202][T23003] name failslab, interval 1, probability 0, space 0, times 0
[ 2011.781788][T23003] CPU: 1 UID: 0 PID: 23003 Comm: syz.0.4545 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 2011.781816][T23003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 2011.781830][T23003] Call Trace:
[ 2011.781839][T23003]  <TASK>
[ 2011.781849][T23003]  dump_stack_lvl+0x189/0x250
[ 2011.781877][T23003]  ? __pfx____ratelimit+0x10/0x10
[ 2011.781899][T23003]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2011.781922][T23003]  ? __pfx__printk+0x10/0x10
[ 2011.781950][T23003]  ? __pfx___might_resched+0x10/0x10
[ 2011.781972][T23003]  ? fs_reclaim_acquire+0x7d/0x100
[ 2011.782008][T23003]  should_fail_ex+0x414/0x560
[ 2011.782034][T23003]  should_failslab+0xa8/0x100
[ 2011.782059][T23003]  __kmalloc_cache_noprof+0x70/0x3d0
[ 2011.782079][T23003]  ? hash_ipmark_create+0x387/0x1080
[ 2011.782108][T23003]  hash_ipmark_create+0x387/0x1080
[ 2011.782141][T23003]  ? __nla_parse+0x40/0x60
[ 2011.782165][T23003]  ? __pfx_hash_ipmark_create+0x10/0x10
[ 2011.782190][T23003]  ip_set_create+0xa94/0x1940
[ 2011.782213][T23003]  ? ip_set_create+0x4a2/0x1940
[ 2011.782248][T23003]  ? __pfx_ip_set_create+0x10/0x10
[ 2011.782311][T23003]  nfnetlink_rcv_msg+0xb4d/0x1130
[ 2011.782335][T23003]  ? nfnetlink_rcv_msg+0x20d/0x1130
[ 2011.782382][T23003]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 2011.782432][T23003]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2011.782476][T23003]  netlink_rcv_skb+0x205/0x470
[ 2011.782505][T23003]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 2011.782529][T23003]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2011.782570][T23003]  ? bpf_lsm_capable+0x9/0x20
[ 2011.782594][T23003]  ? security_capable+0x7e/0x2e0
[ 2011.782628][T23003]  nfnetlink_rcv+0x26a/0x2520
[ 2011.782661][T23003]  ? __dev_queue_xmit+0x1cd7/0x3a70
[ 2011.782822][T23003]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 2011.782860][T23003]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2011.782884][T23003]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2011.782918][T23003]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2011.782951][T23003]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2011.782980][T23003]  ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40
[ 2011.783030][T23003]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[ 2011.783071][T23003]  ? rcu_is_watching+0x15/0xb0
[ 2011.783096][T23003]  ? rcu_read_unlock_special+0x3fe/0x4c0
[ 2011.783122][T23003]  ? skb_clone+0x246/0x3a0
[ 2011.783148][T23003]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[ 2011.783192][T23003]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2011.783228][T23003]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2011.783265][T23003]  netlink_unicast+0x75c/0x8e0
[ 2011.783305][T23003]  netlink_sendmsg+0x805/0xb30
[ 2011.783340][T23003]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2011.783379][T23003]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2011.783408][T23003]  __sock_sendmsg+0x21c/0x270
[ 2011.783442][T23003]  ____sys_sendmsg+0x505/0x830
[ 2011.783483][T23003]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2011.783525][T23003]  ? import_iovec+0x74/0xa0
[ 2011.783557][T23003]  ___sys_sendmsg+0x21f/0x2a0
[ 2011.783605][T23003]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2011.783678][T23003]  ? __fget_files+0x2a/0x420
[ 2011.783707][T23003]  ? __fget_files+0x3a0/0x420
[ 2011.783743][T23003]  __x64_sys_sendmsg+0x19b/0x260
[ 2011.783777][T23003]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2011.783836][T23003]  do_syscall_64+0xfa/0x3b0
[ 2011.783862][T23003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2011.783881][T23003]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2011.783906][T23003]  ? clear_bhb_loop+0x60/0xb0
[ 2011.783931][T23003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2011.783951][T23003] RIP: 0033:0x7fd95e38ebe9
[ 2011.783971][T23003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2011.783989][T23003] RSP: 002b:00007fd95f140038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2011.784011][T23003] RAX: ffffffffffffffda RBX: 00007fd95e5b6180 RCX: 00007fd95e38ebe9
[ 2011.784027][T23003] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000006
[ 2011.784041][T23003] RBP: 00007fd95f140090 R08: 0000000000000000 R09: 0000000000000000
[ 2011.784055][T23003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2011.784068][T23003] R13: 00007fd95e5b6218 R14: 00007fd95e5b6180 R15: 00007ffc67187738
[ 2011.784107][T23003]  </TASK>
[ 2012.344129][T23006] ALSA: mixer_oss: invalid OSS volume ''
[ 2012.740975][T23013] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2012.751636][T23013] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2012.761521][T23013] 
[ 2012.763866][T23013] ============================================
[ 2012.770024][T23013] WARNING: possible recursive locking detected
[ 2012.776245][T23013] 6.16.0-syzkaller #0 Not tainted
[ 2012.781293][T23013] --------------------------------------------
[ 2012.787538][T23013] syz.2.4546/23013 is trying to acquire lock:
[ 2012.793696][T23013] ffff88807d558d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20
[ 2012.804894][T23013] 
[ 2012.804894][T23013] but task is already holding lock:
[ 2012.812345][T23013] ffff88807d558d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990
[ 2012.822277][T23013] and the lock comparison function returns 0:
[ 2012.828323][T23013] 
[ 2012.828323][T23013] other info that might help us debug this:
[ 2012.836449][T23013]  Possible unsafe locking scenario:
[ 2012.836449][T23013] 
[ 2012.843882][T23013]        CPU0
[ 2012.847183][T23013]        ----
[ 2012.850449][T23013]   lock(&dev_instance_lock_key#20);
[ 2012.855810][T23013]   lock(&dev_instance_lock_key#20);
[ 2012.861086][T23013] 
[ 2012.861086][T23013]  *** DEADLOCK ***
[ 2012.861086][T23013] 
[ 2012.869237][T23013]  May be due to missing lock nesting notation
[ 2012.869237][T23013] 
[ 2012.877678][T23013] 2 locks held by syz.2.4546/23013:
[ 2012.882889][T23013]  #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990
[ 2012.891846][T23013]  #1: ffff88807d558d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990
[ 2012.902181][T23013] 
[ 2012.902181][T23013] stack backtrace:
[ 2012.908064][T23013] CPU: 1 UID: 0 PID: 23013 Comm: syz.2.4546 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 2012.908079][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 2012.908086][T23013] Call Trace:
[ 2012.908095][T23013]  <TASK>
[ 2012.908100][T23013]  dump_stack_lvl+0x189/0x250
[ 2012.908117][T23013]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2012.908134][T23013]  ? __pfx__printk+0x10/0x10
[ 2012.908148][T23013]  ? print_lock_name+0xde/0x100
[ 2012.908161][T23013]  print_deadlock_bug+0x28b/0x2a0
[ 2012.908180][T23013]  validate_chain+0x1a3f/0x2140
[ 2012.908194][T23013]  ? is_bpf_text_address+0x292/0x2b0
[ 2012.908215][T23013]  ? is_bpf_text_address+0x26/0x2b0
[ 2012.908229][T23013]  __lock_acquire+0xab9/0xd20
[ 2012.908240][T23013]  ? __netdev_update_features+0xcb1/0x1a20
[ 2012.908253][T23013]  lock_acquire+0x120/0x360
[ 2012.908265][T23013]  ? __netdev_update_features+0xcb1/0x1a20
[ 2012.908279][T23013]  __mutex_lock+0x182/0xe80
[ 2012.908292][T23013]  ? __netdev_update_features+0xcb1/0x1a20
[ 2012.908302][T23013]  ? kasan_save_track+0x4f/0x80
[ 2012.908318][T23013]  ? kasan_save_free_info+0x46/0x50
[ 2012.908330][T23013]  ? __kasan_slab_free+0x62/0x70
[ 2012.908339][T23013]  ? kmem_cache_free+0x18f/0x400
[ 2012.908349][T23013]  ? netlink_broadcast_filtered+0x103e/0x1140
[ 2012.908363][T23013]  ? ethnl_multicast+0xb6/0x100
[ 2012.908377][T23013]  ? ethnl_default_notify+0x7c0/0x990
[ 2012.908391][T23013]  ? ethnl_netdev_event+0xe2/0x160
[ 2012.908406][T23013]  ? __netdev_update_features+0xcb1/0x1a20
[ 2012.908415][T23013]  ? __lock_acquire+0xab9/0xd20
[ 2012.908425][T23013]  ? __pfx___mutex_lock+0x10/0x10
[ 2012.908440][T23013]  __netdev_update_features+0xcb1/0x1a20
[ 2012.908453][T23013]  ? __pfx___netdev_update_features+0x10/0x10
[ 2012.908462][T23013]  ? __wake_up_common_lock+0x190/0x1f0
[ 2012.908482][T23013]  ? cfg80211_netdev_notifier_call+0x1ea/0x13c0
[ 2012.908497][T23013]  ? consume_skb+0xce/0xf0
[ 2012.908512][T23013]  ? netlink_broadcast_filtered+0x10c8/0x1140
[ 2012.908535][T23013]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[ 2012.908551][T23013]  ? __lock_acquire+0xab9/0xd20
[ 2012.908562][T23013]  ? do_raw_spin_lock+0x121/0x290
[ 2012.908577][T23013]  netdev_update_features+0x6d/0xe0
[ 2012.908591][T23013]  ? __pfx_netdev_update_features+0x10/0x10
[ 2012.908607][T23013]  macsec_notify+0x2f5/0x660
[ 2012.908623][T23013]  ? __pfx_macsec_notify+0x10/0x10
[ 2012.908639][T23013]  notifier_call_chain+0x1b3/0x3e0
[ 2012.908653][T23013]  netdev_features_change+0x85/0xc0
[ 2012.908666][T23013]  ? __pfx_netdev_features_change+0x10/0x10
[ 2012.908678][T23013]  ? security_capable+0x7e/0x2e0
[ 2012.908693][T23013]  dev_ethtool+0x1520/0x1990
[ 2012.908705][T23013]  ? __pfx_dev_ethtool+0x10/0x10
[ 2012.908718][T23013]  ? dev_load+0x21/0x1f0
[ 2012.908731][T23013]  dev_ioctl+0x392/0x1150
[ 2012.908745][T23013]  sock_do_ioctl+0x22c/0x300
[ 2012.908757][T23013]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 2012.908768][T23013]  ? __lock_acquire+0xab9/0xd20
[ 2012.908778][T23013]  ? __asan_memset+0x22/0x50
[ 2012.908791][T23013]  ? smack_file_ioctl+0x24a/0x340
[ 2012.908801][T23013]  sock_ioctl+0x576/0x790
[ 2012.908812][T23013]  ? __pfx_sock_ioctl+0x10/0x10
[ 2012.908822][T23013]  ? __fget_files+0x2a/0x420
[ 2012.908834][T23013]  ? __fget_files+0x3a0/0x420
[ 2012.908844][T23013]  ? __fget_files+0x2a/0x420
[ 2012.908855][T23013]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 2012.908867][T23013]  ? __pfx_sock_ioctl+0x10/0x10
[ 2012.908877][T23013]  __se_sys_ioctl+0xfc/0x170
[ 2012.908892][T23013]  do_syscall_64+0xfa/0x3b0
[ 2012.908904][T23013]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2012.908914][T23013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2012.908924][T23013]  ? clear_bhb_loop+0x60/0xb0
[ 2012.908935][T23013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2012.908946][T23013] RIP: 0033:0x7f9a3778ebe9
[ 2012.908957][T23013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2012.908967][T23013] RSP: 002b:00007f9a355d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2012.908979][T23013] RAX: ffffffffffffffda RBX: 00007f9a379b6270 RCX: 00007f9a3778ebe9
[ 2012.908987][T23013] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004
[ 2012.908995][T23013] RBP: 00007f9a37811e19 R08: 0000000000000000 R09: 0000000000000000
[ 2012.909001][T23013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2012.909008][T23013] R13: 00007f9a379b6308 R14: 00007f9a379b6270 R15: 00007ffcb1146c98
[ 2012.909019][T23013]  </TASK>
[ 2013.641022][   T30] kauditd_printk_skb: 1925 callbacks suppressed
[ 2013.641035][   T30] audit: type=1400 audit(1755082633.948:1358783): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=23005 comm="syz.2.4546" saddr=10.128.0.169 src=30008 daddr=10.128.0.72 dest=58018 netif=eth0
[ 2013.680942][T22724] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2013.696204][T23011] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2013.697784][T22724] audit: audit_lost=713870 audit_rate_limit=0 audit_backlog_limit=64
[ 2013.707140][T23010] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2013.710953][T22724] audit: backlog limit exceeded
[ 2013.719144][T23011] audit: audit_lost=713871 audit_rate_limit=0 audit_backlog_limit=64
[ 2013.722484][T22724] audit: audit_backlog=65 > audit_backlog_limit=64
[ 2013.735086][T23010] audit: audit_lost=713872 audit_rate_limit=0 audit_backlog_limit=64
[ 2013.737048][T22724] audit: audit_lost=713873 audit_rate_limit=0 audit_backlog_limit=64
[ 2014.039782][ T9652] Bluetooth: hci4: Frame reassembly failed (-84)
[ 2014.619801][T23016] caif:caif_disconnect_client(): nothing to disconnect
[ 2016.067745][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 2016.068198][ T5160] Bluetooth: hci4: command 0x1003 tx timeout