last executing test programs:

12.751686383s ago: executing program 1 (id=525):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xd8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "5ea6f4a919b4772a30b430e38a41376764aa484656a18478141fc81da67ad88c31a5c4ea89ef3e15349e25765ee06b4fbdaee92c7b19d5e372e265acf31b5dc39913e5273aaef6a925cda32301b122dee00ee52d239d1387b59d57b430ed534cdb655baf7f1898eb38cfc425176d39de39164d4d3f271b0360d65bb74a41831ede4606d85800acc8f087f352df19136737beec31684f1eb4c49c5d1274588a949ea23e9f7d887936f2504f58727fbfb19c0b4545838882b05a1bdeb9d9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x17c}, 0x1, 0x0, 0x0, 0xc091}, 0x4002)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000000)=0xe, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r4 = socket(0x10, 0x80000, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
r5 = fsopen(&(0x7f0000000ec0)='debugfs\x00', 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x20080)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, r7, r8, 0x0], &(0x7f0000000340)=[0x4, 0x44ebeb6b, 0x3, 0x2, 0x101, 0x40800000, 0x10, 0x976], 0x4})
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000200)='asy\x7f*:R}7OYdc[\x03#\x89=\x00\x00\x00\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r4)
sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
r10 = socket(0x10, 0x3, 0x0)
r11 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r11, 0x4112, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0x0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

12.275296005s ago: executing program 1 (id=527):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @value64=0x8}})
close_range(r1, r1, 0x2)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r5, r4, <r6=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, 0x0, 0x2b2, 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
syz_io_uring_setup(0x9a, &(0x7f0000000400)={0x0, 0x79b0, 0x2, 0x1, 0x40024e}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r8, 0x10e, 0x9, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
r9 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000000000000000000508000740000000070600124000020000200004801c0001800500030003000000060004000f0200000500039792077a222e880040000000081800048014000380080002400000000208000240000007ff"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000020)
io_uring_enter(r9, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.758357436s ago: executing program 1 (id=528):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000362000/0x4000)=nil, 0x4000}, 0x2}) (async)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x0, 0x1, 0x0, {0x9, 0x0, 0x7ff, 0xf800, 0xce}, {0x0, 0x1, 0x8, 0xa, 0x1ff}, 0x6, 0x80000001, 0x3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x4bf7, 0x1, 0xffff57f7, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfff3}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000180001002cbd7000fedbdf2502000000fc01c80900270000060015000200000014001680100008800c000180"], 0x38}}, 0x0)

11.132728376s ago: executing program 1 (id=531):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@generic={0x80, 0x8, "09e12e5f0b6bdcf7"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x8, "e80ee304ecb784ec"}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@generic={0xff, 0x3f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c2"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff8]}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}], 0x120}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10.194015732s ago: executing program 1 (id=533):
syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd605abc8000343c00fc0000000000000000000000000000ffff0200000000000000000000000000010003000000000000c910ff"], 0x0)
r0 = getpgid(0x0)
process_vm_writev(r0, &(0x7f0000002040)=[{&(0x7f0000000ec0)=""/233, 0xe9}], 0x1, &(0x7f0000003600)=[{&(0x7f0000002080)=""/19, 0x13}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00', 0x1)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000200))

5.538344403s ago: executing program 4 (id=553):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x11, r1, 0xa70e9000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
unshare(0x2040400)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d)

5.332793737s ago: executing program 4 (id=555):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, <r3=>0x0})
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={r3, 0x1000, &(0x7f0000002a80)=""/4096})
syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000004}, {@private=0xa010101}, {@broadcast}, {@local}, {@private, 0xc}, {@empty}, {@private}]}]}}}}}}}, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x6)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a04050200000027bd700002dcdf25"], 0x10}}, 0x24000840)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x8, 0x3)
syz_usb_connect$uac2(0x0, 0x92, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x1, 0x0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x2, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xcfa2, 0x6, 0x20}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, [0x1, 0x5, 0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0xfc, 0x9, 0x1, 0x6, 0x7ff, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0x0, 0x1, {0x8, 0x25, 0x1, 0x81, 0x30, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x50, 0x4b, 0x6, {0x8, 0x25, 0x1, 0x0, 0x3, 0x4, 0x200}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x4, 0x0, 0x3, 0x40, 0x4a}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

4.720966022s ago: executing program 2 (id=559):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250", @ANYRES32=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESHEX=0x0], 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046)
recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="20ff9fb24e004b"], 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0xfffffffb, 0x0, 0x1}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001e00110225bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000ec"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)

4.709249789s ago: executing program 3 (id=560):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002"], 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000340)=@ethtool_link_settings={0x17, 0x4, 0xfa, 0x4, 0x2, 0xb, 0x59, 0x6, 0xb, 0x15, [0x3, 0x7fff, 0x3, 0xfffffff8, 0x7, 0x20000, 0x2, 0x4]}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f0000000140)={0x3, 0xffffffffffffffff, 0x1000})
ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f000000a2c0)={&(0x7f000000a100)=[0x0, &(0x7f0000000280)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x8}, 0x0, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10}}, 0x0, 0x0, 0x0, &(0x7f0000000700)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xa0000001}, [{0xfffffffffffffffc, 0x4}, {0x1, 0x9}, {0x2, 0x5}, {0x8, 0x5}, {0x59ab, 0xbd1}, {0x3, 0x4}, {0x2, 0x2}, {0x5, 0x7}, {0xa, 0x2}, {0x1, 0x200}, {0x9, 0x7c1}, {0x7, 0x8001}, {0x3, 0x6}, {0xd1, 0xc21}, {0x5, 0x87e}, {0xfffffffffffffff8, 0x100}, {0x6, 0xb2a4}, {0x100000000, 0x8}, {0x8}, {0x0, 0xbe2}, {0xffffffff, 0xaa1}, {0x8, 0xfffffffffffffffd}, {0x7fc5, 0x6}, {0x0, 0x2}, {0x0, 0x800}, {0x1ff, 0x3}, {0x2, 0xfffffffffffffffc}, {0x28e, 0x6}, {0x5, 0x8}, {0x100, 0x100000000}, {0x3, 0x4}, {0x6}, {0x6, 0x1d88}, {0x7fff, 0x4}, {0x0, 0x200}, {0x6, 0x5}, {0x5, 0xfffffffffffffffa}, {0x756315ba, 0x1}, {0xfffffffffffffffd, 0xb}, {0x6, 0x8}, {0x10001, 0x1f}, {0xff, 0x8c8000000000000}, {0xb, 0x5}, {0x9, 0x9}, {0x4, 0x9}, {0x6, 0x4}, {0x30, 0x23f9}, {0x5, 0x8}, {0x5, 0xfffffffffffffff7}, {0x101, 0x5}, {0x6, 0x5}, {0x8, 0x1}, {0x1}, {0x3, 0xfffffffffffffff9}, {0x6, 0xbf5}, {0x3, 0x2}, {0x7fffffff, 0x6}, {0x0, 0x1}, {0x7f, 0xfffffffffffffffd}, {0xe, 0x6}, {0xffffffffffffff47, 0x4}, {0x3, 0x6}, {0x9, 0x2}, {0x9, 0x7fffffffffffffff}, {0x0, 0x6}, {0xbf85, 0x4}, {0x3, 0x3ff}, {0x0, 0x6}, {0x80000000, 0xa}, {0x9f, 0x101}, {0x7, 0x3}, {0xfffffffffffffffd, 0x80}, {0xa, 0xf8fe}, {0x2, 0xffffffffffffffff}, {0x0, 0x2}, {0x5, 0xffffffffffffffff}, {0x5}, {0x3}, {0x9, 0x8}, {0x100000000, 0x6}, {0x9, 0x9}, {0x6, 0x1}, {0x8000, 0xb2d}, {0x71a75bbb, 0x9b22}, {0xc3f2, 0xa}, {0x23d461a1, 0xc5e}, {0x9, 0x1d}, {0x896, 0x8}, {0xc812, 0x2}, {0x1, 0x1ff}, {0x1, 0xfffffffffffffffb}, {0x6, 0x7f}, {0xd465, 0xe}, {0x6, 0x5}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0x7f}, {0x6, 0xfffffffffffffd42}, {0xff, 0x6}, {0x6, 0x8}, {0x7, 0xb1b}, {0x1, 0x6}, {0xf}, {0x294e, 0x1}, {0x3, 0x3}, {0x2, 0xffffffff}, {0x7f2e, 0x62cf70b2}, {0x10001, 0x7}, {0x100, 0x101}, {0xc2d, 0x3}, {0x100000000, 0x200}, {0x5, 0x1000000000000000}, {0x7fffffff, 0x8}, {0xffffffffffffffc0, 0x5}, {0x7fffffff, 0x4}, {0xbe, 0x8001}, {0xffffffffffff8001, 0xffffffffffffff44}, {0x7fffffffffffffff, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x8}, {0x5, 0x9}, {0x9, 0x7fffffffffffffff}, {0x401, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x96, 0x8}, {0x7, 0x5}, {0x1ff, 0x9}, {0x7fffffff, 0x7}, {0x2, 0x4300000000000}, {0x0, 0x3}, {0x8000000000000001, 0x1}, {0x7ff, 0x4}, {0x10000, 0x6}, {0xaf, 0x4}, {0x1, 0x3}, {0x101, 0x9}, {0x0, 0x38}, {0x2, 0x200}, {0x1, 0x15f54}, {0x6, 0x5}, {0x8001, 0x1}, {0x8, 0x8000000000000000}, {0xd, 0x6}, {0x1, 0xa}, {0x291c, 0x5}, {0x607, 0x962}, {0x6, 0x5}, {0x8, 0x1}, {0x2, 0x5f4}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x40}, {0x8, 0x2}, {0xccb, 0xffff}, {0x2, 0xc}, {0x3b90fe1, 0x5}, {0x3, 0x8}, {0x7890, 0x7fffffffffffffff}, {0x7ff, 0xa}, {0x2ce, 0x10000}, {0x5, 0x10}, {0x6}, {0x0, 0x3}, {0x100, 0xa}, {0x203fe7f1}, {0x1ff, 0x1}, {0x6175}, {0x6, 0x2}, {0x8000, 0x527}, {0x1, 0x3}, {0xe, 0x6}, {0x2, 0x6}, {0x5, 0xffff}, {0x2, 0x4}, {0x9, 0x7}, {0x5, 0x1}, {0x3, 0x9}, {0x2, 0x8}, {0x8, 0x7}, {0x2, 0x3}, {0x81, 0xe}, {0x8000000000000001, 0x8}, {0x9, 0xa}, {0x0, 0x7fffffff}, {0x81, 0xffffffffffff6faf}, {0x72ee, 0x45}, {0x21, 0x9}, {0x40, 0x140000}, {0x5, 0x1}, {0x2, 0x1f5ee7e9400000}, {0x2, 0x3}, {0x8, 0x8}, {0x690, 0x8000000000000000}, {0x4}, {0x7fff, 0xe8}, {0x1}, {0x6d1d, 0x1}, {0x8, 0x1}, {0x3000000, 0x8}, {0x4, 0x2}, {0x5, 0xe}, {0x6, 0x6}, {0xab, 0x5}, {0x8000000000000000, 0x1ff}, {0x8, 0x8}, {0x7fffffffffffffff, 0x161577bf}, {0x7, 0x8}, {0x400, 0x3}, {0x6, 0x93a}, {0x0, 0x6}, {0x7, 0x5}, {0x4, 0xbf}, {0x9, 0x9}, {0x1, 0x8}, {0x4, 0x4}, {0x8000000000000000, 0xfffffffffffffff8}, {0x3, 0x5}, {0x1ff, 0x3}, {0x7fffffffffffffff, 0x2564}, {0x6, 0x4}, {0x0, 0x513}, {0x400, 0x5}, {0x3, 0x8}, {0xffffffff, 0x10000}, {0xfffffffffffffff7, 0x8}, {0x3ff, 0xc}, {0x17, 0x80}, {0x80000001, 0x6}, {0x5, 0x7f}, {0x1, 0x100000001}, {0xd, 0x100000001}, {0x2, 0x80}, {0xffffffff80000001, 0x5}, {0x7, 0x10}, {0xa1, 0x9}, {0x6d3, 0x2}, {0x6, 0x2}, {0x4e9a, 0x9}, {0x3, 0x100000001}, {0x6, 0x4}, {0x96, 0x7}, {0x651, 0x9}, {0x9, 0xf}, {0x8000000000000000, 0x5}, {0xad8, 0xfffffffffffffffd}, {0x9, 0x100000000}, {0xd7, 0xa8a}, {0x76da, 0x7}, {0xffffffffffffffff}, {0x9, 0x7}, {0xe, 0x1}]}, 0x0, 0x0, 0x0, &(0x7f0000006480)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x2, 0x5}, {0x0, 0x74f}, {0x8, 0x8}, {0xa549, 0xe7}, {0x2, 0x80000000}, {0x8, 0x9}, {0xfffffffffffffffd, 0x1}, {0xfffffffffffffffb, 0xb}, {0x3, 0x7}, {0x5, 0xa6}, {0x7, 0x1}, {0xd0fb, 0x3}, {0x200, 0xffff}, {0x5, 0xdfe}, {0x7, 0x5}, {0x85, 0xc81}, {0x1, 0x93e9}, {0xffffffffffffff27, 0x4}, {0x2, 0xe2}, {0x201b, 0xa464}, {0x0, 0x4}, {0xc32, 0xc}, {0x3, 0x26c5}, {0x6, 0x1}, {0xffffffffffffffff, 0x5}, {0x2, 0x6}, {0x6, 0xc}, {0xca75, 0x7f}, {0x88, 0x3}, {0x7, 0xe82}, {0x0, 0x2}, {0x5}, {0x90e8}, {0x75011c1}, {0x4, 0x2}, {0x9, 0xa31c}, {0x99, 0x3}, {0x13, 0x5148}, {0x0, 0x5200}, {0x100000001, 0x6}, {0x6, 0x1}, {0x7520, 0x1}, {0x5, 0x5}, {0xc6f, 0x1}, {0xa, 0xfffffffffffffc00}, {0x7, 0x8}, {0x7f, 0xffffffffffffffff}, {0x9944, 0x1}, {0x100000001}, {0x5, 0x1}, {0x4, 0x5e2}, {0x9b1, 0x7}, {0x7, 0x4}, {0xbcf, 0x20}, {0xfe46, 0x9}, {0x49, 0x4}, {0x95d, 0x10000}, {0x10, 0x100}, {0x8, 0x5}, {0xfffffffffffffff0, 0x3}, {0x9, 0x7f}, {0x2020000000000, 0x949}, {0x6, 0x6}, {0xb280, 0xc139}, {0x4, 0xa990}, {0x7fffffff, 0x8}, {0x2}, {0xfff, 0x1}, {0x5, 0x5}, {0x292bbeed, 0x10000}, {0x1, 0x5}, {0x9, 0x97}, {0xd, 0x5}, {0x8, 0x7f}, {0x6, 0x3}, {0x200, 0xf}, {0x80, 0x30be8f87}, {0x7}, {0x9, 0x9b}, {0x100000000, 0x10001}, {0x2}, {0x400, 0x8}, {0x0, 0x8}, {0x101, 0x6}, {0x5, 0x9}, {0x69}, {0x6, 0x1164}, {0x7, 0x4}, {0x200, 0x9}, {0x1, 0x5}, {0x1, 0x37f9}, {0x10, 0x3ff}, {0x3, 0xd}, {0x4, 0x9}, {0x1ff, 0x6}, {0xffffffffffffffff, 0x6}, {0xfffffffff, 0x7cd1}, {0x4, 0x5}, {0xf, 0x80000000}, {0x9, 0x7fff}, {0x2, 0x80}, {0xe, 0x8}, {0x4, 0x5}, {0x40, 0x3}, {0x0, 0x6}, {0x0, 0xed6}, {0xb, 0x361}, {0x6, 0x3}, {0x5a60, 0x2}, {0x9, 0x4}, {0x4000800000, 0x4}, {0x4, 0x6}, {0x8, 0x6}, {0x5, 0x9}, {0x1187, 0x6}, {0xf, 0x9}, {0x2, 0x5}, {0x3ff, 0x68}, {0xfff, 0x8000}, {0xd, 0x580000000000000}, {0xd25, 0xf}, {0x86, 0xd6}, {0x213f, 0x9}, {0xffffffff, 0x1000}, {0x221f, 0x10000}, {0x9}, {0x100, 0x8}, {0x8, 0x8}, {0x5, 0x9}, {0x800, 0x8}, {0x3, 0xd}, {0xffffffff00000000, 0xaa}, {0x3, 0x2}, {0x7, 0x196a}, {0x813, 0xfffffffffffffffc}, {0xbe4, 0xffffffffffffffff}, {0x5, 0x80000000}, {0x7, 0x1}, {0x800, 0x93fa}, {0x90, 0x2}, {0x4, 0x5}, {0x85, 0x1}, {0x6, 0x825e}, {0x9, 0x7fffffffffffffff}, {0x9, 0x421}, {0xac6a, 0x4}, {0x9, 0x4}, {0xe7, 0xffffffff}, {0x3, 0x7}, {0xf53, 0x7}, {0xffffffffffffffff, 0x5}, {0xdb, 0xf}, {0x1}, {0x5, 0x3}, {0x7, 0x5}, {0xd7b, 0x8}, {0xab5a, 0x8}, {0xca5, 0x2}, {0xcd26, 0x1}, {0x9, 0x4}, {0x9, 0x100000001}, {0x100000001, 0x7fffffff}, {0x8, 0x2}, {0xd5d, 0xe64b}, {0xab33, 0xfffffffffffffff8}, {0xdf, 0x2}, {0x3, 0x4}, {0xcac40000000000, 0x100}, {0x2, 0xb0b}, {0xfffffffffffffc01, 0x8}, {0x1, 0x3}, {0x10001, 0x9}, {0x4, 0x8}, {0x8, 0x3}, {0x1, 0x3}, {0xc5, 0x5}, {0x76a90000000, 0x8000}, {0x2d5f, 0x401}, {0x58, 0x5}, {0x5, 0xa57}, {0x1}, {0xe, 0x93}, {0x253da014, 0x2}, {0x7, 0xfff}, {0x9, 0x8}, {0x800000, 0x8000}, {0x100, 0x7}, {0x2, 0x9}, {0x8000000000000000, 0x5}, {0x3, 0x5}, {0x7ff, 0x100000000}, {0x9, 0x2}, {0x3, 0x7ff}, {0x5, 0x6}, {0x7fffffffffffffff, 0x100000001}, {0xfffffffffffffffe, 0x1}, {0xd}, {0xffffffff, 0x80000000}, {0x8, 0xfff}, {0x80000000, 0x1}, {0x401}, {0x4, 0x8}, {0x3ff, 0x3}, {0x7, 0x400}, {0xfffffffffffffffd, 0x10}, {0x2, 0x7}, {0x2}, {0xdc4, 0x2}, {0x101, 0xfffffffffffffff8}, {0x8, 0x4}, {0x9, 0x4}, {0x599, 0x200}, {0x0, 0x1}, {0xe, 0x1}, {0xffff, 0x8}, {0x100000000, 0x41f}, {0x8, 0x6}, {0x1, 0x500000000000000}, {0xb, 0xc404}, {0x100000001, 0x7}, {0x7, 0x5}, {0x38, 0xffff}, {0x13, 0x2}, {0x2, 0x200}, {0x7, 0x8}, {0x10, 0x7}, {0x80, 0x8000}, {0x4, 0xa}, {0x700}, {0x7fff, 0x7}, {0x7, 0xff}, {0x1, 0x5c169a9e}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x3, 0x401}, {}, {0x6}, {0x0, 0xf96}, {0x8, 0x1a}, {0x9, 0x10}, {0x8, 0x3}, {0xc, 0x1}, {0xfffffffffffffffa, 0x8}, {0x8}, {0x1000, 0xff}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x8001}, {0x1}, {0xfffffffffffffff8, 0xff}, {0x1, 0x8f6}, {0x8000000000000001, 0x3}, {0xdf, 0x9}, {0x0, 0x3}]}, 0x0, &(0x7f0000007500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007800)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007c80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0xbf, 0xffffffffffffffa4}, {0xa, 0xcece}, {0x8, 0x2}, {0x800, 0xffffffffe0000000}, {0xffffffffce1b73eb, 0x9}, {0x9}, {0xabb, 0x7}, {0xd19, 0xb68}, {0x589, 0x7f}, {0x401, 0xffffffff}, {0x1}, {0x80000000, 0x7f}, {0x0, 0xfffffffffffffff9}, {0x5, 0x80}, {0x1, 0x5}, {0x6, 0x2}, {0x4f7, 0x7f}, {0x5, 0x5}, {0x3, 0x4}, {0x9, 0xf}, {0x4, 0x2}, {0x3, 0x7224}, {0x7, 0xda5}, {0x1, 0x2}, {0x6, 0x1000}, {0xfffffffffffffc01, 0x6}, {0x101, 0x7}, {0x100, 0x4}, {0xe, 0x6}, {0x10000, 0x8000000000000001}, {0x1, 0x80000000}, {0x764, 0x200}, {0x3ff, 0x8}, {0x800, 0x4}, {0xffff, 0x100000000}, {0x1, 0x4}, {0x8001, 0x820f}, {0xcb, 0x4}, {0xffffffffffff8001, 0x4}, {0x200, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0xc7, 0xfff}, {0x2, 0x2}, {0x4, 0x7}, {0x80000001}, {0xfffffffffffffff7, 0x6}, {0x8, 0x2}, {0x2}, {0x1, 0x8000000000000000}, {0x6, 0x7fffffff}, {0x7fff, 0x9}, {0x0, 0x4ef}, {0x8ca, 0x7}, {0x8000000000000000, 0x1}, {0x200000000000000, 0x5}, {0xffffffff, 0x4}, {0x9, 0x5}, {0x4ba0, 0xc54b}, {0x6, 0x5}, {0x1, 0x400}, {0x8000000000000000, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0xfffffffffffffff8, 0x1}, {0x1, 0x2}, {0x2030000, 0xe3}, {0x8, 0x6}, {0x1, 0x177}, {0x3, 0xc}, {0x8, 0xf}, {0x2, 0x200}, {0x2, 0x80000000}, {0x9, 0x7fff}, {0x2, 0x1ff}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0xffffffff}, {0x1, 0x3}, {0x94, 0x2441}, {0x4010000000000000, 0x100000001}, {0x5, 0x5}, {0xd, 0x2}, {0x70d, 0x4}, {0x7fff, 0xfa20}, {0x100000001, 0x28c9}, {0x80, 0x3}, {0x6b6c, 0x19dd}, {0x7ff, 0xfff}, {0x8, 0x6}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x80000000}, {0x9, 0xb0}, {0x8, 0x40}, {0x1, 0xfdf}, {0x1, 0xe6a}, {0x2, 0x6435}, {0x7fff, 0x5}, {0xec, 0x100000000}, {0xffffffffffffe0c5, 0x9}, {0x4, 0x210}, {0x3, 0x6}, {0x9, 0x7ff}, {0x3, 0xc1}, {0x4}, {0x10000, 0x3}, {0x0, 0x2}, {0x100, 0x2}, {0x29b23aa3, 0xffffffff}, {0x7}, {0xb22, 0x97f6}, {0x3, 0x654}, {0x1, 0x2}, {0x74}, {0x8, 0x8000000000000001}, {0xe, 0xce0}, {0xfffffffffffffc01, 0x100000000}, {0x10000, 0x3}, {0x100000001, 0x1}, {0x400, 0x892}, {0x7, 0x7fffffff}, {0x2, 0x90ea}, {0x5, 0x49debf5a}, {0x8, 0x8}, {0x4, 0x7}, {0x6, 0x1ff}, {0x2, 0x1c2}, {0xdf9, 0x40}, {0x0, 0x8}, {0xfffffffffffffffe}, {0x4a1c, 0x7fffffffffffffff}, {0x6, 0xd4}, {0x4, 0x9}, {0x617, 0xffffffff80000000}, {0xe926, 0x7}, {0x39d, 0x60000000}, {0x9, 0x7}, {0x1ff, 0xffffffffffff8b2c}, {0x9, 0x9}, {0x6}, {0x881, 0x795}, {0x10000, 0x3}, {0x7, 0xfffffffffffffff7}, {}, {0xb5, 0x6}, {0x2, 0xe}, {0x87, 0x5}, {0x9, 0x2}, {}, {0x1, 0x1d95}, {0xffffffffffffff1e, 0x8000}, {0x1, 0x8}, {0x8001, 0x4}, {0x1, 0x6}, {0x401, 0x40}, {0xd7fa, 0xffffffffffffff01}, {0x7, 0x3}, {0xfffffffffffffffa, 0x242}, {0x0, 0x20fb}, {0x7, 0x7}, {0x1, 0xfffffffffffffffe}, {0xfffffffffffff000, 0x5}, {0xe}, {0xffffffffffffffff, 0x10000}, {0x6, 0x100000000}, {0x3ff}, {0x3, 0x5}, {0x5, 0xae3}, {0x6, 0x100000001}, {0x101, 0x6}, {0x5, 0x378c66fb}, {0x81, 0x1e0}, {0x9, 0x40}, {0x8, 0x6}, {0x5, 0x8}, {0xc4, 0x2}, {0xd6}, {0x81, 0x15f8}, {0x1ff, 0x8}, {0x7, 0x80000000}, {0x6, 0xfba}, {0x4, 0x9}, {0x7ff, 0x8000000000000001}, {0xf}, {0x8, 0x6}, {0x9, 0x611}, {0x5cf, 0x3ff}, {0x4, 0x5}, {0xb4, 0x6}, {0x4, 0x9dc170c}, {0x0, 0x5}, {0x5, 0x7}, {0xfffffffffffff800}, {0x4, 0x72}, {0x4, 0x7}, {0x8, 0x8db5}, {0x6, 0x3}, {0x5, 0xffffffffffffffff}, {0x9, 0x1}, {0x2, 0x4}, {0xffffffff, 0x80}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x429}, {0x6, 0x4}, {0xfff, 0xf63}, {0x7, 0x6d58996e}, {0xfffffffffffffffe, 0x8001}, {0xd052, 0x76}, {0x7fff, 0xe41}, {0x43e6, 0x8}, {0x101, 0xb}, {0x9, 0x6}, {0x10000, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x9}, {0x7fff, 0xfc}, {0x4, 0x9}, {0x8, 0x8000000000000001}, {0x4}, {0x4, 0x1}, {0x8, 0xd4fe451}, {0xff, 0x2}, {0x6}, {0x15a, 0x8}, {0x679873eb, 0xfffffffffffff8ed}, {0x1000000000, 0xffffffffffff54e9}, {0x34800, 0x1ff}, {0x8000, 0x6}, {0x4}, {0x7fff}, {0x4, 0x40}, {0xcae2, 0xfffffffffffffffa}, {0x400, 0xff}, {0x2, 0x3}, {0x5, 0x68}, {0x5, 0x8}, {0xfffffffffffffff7, 0x8}, {0x8, 0x3}, {0x9, 0x1581}, {0x40, 0x8557}, {0x8, 0x6}, {0x1, 0x7}, {0x9, 0x9}, {0x25, 0x9}, {0x1ff, 0xffffffffffffffff}, {0x32d, 0xffffffffffffffaa}, {0xad2a, 0xf95}, {0x2, 0xf}, {0xa, 0x2}, {0xb, 0xffffffffffffffff}, {0x8}, {0xffffffff, 0xffffffffffffffff}]}, 0x0, 0x0, &(0x7f0000008d80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97"], 0x0)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

3.853102874s ago: executing program 0 (id=562):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_open_dev$loop(&(0x7f0000000480), 0x9, 0x440)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000004c0))
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x39, 0x8, 0x0, 0x20, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8, 0x6, 0xf5}})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x9}, {0xe, 0x5}, {0x3bcb74ba84b48d0a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0xac, 0x0, 0x0, 0x70bd25, 0x7, {}, [@NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe6c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfbf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1cd7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x82f}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004080}, 0x80800)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc048aeca, &(0x7f00000001c0))
r11 = socket(0x1, 0x803, 0x0)
ioctl$KVM_TDX_GET_CPUID(r10, 0xc008aeba, &(0x7f0000000440)={0x5, 0x0, &(0x7f0000000040)={0x2, 0x0, [{0x80000001, 0xc7c, 0x1, 0x80000000, 0x3, 0xd30, 0x67}, {0x80000007, 0xd6, 0x3, 0x100020, 0x8000, 0x7, 0x7}]}})
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0xd0, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x330}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x98, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_MASTER={0x8, 0x3, r12}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000)
r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{0x400000f5, 0x0, 0x200000000005}]})

3.764931284s ago: executing program 4 (id=563):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@generic={0x80, 0x13, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xa0, 0x29, 0x36, {0x5e, 0x10, '\x00', [@generic={0xff, 0x3f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c2"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff8]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}], 0x150}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 4)

3.671211424s ago: executing program 0 (id=564):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @value64=0x8}})
close_range(r1, r1, 0x2)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r5, r4, <r6=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, 0x0, 0x2b2, 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
syz_io_uring_setup(0x9a, &(0x7f0000000400)={0x0, 0x79b0, 0x2, 0x1, 0x40024e}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r8, 0x10e, 0x9, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
r9 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000020)
io_uring_enter(r9, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.088378522s ago: executing program 0 (id=565):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000e1704b45adbde88a82900810009000800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000067000000020000e0000001000000008303ac070300443c00037f000089e1be0c4f2db393f9fffffffd0000000000000000ac141400000000000000000000000000ac1414aa00fb0000ac141400000000000000"], 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0x80000)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045730, &(0x7f0000002300))
setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000080)=0x8, 0x4)

2.924765437s ago: executing program 4 (id=566):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000780)={&(0x7f00000006c0), &(0x7f0000000700)=[0x6, 0x7f, 0x1000, 0x6, 0x3, 0x6, 0x400, 0x5cf], 0x0, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0xa0001)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x80880)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{<r4=>0x0}, {}, {}, {}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000480)={r4, &(0x7f0000000400)=""/93})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={r4, 0x18})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000300)={r4, 0x4, &(0x7f0000000040)=[0x6, 0x0, 0x6, 0x5], &(0x7f0000000080)=[0x3], 0x21, 0xa, 0x6, &(0x7f00000000c0)=[0x4, 0x3, 0x4222e074, 0x10, 0x2, 0x8, 0x6, 0x7, 0x7d3f, 0xa], &(0x7f0000000100)=[0x6, 0x8, 0x8ea, 0x9, 0x4, 0xe03, 0x5, 0x6, 0x3]})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x124, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

2.839456893s ago: executing program 0 (id=567):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x5d4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5a8, 0x2, [@TCA_BPF_ACT={0x5a4, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xee, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b254"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xad, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x234, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x7c, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.696275604s ago: executing program 3 (id=568):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000002600)=[{0x3d, 0x1, 0x1, 0x7ffff00c}, {0x6}]}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000009c0)=""/210, 0xd2, 0x80000006)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000427000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@any, 0xf}, 0x0, 0x1, 0x9})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={&(0x7f0000000780)=[0x447, 0x89b1, 0x9, 0x5, 0x7, 0x7, 0x5, 0x4, 0x990, 0x1000, 0x3, 0x8000, 0x7, 0x1, 0x0, 0x1, 0x46f4, 0x5, 0x5, 0x4, 0x5, 0x4b, 0x1, 0x1, 0xa6ff, 0xffffffff, 0x1ff, 0xcdf9, 0x9, 0x7, 0x2, 0x3, 0x1, 0x1, 0x3, 0x1000, 0xfffffffc, 0x7, 0xc96, 0xb92, 0x3, 0x9, 0x9, 0x5, 0x9, 0x2, 0x9, 0x9, 0x2, 0xcab, 0x7, 0xfffff111, 0x7, 0x9, 0x3ff, 0x2, 0x8001, 0x7, 0x8, 0x7, 0xb32, 0x3, 0x5, 0x0, 0x58b7, 0x2, 0x5, 0xe4, 0x5, 0x10000, 0x8, 0xfffffffc, 0x6, 0xbc4, 0x9, 0x2, 0x8000, 0x101, 0x8, 0xb714, 0x6, 0x8, 0x101, 0x92a, 0x4, 0x0, 0xfff, 0x32b, 0x3, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x401, 0x9, 0x6, 0x8, 0x4, 0x38, 0x0, 0x4, 0xac0, 0xd3, 0xff, 0x0, 0xfff, 0x0, 0x2, 0x4f, 0x3, 0x3, 0xfffffffe, 0xffffffff, 0x6, 0x4, 0x755, 0x3, 0x5, 0x65f5, 0xfffff801, 0x4, 0x0, 0x3, 0x8, 0xd86, 0xffffffff, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x3, 0x8, 0x8, 0x8, 0x3d, 0x8, 0xf, 0x6, 0x7, 0xa1, 0x5, 0x5ef5, 0x5, 0x7, 0x6, 0x0, 0xe, 0x63, 0x0, 0x1, 0xa7, 0x3, 0x40, 0x2, 0x3, 0x1, 0xffff0001, 0x40800000, 0x95, 0x8000, 0x0, 0x4c0, 0x5, 0xdfd, 0x4, 0x5, 0x9, 0x51eb, 0x9, 0x7, 0x1e38, 0x8, 0xffff047c, 0xd, 0x0, 0x2, 0x7b, 0x6, 0xffff, 0x5, 0xfffffffe, 0x2, 0x9, 0x3d, 0x4, 0x8, 0xd, 0x7fffffff, 0x4, 0xffff, 0x22, 0x6, 0x8001, 0x6, 0x5, 0x0, 0x7, 0x400, 0x6, 0x5, 0x401, 0x8, 0x9, 0x7, 0x7, 0x9, 0x1, 0x9350, 0x66, 0x9, 0x4c3, 0x1, 0x2, 0x6, 0x5, 0x5, 0x0, 0x5, 0xffffffff, 0x174, 0x8e, 0x9, 0x9, 0x9fe3, 0xbc99, 0x7, 0xd700, 0x401, 0x7, 0x4, 0x9, 0xa, 0x101, 0x800, 0xfffffffc, 0x4f49, 0x2, 0x1, 0x6, 0x1, 0xb, 0x4, 0x5, 0x1000, 0x7, 0x400, 0x6, 0x100, 0x3ff, 0x0, 0x6, 0xffffffe6, 0x3, 0x7, 0x383, 0x40, 0x9, 0x6, 0x101, 0x9, 0x7, 0xf, 0x340000, 0x8c6, 0x62, 0x0, 0x3, 0x5, 0x2, 0x9, 0x9, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x5, 0xff, 0x4, 0x5, 0x2b, 0xb32d, 0xfffffdab, 0x8, 0x9, 0x80000000, 0xf, 0x0, 0x8, 0x8, 0x1, 0xe3, 0xbcf6, 0x7, 0x8b9, 0x6b6, 0x7, 0x5, 0x3, 0x6, 0x1, 0x3ff, 0x401, 0xa40, 0xb, 0xfffffc01, 0x9, 0x2, 0x80, 0x9, 0x5, 0x4, 0x3ff, 0x7fffffff, 0x4, 0x6, 0x9, 0xc58, 0xc, 0x3, 0x10000, 0x4, 0x2, 0x7, 0x2, 0x6, 0xffff, 0x7, 0x5, 0xd, 0x5, 0x379, 0x6e9f, 0xe0fa, 0x1000, 0x7, 0x5, 0x8000, 0x4, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0xfffff100, 0x7, 0x80000000, 0x491, 0x3, 0xd, 0x4, 0x101, 0x1, 0x613d, 0x101, 0xd, 0x1, 0x3ff, 0x0, 0xc, 0xfffffffc, 0x4, 0x198, 0x61, 0x1, 0x5, 0x0, 0x9, 0xf911, 0xb, 0xffffffff, 0x6, 0x5, 0x8, 0x3, 0x4, 0xffffffb5, 0x91c9, 0x4, 0x1, 0x200, 0xff, 0x1, 0x7, 0x3ff, 0xcb2a, 0x8001, 0x3, 0x700000, 0x3, 0x8, 0x9, 0x7fffffff, 0x7d17, 0x400, 0x9, 0xfffffffa, 0x8, 0x9, 0x8008, 0x2, 0x2, 0x5, 0x4, 0x595, 0x0, 0x9, 0x6, 0xfffffffd, 0x6, 0x5, 0x8, 0xc1d, 0x3, 0x3000, 0x7, 0xffffffff, 0x1, 0x30000000, 0xfffffff3, 0x7, 0x800, 0x10000, 0xfffffffd, 0xfffff816, 0x401, 0x7, 0x3, 0x388, 0x2, 0x7, 0xca1b, 0xf, 0x0, 0x7, 0x4, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0x9, 0x9, 0x9, 0x747, 0xffffff61, 0x0, 0x8, 0x3, 0x2, 0x8, 0x1, 0xffffff11, 0x2, 0x1, 0x6, 0x9, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0x8, 0x4, 0x2a8c, 0x3, 0x525d, 0x8, 0x4, 0x9, 0x2, 0xa, 0x2, 0x2, 0x15c, 0x1, 0xe34b, 0x7, 0x3, 0x150, 0x6, 0x101, 0x4, 0x0, 0x2c, 0xb, 0x4, 0x8, 0xfff, 0x56a, 0x4, 0xffffffff, 0xa4, 0x80000001, 0x8, 0x4, 0x676d, 0x81, 0x7, 0x4, 0x1, 0x3, 0x1, 0xed90, 0x0, 0x7, 0x100, 0x1, 0x4, 0xb, 0xf2, 0x0, 0x7, 0x80, 0xfffffff1, 0xfffff65b, 0x40, 0x400, 0x81, 0x5, 0x8000000, 0x3ff, 0x3ff, 0xe1, 0x7009, 0xfff, 0x0, 0xf0cf, 0xf8ab, 0x8, 0xb, 0x9, 0xfffffb54, 0x8, 0x8, 0x80000001, 0xfff, 0x7, 0x2, 0x7fffffff, 0xffffffff, 0x8, 0xfffffada, 0x40, 0x7d0, 0x5, 0x20000007, 0x7ff, 0x7ff, 0x5b5, 0x8, 0x1, 0x10000, 0x9, 0x3, 0x5, 0xfffffff8, 0x5, 0x3, 0x2, 0x3, 0x7, 0x5f3, 0x400, 0x1c00, 0x1, 0xfffffffb, 0x80200000, 0x9, 0x80, 0x3, 0x910, 0x8e8, 0x8, 0xf7b, 0x5, 0x79, 0x1, 0x7ff, 0x9, 0x8, 0x9, 0x401, 0x2, 0x7f, 0x2, 0x80000001, 0x1, 0x6, 0xd47, 0xca, 0x2, 0x100, 0x9, 0x0, 0x9, 0x5c1fc33e, 0x4, 0x0, 0xe, 0x8, 0x80000001, 0x2a1, 0x0, 0x106, 0xfffffff9, 0x4, 0x6, 0x3, 0x0, 0x20003200, 0x5, 0x892, 0x80000001, 0x4, 0x4, 0x40, 0xffffffff, 0x9, 0x887, 0xffffffff, 0x3, 0x1, 0x8, 0x18b348da, 0x1, 0x8, 0x9, 0x1, 0x2, 0x9, 0x5f05d22c, 0x9, 0x0, 0x2, 0x6, 0x8fe, 0x7ff, 0x7, 0x843f, 0x2, 0x7, 0xd575, 0x6, 0x8, 0x4, 0x6, 0x81, 0x7, 0x50000000, 0x6, 0x15, 0x8, 0xffd, 0x6, 0x10000, 0x3, 0x6, 0x749f4463, 0x4, 0x7c20c2c4, 0x2, 0x5, 0x4, 0xfffffffc, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0x8, 0x1, 0x8, 0x9, 0xfff, 0x1000, 0x8, 0x401, 0x1ecd, 0x4, 0x2, 0x3, 0x7b, 0x1, 0x4, 0x200, 0xff, 0x0, 0x3, 0x5, 0xa314, 0x3, 0x10001, 0x9, 0x3, 0x6, 0x7, 0x4, 0xbfb, 0x10000, 0x6, 0x6, 0x1ff, 0x3, 0x7, 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x7, 0xff, 0xbe, 0x4, 0xfffffffe, 0xfffffffc, 0x9, 0x34, 0x3ff, 0x8, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x4, 0x3, 0x9, 0x7, 0x46, 0x9, 0xffff, 0x81, 0x7, 0x2, 0x0, 0x73d, 0xd485, 0xff, 0x9, 0x3, 0x9, 0x6, 0x2, 0xdcc, 0x5e9a, 0xffff, 0x2, 0x9, 0xfffffffd, 0x7, 0xf, 0xfff, 0x4, 0x8, 0x4, 0x3cb, 0x4, 0x418, 0x10000, 0x7, 0x3, 0xa, 0x3b, 0x6, 0x47a, 0x1, 0x7fffffff, 0x7, 0x40, 0x6, 0x81, 0x7, 0x1ff, 0x8, 0x10, 0x9, 0x1, 0x9c, 0xf, 0x6, 0x101, 0x3, 0x9, 0x6, 0x8, 0x7fff, 0x4, 0x8, 0x1, 0xffff7fff, 0x1, 0x3, 0x38, 0xb2, 0x8, 0x2, 0x7, 0x2, 0x5, 0x166, 0x3, 0xe14a, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffffffff, 0x6, 0x8, 0x2, 0xb6, 0x53c, 0x5, 0x5, 0xfffffff9, 0x3, 0x5, 0x8, 0x5, 0x1, 0x9, 0xffffff7f, 0x80000001, 0x5, 0x9, 0x2, 0x0, 0x9, 0x5, 0x4, 0xe4, 0x1, 0x0, 0x5, 0x0, 0xe7d7, 0x7f, 0x101, 0x10000, 0x5, 0xffffffff, 0x9, 0x8, 0xe44e, 0x2, 0x80000000, 0x4, 0x2, 0x1c0460d3, 0xfffffffe, 0x800, 0x8001, 0x1, 0x2, 0x9, 0xfffffff9, 0xa190, 0x81, 0x2, 0x8, 0x0, 0x86, 0x7, 0xb90, 0xcf, 0xf8e4, 0x0, 0xd, 0x7, 0x100, 0x8000, 0x478, 0x6, 0x1, 0xb57, 0x80000005, 0x7, 0x9655, 0x2, 0x0, 0xfffff5d7, 0x3, 0x9, 0x7, 0x6, 0x9, 0xe, 0x4, 0x7, 0x8000, 0x3, 0x2, 0x6, 0x6, 0xae86, 0x4, 0x7, 0x401, 0x8, 0xffffffff, 0x60b, 0x3, 0x2, 0xb, 0x1, 0x2aa, 0xffffbeff, 0x18, 0x2, 0x100, 0x7, 0xfffffffa, 0x6, 0x1, 0x4, 0x0, 0x3, 0x9, 0x401, 0x8, 0xffffffe0, 0x7fffffff, 0x0, 0x100, 0x8, 0x101, 0x10001, 0xfffffffc, 0x8, 0x7, 0x10001, 0x5a1, 0x4, 0x1, 0x4, 0x8, 0x7f, 0x3, 0x7, 0x7, 0xc8, 0xfff, 0x149, 0x0, 0x0, 0x717e17b5, 0x2, 0x5da47ea8, 0x4, 0x400, 0x6, 0x7, 0x25, 0xd, 0x788f, 0x6, 0x7f, 0x71, 0x1, 0x0, 0x6ccb, 0x6, 0x5, 0x9, 0xfffffa99, 0x1000, 0xffffffff, 0xb4, 0x9900000, 0xd, 0xfffffffb, 0x7, 0xc, 0xf55, 0x6d14e279, 0x6, 0x200005, 0x1, 0x3, 0x152358f9, 0x6, 0xf43, 0x81, 0x9da1, 0x0, 0x6, 0x7f, 0x8, 0x6, 0xa1f, 0x9, 0xfffffff7, 0x4, 0xf77f, 0x5, 0x3, 0xc2a, 0xffffffff, 0x6, 0x80c, 0x2, 0x13c, 0xae, 0x2, 0x3, 0xfffffff8, 0xa, 0x3, 0xffffffff, 0x7, 0x8, 0x6, 0x1b04e], 0x6, 0x400, 0x8})
ftruncate(r1, 0x4a8e)

2.016942233s ago: executing program 4 (id=569):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x4d, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.79685178s ago: executing program 0 (id=570):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36be, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x44, 0xa0003, 0x2}, 0x10)
bind$tipc(r0, 0x0, 0x0)
close(r0)

1.796597762s ago: executing program 4 (id=571):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="12017102000000086a080100400001020301090226000101ff40010904000001010300fd072401040007000905090200020903090425010023"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="3203b6f5a979c8abb050a084a83a585a710e01a2ca5e3ce405c894caf5e0045d46412d2e7766d8de92799eb2b0f718eda79d7380872228d3267392bde1b5ac582eb8f4d155993d7bd0ac2f943a43b06acc87a03400f007215fcc8904000000000000002fc79dfac317d50c6fadb4329e5a48ca25d943c71872fb9aace215036ef45aa12e9251e030163fb662a619b5c0890e830e8c92cc35f5571a083c06741d08"]}, {0x0, 0x0}]})
openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1, 0x8001, 0x0, 0x9, 0x0, 0x74, 0x1, 0xfffffffd}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007006e61740014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800)
r5 = dup2(r3, 0xffffffffffffffff)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2})
r7 = syz_clone(0x0, 0x0, 0x14, 0x0, 0x0, 0x0)
ptrace(0x4206, r7)
ptrace(0x8, r7)
ptrace(0x4207, r7)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000000)={0x1, 0xfffffffd, 0x101b, 0x13, 0x187, &(0x7f0000000880)})
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)

1.525234483s ago: executing program 2 (id=572):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x6ac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x62c, 0x2, [@TCA_BPF_ACT={0x628, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xee, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b254"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xad, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x234, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x100, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x27, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x34, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.348163224s ago: executing program 3 (id=573):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x18c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x14c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x13c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x108, 0xb, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x965, 0x3, 0x6, 0x8, 0x8}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x5d, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.331943079s ago: executing program 0 (id=574):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, <r3=>0x0})
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={r3, 0x1000, &(0x7f0000002a80)=""/4096})
syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000004}, {@private=0xa010101}, {@broadcast}, {@local}, {@private, 0xc}, {@empty}, {@private}]}]}}}}}}}, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x6)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a04050200000027bd700002dcdf25"], 0x10}}, 0x24000840)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x8, 0x3)
syz_usb_connect$uac2(0x0, 0x92, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x1, 0x0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x2, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xcfa2, 0x6, 0x20}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, [0x1, 0x5, 0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0xfc, 0x9, 0x1, 0x6, 0x7ff, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0x0, 0x1, {0x8, 0x25, 0x1, 0x81, 0x30, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x50, 0x4b, 0x6, {0x8, 0x25, 0x1, 0x0, 0x3, 0x4, 0x200}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x4, 0x0, 0x3, 0x40, 0x4a}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1.121130896s ago: executing program 2 (id=575):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @value64=0x8}})
close_range(r1, r1, 0x2)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r5, r4, <r6=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, 0x0, 0x2b2, 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
syz_io_uring_setup(0x9a, &(0x7f0000000400)={0x0, 0x79b0, 0x2, 0x1, 0x40024e}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r8, 0x10e, 0x9, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
r9 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000020)
io_uring_enter(r9, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

989.611065ms ago: executing program 3 (id=576):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x53, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0})

852.351194ms ago: executing program 2 (id=577):
r0 = socket$inet(0x2, 0x3, 0xfffffffe)
r1 = socket$kcm(0xa, 0x3, 0x3a)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{0x80000000, <r5=>0x0}, {<r6=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000000)={r6, &(0x7f0000000040)=[{<r7=>0x80000000}], &(0x7f0000000100)=[{{}, {<r8=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000380)={r8, 0x0, &(0x7f0000000080)=[{{<r9=>0x80000000, <r10=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r7, r10, 0x6, [0x1, 0x8]}, {r9, r5, 0x0, [0xffffffff, 0x4]}, 0x1, [0x7e, 0x6]})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000002380)={'hsr0\x00', <r14=>0x0})
r15 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r15, &(0x7f0000000380)="8700000000000000000000008100", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0xf5, r14, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r16=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x13c, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x68, 0x5, "337eba22d82076e8dbc0a1a57bded26ba73986bab18a7ff96ed0b5e0e4527f15143fb32d7e339c81c41b448b56557f2d351692a5b2ea348a2db5f8286f6bdf65d79551932cf6b720674a0ee9f1a2c71d69274b6cd3260509a1688c294c11ea384f12899d"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10000000}, @ETHTOOL_A_LINKMODES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x101}]}, 0x13c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
getsockopt(r0, 0x4, 0x80000000, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x3, 0x0, 0xfff}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)

843.45758ms ago: executing program 1 (id=578):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307219d)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="06010009070000000000000000000000020010000000", @ANYRES16=r1], 0x38}}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone3(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x20004800)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258, 0x0, 0x0, [{0x1000001}, {}, {}, {0x0, 0xff}, {}, {0x0, 0x5}, {}, {0x0, 0xcef}]}})
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
socket(0x2, 0x80805, 0x486d)
pwrite64(r3, &(0x7f0000000080)="fd0baea11edf", 0x6, 0xcfa5)
mount_setattr(r5, 0x0, 0x8000, &(0x7f0000001dc0)={0x10000a, 0x100088, 0x80000}, 0x20)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x202, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x16, &(0x7f0000000180)="aff7", 0x0, 0x3}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48)
fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0)
r9 = dup2(r7, r6)
read$FUSE(r9, &(0x7f0000001a40)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb70300000000b0ffb704000000000000b50005008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400fff8b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

646.954738ms ago: executing program 3 (id=579):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x75c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x650, 0x2, [@TCA_BPF_ACT={0x64c, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xee, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b254"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xad, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x234, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x124, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x8c, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x5e, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x75c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

185.128085ms ago: executing program 2 (id=580):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, 0x0)

105.137378ms ago: executing program 3 (id=581):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x758, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x650, 0x2, [@TCA_BPF_ACT={0x64c, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xee, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b254"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xad, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x234, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x124, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xbc, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x88, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x5b, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x758}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

0s ago: executing program 2 (id=582):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ents64+0xf1/0x280
[  103.683907][ T5913]  ? __pfx___se_sys_getdents64+0x10/0x10
[  103.683921][ T5913]  ? ksys_write+0x242/0x270
[  103.683940][ T5913]  ? __pfx_filldir64+0x10/0x10
[  103.683955][ T5913]  ? __pfx_ksys_write+0x10/0x10
[  103.683982][ T5913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.683998][ T5913]  do_syscall_64+0x15f/0xf80
[  103.684019][ T5913]  ? trace_irq_disable+0x3b/0x140
[  103.684041][ T5913]  ? clear_bhb_loop+0x40/0x90
[  103.684059][ T5913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.684074][ T5913] RIP: 0033:0x7f07edd9ce59
[  103.684109][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.684124][ T5913] RSP: 002b:00007f07eed2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  103.684144][ T5913] RAX: ffffffffffffffda RBX: 00007f07ee015fa0 RCX: 00007f07edd9ce59
[  103.684157][ T5913] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004
[  103.684169][ T5913] RBP: 00007f07eed2d090 R08: 0000000000000000 R09: 0000000000000000
[  103.684181][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  103.684192][ T5913] R13: 00007f07ee016038 R14: 00007f07ee015fa0 R15: 00007f07ee13fa48
[  103.684225][ T5913]  </TASK>
[  103.939638][   T24] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  103.965671][   T24] usb 3-1: Invalid ep0 maxpacket: 32
[  103.972051][   T24] usb usb3-port1: unable to enumerate USB device
[  104.014293][  T899] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  104.104702][ T5723] usb 4-1: Using ep0 maxpacket: 16
[  104.111545][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  104.144353][ T5723] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  104.153465][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.162277][ T5723] usb 4-1: Product: syz
[  104.166578][ T5723] usb 4-1: Manufacturer: syz
[  104.171210][ T5723] usb 4-1: SerialNumber: syz
[  104.180841][ T5723] usb 4-1: config 0 descriptor??
[  104.189874][ T5723] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  104.201610][ T5723] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  104.220743][  T899] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  104.231273][  T899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.239504][  T899] usb 2-1: Product: syz
[  104.243889][  T899] usb 2-1: Manufacturer: syz
[  104.248702][  T899] usb 2-1: SerialNumber: syz
[  104.465573][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.483484][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.591844][  T899] rtl8150 2-1:1.0: couldn't reset the device
[  104.604282][  T899] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  104.633840][  T899] usb 2-1: USB disconnect, device number 2
[  104.647762][  T809] usb 5-1: USB disconnect, device number 3
[  104.802783][ T5723] em28xx 4-1:0.0: chip ID is em2765
[  105.409005][ T5928] FAULT_INJECTION: forcing a failure.
[  105.409005][ T5928] name failslab, interval 1, probability 0, space 0, times 0
[  105.468264][ T5723] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  105.482411][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.4.63 Not tainted syzkaller #0 PREEMPT(full) 
[  105.482431][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  105.482440][ T5928] Call Trace:
[  105.482445][ T5928]  <TASK>
[  105.482451][ T5928]  dump_stack_lvl+0xe8/0x150
[  105.482474][ T5928]  should_fail_ex+0x412/0x560
[  105.482497][ T5928]  should_failslab+0xa8/0x100
[  105.482520][ T5928]  __kmalloc_noprof+0xe8/0x760
[  105.482540][ T5928]  ? tomoyo_encode+0x28b/0x550
[  105.482564][ T5928]  tomoyo_encode+0x28b/0x550
[  105.482587][ T5928]  tomoyo_realpath_from_path+0x58d/0x5d0
[  105.482609][ T5928]  ? tomoyo_domain+0xd7/0x130
[  105.482632][ T5928]  ? tomoyo_path_number_perm+0x219/0x630
[  105.482649][ T5928]  tomoyo_path_number_perm+0x246/0x630
[  105.482668][ T5928]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  105.482683][ T5928]  ? __lock_acquire+0x6b5/0x2cf0
[  105.482709][ T5928]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  105.482746][ T5928]  ? __fget_files+0x2a/0x420
[  105.482765][ T5928]  ? __fget_files+0x2a/0x420
[  105.482788][ T5928]  ? __fget_files+0x3a0/0x420
[  105.482804][ T5928]  ? __fget_files+0x2a/0x420
[  105.482824][ T5928]  security_file_ioctl+0xc3/0x2a0
[  105.482841][ T5928]  __se_sys_ioctl+0x47/0x170
[  105.482862][ T5928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.482878][ T5928]  do_syscall_64+0x15f/0xf80
[  105.482899][ T5928]  ? clear_bhb_loop+0x40/0x90
[  105.482917][ T5928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.482931][ T5928] RIP: 0033:0x7f28b659ce59
[  105.482944][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.482956][ T5928] RSP: 002b:00007f28b73bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.482971][ T5928] RAX: ffffffffffffffda RBX: 00007f28b6816090 RCX: 00007f28b659ce59
[  105.482981][ T5928] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  105.482990][ T5928] RBP: 00007f28b73bf090 R08: 0000000000000000 R09: 0000000000000000
[  105.482998][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.483006][ T5928] R13: 00007f28b6816128 R14: 00007f28b6816090 R15: 00007f28b693fa48
[  105.483029][ T5928]  </TASK>
[  105.483044][ T5928] ERROR: Out of memory at tomoyo_realpath_from_path.
[  105.710656][ T5723] em28xx 4-1:0.0: board has no eeprom
[  106.584352][  T899] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  106.764230][  T899] usb 5-1: Using ep0 maxpacket: 16
[  106.789614][  T899] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  106.819282][  T899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.847121][ T5934] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5)
[  106.869432][  T899] usb 5-1: config 0 descriptor??
[  106.895645][  T899] gspca_main: sonixj-2.14.0 probing 0471:0327
[  106.904396][ T5723] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  106.929537][ T5723] em28xx 4-1:0.0: dvb set to bulk mode.
[  106.942871][ T5731] em28xx 4-1:0.0: Binding DVB extension
[  107.139912][ T5731] em28xx 4-1:0.0: Registering input extension
[  107.713641][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.734890][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.812405][ T5941] tipc: MTU too low for tipc bearer
[  107.902809][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.917836][   T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  107.949960][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.016219][  T899] gspca_sonixj: reg_r err -110
[  108.029490][  T899] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  108.040371][ T5963] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.076176][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'.
[  108.094652][   T29] usb 1-1: Using ep0 maxpacket: 8
[  108.110038][   T29] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  108.132267][   T29] usb 1-1: config 0 has no interface number 0
[  108.153888][   T29] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  108.187893][   T29] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  108.232028][   T29] usb 1-1: config 0 interface 255 has no altsetting 0
[  108.246507][   T29] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  108.259452][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.289203][ T5732] usb 5-1: USB disconnect, device number 4
[  108.296872][   T29] usb 1-1: Product: syz
[  108.305489][   T29] usb 1-1: Manufacturer: syz
[  108.320603][   T29] usb 1-1: SerialNumber: syz
[  108.345957][   T29] usb 1-1: config 0 descriptor??
[  108.367144][   T29] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  108.576453][  T899] usb 4-1: USB disconnect, device number 3
[  108.592631][  T899] em28xx 4-1:0.0: Disconnecting em28xx
[  108.607044][  T809] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  108.623997][   T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  108.641297][  T899] em28xx 4-1:0.0: Closing input extension
[  108.747919][  T899] em28xx 4-1:0.0: Freeing device
[  108.764784][  T809] usb 2-1: Using ep0 maxpacket: 32
[  108.781717][   T29] gspca_sonixj: reg_r err -32
[  108.798195][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  108.810210][   T29] sonixj 1-1:0.255: probe with driver sonixj failed with error -32
[  108.839223][  T809] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  108.855746][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  108.879893][  T809] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  108.899893][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  108.943106][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  108.953974][  T809] usb 2-1: config 0 interface 0 has no altsetting 0
[  108.976130][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.993402][  T809] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  109.030307][   T10] usb 3-1: config 0 descriptor??
[  109.044140][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.057733][  T809] usb 2-1: Product: syz
[  109.062056][ T5969] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  109.071454][  T809] usb 2-1: Manufacturer: syz
[  109.077255][  T809] usb 2-1: SerialNumber: syz
[  109.143912][  T809] usb 2-1: config 0 descriptor??
[  109.334253][  T899] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  109.577514][  T809] gs_usb 2-1:0.0: Configuring for 256 interfaces
[  109.584744][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.602753][  T809] gs_usb 2-1:0.0: Driver cannot handle more that 255 CAN interfaces
[  109.615215][  T809] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22
[  109.623591][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.646872][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.672488][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.694208][  T899] usb 5-1: Using ep0 maxpacket: 8
[  109.729652][  T899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  109.753599][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  109.764512][  T899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  109.777079][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  109.788125][  T899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  109.801593][   T10] usb 3-1: USB disconnect, device number 7
[  109.807864][  T899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.825774][  T899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  109.838393][ T5983] Zero length message leads to an empty skb
[  109.844444][  T899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.864488][   T29] usb 2-1: USB disconnect, device number 3
[  110.090665][  T899] usb 5-1: GET_CAPABILITIES returned 0
[  110.096795][  T899] usbtmc 5-1:16.0: can't read capabilities
[  110.204543][ T5731] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  110.301150][  T899] usb 5-1: USB disconnect, device number 5
[  110.374197][ T5731] usb 4-1: Using ep0 maxpacket: 16
[  110.420055][ T5731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.466704][ T5731] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.512431][ T5731] usb 4-1: config 0 interface 0 has no altsetting 0
[  110.529005][ T5731] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  110.538975][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.560939][ T5731] usb 4-1: config 0 descriptor??
[  110.592898][ T5731] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  110.637191][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.665586][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.025584][ T6003] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  111.091717][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'.
[  111.409789][ T6010] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  111.612223][ T6014] FAULT_INJECTION: forcing a failure.
[  111.612223][ T6014] name failslab, interval 1, probability 0, space 0, times 0
[  111.642352][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) 
[  111.642378][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  111.642389][ T6014] Call Trace:
[  111.642397][ T6014]  <TASK>
[  111.642404][ T6014]  dump_stack_lvl+0xe8/0x150
[  111.642430][ T6014]  should_fail_ex+0x412/0x560
[  111.642458][ T6014]  should_failslab+0xa8/0x100
[  111.642490][ T6014]  __kmalloc_noprof+0xe8/0x760
[  111.642519][ T6014]  ? do_sys_poll+0x30d/0x10e0
[  111.642546][ T6014]  do_sys_poll+0x30d/0x10e0
[  111.642583][ T6014]  ? __lock_acquire+0x6b5/0x2cf0
[  111.642606][ T6014]  ? __pfx_do_sys_poll+0x10/0x10
[  111.642635][ T6014]  ? aa_file_perm+0x192/0x15e0
[  111.642760][ T6014]  ? set_user_sigmask+0xcd/0x1c0
[  111.642781][ T6014]  ? __pfx_set_user_sigmask+0x10/0x10
[  111.642801][ T6014]  ? kmem_cache_free+0x182/0x650
[  111.642828][ T6014]  ? fd_install+0x94/0x3d0
[  111.642861][ T6014]  __se_sys_ppoll+0x209/0x2b0
[  111.642890][ T6014]  ? __pfx___se_sys_ppoll+0x10/0x10
[  111.642913][ T6014]  ? __pfx_ksys_write+0x10/0x10
[  111.642946][ T6014]  ? __x64_sys_ppoll+0x20/0xc0
[  111.642967][ T6014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.642989][ T6014]  do_syscall_64+0x15f/0xf80
[  111.643023][ T6014]  ? trace_irq_disable+0x3b/0x140
[  111.643047][ T6014]  ? clear_bhb_loop+0x40/0x90
[  111.643065][ T6014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.643079][ T6014] RIP: 0033:0x7ff8da99ce59
[  111.643093][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.643105][ T6014] RSP: 002b:00007ff8db933028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  111.643120][ T6014] RAX: ffffffffffffffda RBX: 00007ff8dac15fa0 RCX: 00007ff8da99ce59
[  111.643131][ T6014] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  111.643140][ T6014] RBP: 00007ff8db933090 R08: 0000000000000000 R09: 0000000000000000
[  111.643149][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.643157][ T6014] R13: 00007ff8dac16038 R14: 00007ff8dac15fa0 R15: 00007ff8dad3fa48
[  111.643179][ T6014]  </TASK>
[  111.804686][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  112.133024][  T809] usb 1-1: USB disconnect, device number 2
[  112.470487][ T5731] usb 4-1: USB disconnect, device number 4
[  112.731831][ T6037] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  112.756678][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[  112.804712][ T5723] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  112.999446][ T5723] usb 5-1: Using ep0 maxpacket: 8
[  113.029104][ T5723] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  113.048222][ T6050] process 'syz.1.104' launched './file2' with NULL argv: empty string added
[  113.064836][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  113.094356][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  113.123726][ T5723] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  113.157632][ T5723] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  113.180484][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.552823][ T6060] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  113.814221][ T6060] ipvlan2: entered allmulticast mode
[  113.820132][ T6060] syz_tun: entered allmulticast mode
[  114.009748][ T5723] usb 5-1: usb_control_msg returned -71
[  114.067339][ T5723] usbtmc 5-1:16.0: can't read capabilities
[  114.094339][ T5723] usb 5-1: USB disconnect, device number 6
[  115.144770][ T6069] FAULT_INJECTION: forcing a failure.
[  115.144770][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.179670][ T6069] CPU: 1 UID: 0 PID: 6069 Comm: syz.3.111 Not tainted syzkaller #0 PREEMPT(full) 
[  115.179691][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  115.179700][ T6069] Call Trace:
[  115.179706][ T6069]  <TASK>
[  115.179713][ T6069]  dump_stack_lvl+0xe8/0x150
[  115.179735][ T6069]  should_fail_ex+0x412/0x560
[  115.179759][ T6069]  _copy_to_user+0x31/0xb0
[  115.179782][ T6069]  simple_read_from_buffer+0xe1/0x170
[  115.179804][ T6069]  proc_fail_nth_read+0x1bb/0x230
[  115.179825][ T6069]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.179846][ T6069]  ? rw_verify_area+0x2a6/0x4d0
[  115.179865][ T6069]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.179885][ T6069]  vfs_read+0x20c/0xa70
[  115.179909][ T6069]  ? __pfx___mutex_lock+0x10/0x10
[  115.179931][ T6069]  ? __pfx_vfs_read+0x10/0x10
[  115.179952][ T6069]  ? __fget_files+0x2a/0x420
[  115.179972][ T6069]  ? __fget_files+0x3a0/0x420
[  115.179988][ T6069]  ? __fget_files+0x2a/0x420
[  115.180011][ T6069]  ksys_read+0x150/0x270
[  115.180035][ T6069]  ? __pfx_ksys_read+0x10/0x10
[  115.180061][ T6069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.180077][ T6069]  do_syscall_64+0x15f/0xf80
[  115.180097][ T6069]  ? trace_irq_disable+0x3b/0x140
[  115.180119][ T6069]  ? clear_bhb_loop+0x40/0x90
[  115.180137][ T6069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.180151][ T6069] RIP: 0033:0x7fb1fbd5d68e
[  115.180165][ T6069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  115.180180][ T6069] RSP: 002b:00007fb1fcbd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.180196][ T6069] RAX: ffffffffffffffda RBX: 00007fb1fcbd16c0 RCX: 00007fb1fbd5d68e
[  115.180206][ T6069] RDX: 000000000000000f RSI: 00007fb1fcbd10a0 RDI: 0000000000000006
[  115.180215][ T6069] RBP: 00007fb1fcbd1090 R08: 0000000000000000 R09: 0000000000000000
[  115.180223][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.180231][ T6069] R13: 00007fb1fc016038 R14: 00007fb1fc015fa0 R15: 00007fb1fc13fa48
[  115.180254][ T6069]  </TASK>
[  115.773251][ T6073] usb usb7: usbfs: process 6073 (syz.3.112) did not claim interface 0 before use
[  115.802102][ T6073] usb usb7: usbfs: process 6073 (syz.3.112) did not claim interface 0 before use
[  116.904855][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'.
[  116.960663][ T6088] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  116.992194][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[  117.040719][ T6086] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  117.053748][ T6086] erspan0: entered promiscuous mode
[  117.121017][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'.
[  118.174278][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[  118.813081][  T899] IPVS: starting estimator thread 0...
[  118.882263][ T6124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.127'.
[  118.924316][ T6123] IPVS: using max 31 ests per chain, 74400 per kthread
[  118.995532][ T6127] FAULT_INJECTION: forcing a failure.
[  118.995532][ T6127] name failslab, interval 1, probability 0, space 0, times 0
[  119.049582][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.4.129 Not tainted syzkaller #0 PREEMPT(full) 
[  119.049614][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  119.049627][ T6127] Call Trace:
[  119.049635][ T6127]  <TASK>
[  119.049643][ T6127]  dump_stack_lvl+0xe8/0x150
[  119.049672][ T6127]  should_fail_ex+0x412/0x560
[  119.049705][ T6127]  should_failslab+0xa8/0x100
[  119.049738][ T6127]  __kmalloc_cache_noprof+0x88/0x660
[  119.049769][ T6127]  ? simple_xattrs_lazy_alloc+0x95/0x150
[  119.049798][ T6127]  ? evm_protected_xattr_common+0x170/0x190
[  119.049835][ T6127]  simple_xattrs_lazy_alloc+0x95/0x150
[  119.049870][ T6127]  shmem_xattr_handler_set+0x91/0x310
[  119.049902][ T6127]  ? __pfx_evm_protect_xattr+0x10/0x10
[  119.049925][ T6127]  ? __pfx_shmem_xattr_handler_set+0x10/0x10
[  119.049955][ T6127]  __vfs_setxattr+0x43c/0x480
[  119.049993][ T6127]  __vfs_setxattr_noperm+0x12d/0x660
[  119.050027][ T6127]  vfs_setxattr+0x163/0x360
[  119.050051][ T6127]  ? mnt_get_write_access+0x66/0x280
[  119.050085][ T6127]  ? __pfx_vfs_setxattr+0x10/0x10
[  119.050127][ T6127]  ? mnt_want_write_file+0x172/0x200
[  119.050160][ T6127]  file_setxattr+0x1d9/0x2b0
[  119.050190][ T6127]  path_setxattrat+0x3b0/0x440
[  119.050230][ T6127]  ? __pfx_path_setxattrat+0x10/0x10
[  119.050270][ T6127]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  119.050329][ T6127]  ? ksys_write+0x242/0x270
[  119.050361][ T6127]  ? __pfx_ksys_write+0x10/0x10
[  119.050395][ T6127]  __x64_sys_fsetxattr+0xbc/0xe0
[  119.050423][ T6127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.050446][ T6127]  do_syscall_64+0x15f/0xf80
[  119.050473][ T6127]  ? trace_irq_disable+0x3b/0x140
[  119.050505][ T6127]  ? clear_bhb_loop+0x40/0x90
[  119.050531][ T6127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.050551][ T6127] RIP: 0033:0x7f28b659ce59
[  119.050569][ T6127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.050586][ T6127] RSP: 002b:00007f28b73e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  119.050607][ T6127] RAX: ffffffffffffffda RBX: 00007f28b6815fa0 RCX: 00007f28b659ce59
[  119.050621][ T6127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  119.050634][ T6127] RBP: 00007f28b73e0090 R08: 0000000000000003 R09: 0000000000000000
[  119.050645][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.050656][ T6127] R13: 00007f28b6816038 R14: 00007f28b6815fa0 R15: 00007f28b693fa48
[  119.050689][ T6127]  </TASK>
[  119.564339][  T899] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  119.635684][ T6134] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  119.671096][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[  119.724276][  T899] usb 4-1: Using ep0 maxpacket: 32
[  119.736601][  T899] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  119.756125][  T899] usb 4-1: config 0 has no interface number 0
[  119.772640][  T899] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  119.792888][  T899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.813184][  T899] usb 4-1: Product: syz
[  119.819787][  T899] usb 4-1: Manufacturer: syz
[  119.830475][  T899] usb 4-1: SerialNumber: syz
[  119.835458][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  119.865215][  T899] usb 4-1: config 0 descriptor??
[  119.895649][  T899] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  119.917405][  T899] usb 4-1: selecting invalid altsetting 1
[  119.932190][  T899] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  119.971982][  T899] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  120.006273][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.017402][  T899] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  120.034985][   T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  120.054377][  T899] usb 4-1: media controller created
[  120.059763][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.117002][   T10] usb 5-1: config 0 descriptor??
[  120.143673][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  120.154358][  T899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.276205][  T899] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  120.283572][  T899] zl10353_read_register: readreg error (reg=127, ret==-71)
[  120.311086][  T899] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  120.485994][  T899] usb 4-1: USB disconnect, device number 5
[  120.530740][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  120.551858][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  120.580625][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  120.599253][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  120.610995][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  120.620590][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  120.629213][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  120.645251][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  120.663134][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[  120.677150][   T10] pwc: recv_control_msg error -32 req 02 val 2500
[  120.692548][   T10] pwc: recv_control_msg error -32 req 02 val 2400
[  120.705162][   T10] pwc: recv_control_msg error -32 req 02 val 2600
[  120.725966][   T10] pwc: recv_control_msg error -32 req 02 val 2900
[  120.846814][ T6154] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  120.883827][ T6154] netlink: 156 bytes leftover after parsing attributes in process `syz.3.138'.
[  120.948224][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  120.969976][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  121.008532][   T10] pwc: Registered as video103.
[  121.063856][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  121.182509][   T10] usb 5-1: USB disconnect, device number 7
[  121.571975][ T6171] tipc: Can't bind to reserved service type 1
[  121.618051][ T6171] tipc: Failed to remove unknown binding: 66,0,0/0:3369579081/3369579082
[  121.740183][ T6174] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.752585][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'.
[  122.089065][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  122.269501][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.291456][   T10] usb 5-1: config 0 has no interfaces?
[  122.304225][   T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  122.313459][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.322870][   T10] usb 5-1: Product: syz
[  122.327741][   T10] usb 5-1: Manufacturer: syz
[  122.332456][   T10] usb 5-1: SerialNumber: syz
[  122.364203][   T10] usb 5-1: config 0 descriptor??
[  122.579112][ T6178] FAULT_INJECTION: forcing a failure.
[  122.579112][ T6178] name failslab, interval 1, probability 0, space 0, times 0
[  122.638410][ T6178] CPU: 1 UID: 0 PID: 6178 Comm: syz.4.145 Not tainted syzkaller #0 PREEMPT(full) 
[  122.638452][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  122.638464][ T6178] Call Trace:
[  122.638472][ T6178]  <TASK>
[  122.638481][ T6178]  dump_stack_lvl+0xe8/0x150
[  122.638510][ T6178]  should_fail_ex+0x412/0x560
[  122.638541][ T6178]  should_failslab+0xa8/0x100
[  122.638574][ T6178]  __kmalloc_noprof+0xe8/0x760
[  122.638602][ T6178]  ? tomoyo_encode+0x28b/0x550
[  122.638634][ T6178]  tomoyo_encode+0x28b/0x550
[  122.638667][ T6178]  tomoyo_realpath_from_path+0x58d/0x5d0
[  122.638707][ T6178]  ? tomoyo_path_number_perm+0x219/0x630
[  122.638730][ T6178]  tomoyo_path_number_perm+0x246/0x630
[  122.638766][ T6178]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  122.638794][ T6178]  ? sb_end_write+0xe9/0x1c0
[  122.638815][ T6178]  ? vfs_write+0x9bc/0xb90
[  122.638877][ T6178]  ? ksys_write+0x1fc/0x270
[  122.638912][ T6178]  security_file_ioctl+0xc3/0x2a0
[  122.638936][ T6178]  __se_sys_ioctl+0x47/0x170
[  122.638965][ T6178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.638988][ T6178]  do_syscall_64+0x15f/0xf80
[  122.639015][ T6178]  ? trace_irq_disable+0x3b/0x140
[  122.639045][ T6178]  ? clear_bhb_loop+0x40/0x90
[  122.639070][ T6178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.639090][ T6178] RIP: 0033:0x7f28b659caeb
[  122.639109][ T6178] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  122.639124][ T6178] RSP: 002b:00007f28b73ddf50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.639145][ T6178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f28b659caeb
[  122.639159][ T6178] RDX: 00007f28b73defe0 RSI: 0000000080085502 RDI: 0000000000000003
[  122.639171][ T6178] RBP: 00007f28b73e0090 R08: 0000000000000000 R09: 0000000000000000
[  122.639182][ T6178] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  122.639193][ T6178] R13: 0000000000000000 R14: 00007f28b6815fa0 R15: 00007f28b693fa48
[  122.639225][ T6178]  </TASK>
[  122.639245][ T6178] ERROR: Out of memory at tomoyo_realpath_from_path.
[  122.865338][ T6196] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer.
[  123.176328][ T6203] netlink: 6 bytes leftover after parsing attributes in process `syz.0.151'.
[  123.266262][ T6203] netlink: 76 bytes leftover after parsing attributes in process `syz.0.151'.
[  123.305811][ T6203] netlink: 76 bytes leftover after parsing attributes in process `syz.0.151'.
[  123.469482][   T24] usb 5-1: USB disconnect, device number 8
[  124.372075][ T6222] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  124.463685][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'.
[  124.836997][ T6226] netlink: 'syz.0.158': attribute type 10 has an invalid length.
[  124.868985][ T6226] FAULT_INJECTION: forcing a failure.
[  124.868985][ T6226] name failslab, interval 1, probability 0, space 0, times 0
[  124.905987][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.0.158 Not tainted syzkaller #0 PREEMPT(full) 
[  124.906008][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  124.906017][ T6226] Call Trace:
[  124.906022][ T6226]  <TASK>
[  124.906029][ T6226]  dump_stack_lvl+0xe8/0x150
[  124.906049][ T6226]  should_fail_ex+0x412/0x560
[  124.906092][ T6226]  should_failslab+0xa8/0x100
[  124.906116][ T6226]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  124.906137][ T6226]  ? __alloc_skb+0x186/0x7d0
[  124.906153][ T6226]  ? __alloc_skb+0x1d0/0x7d0
[  124.906169][ T6226]  ? __local_bh_enable_ip+0xd0/0x130
[  124.906187][ T6226]  __alloc_skb+0x1d0/0x7d0
[  124.906204][ T6226]  ? netlink_ack_tlv_len+0x6c/0x210
[  124.906225][ T6226]  netlink_ack+0x146/0xa50
[  124.906242][ T6226]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  124.906259][ T6226]  ? ref_tracker_free+0x693/0x840
[  124.906280][ T6226]  ? __pfx_ref_tracker_free+0x10/0x10
[  124.906298][ T6226]  ? __asan_memcpy+0x40/0x70
[  124.906314][ T6226]  ? __skb_clone+0x63/0x7a0
[  124.906338][ T6226]  netlink_rcv_skb+0x2b6/0x4b0
[  124.906358][ T6226]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  124.906377][ T6226]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.906404][ T6226]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.906423][ T6226]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.906445][ T6226]  netlink_unicast+0x75c/0x8e0
[  124.906470][ T6226]  netlink_sendmsg+0x813/0xb40
[  124.906496][ T6226]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.906517][ T6226]  ? aa_sock_msg_perm+0xf1/0x1b0
[  124.906537][ T6226]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.906559][ T6226]  ____sys_sendmsg+0x972/0x9f0
[  124.906579][ T6226]  ? __might_fault+0xaf/0x130
[  124.906601][ T6226]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.906634][ T6226]  ? import_iovec+0x73/0xa0
[  124.906658][ T6226]  ___sys_sendmsg+0x2a5/0x360
[  124.906677][ T6226]  ? __lock_acquire+0x6b5/0x2cf0
[  124.906696][ T6226]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.906741][ T6226]  ? __fget_files+0x2a/0x420
[  124.906758][ T6226]  ? __fget_files+0x3a0/0x420
[  124.906782][ T6226]  __x64_sys_sendmsg+0x1bd/0x2a0
[  124.906804][ T6226]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.906831][ T6226]  ? __pfx_ksys_write+0x10/0x10
[  124.906857][ T6226]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.906872][ T6226]  do_syscall_64+0x15f/0xf80
[  124.906893][ T6226]  ? trace_irq_disable+0x3b/0x140
[  124.906915][ T6226]  ? clear_bhb_loop+0x40/0x90
[  124.906932][ T6226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.906946][ T6226] RIP: 0033:0x7f07edd9ce59
[  124.906959][ T6226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.906971][ T6226] RSP: 002b:00007f07eed2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.906986][ T6226] RAX: ffffffffffffffda RBX: 00007f07ee015fa0 RCX: 00007f07edd9ce59
[  124.906996][ T6226] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  124.907005][ T6226] RBP: 00007f07eed2d090 R08: 0000000000000000 R09: 0000000000000000
[  124.907017][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.907025][ T6226] R13: 00007f07ee016038 R14: 00007f07ee015fa0 R15: 00007f07ee13fa48
[  124.907047][ T6226]  </TASK>
[  125.887430][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  126.046186][   T10] usb 5-1: device descriptor read/64, error -71
[  126.285368][   T29] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  126.314637][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  126.449088][   T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  126.464264][   T10] usb 5-1: device descriptor read/64, error -71
[  126.477783][   T29] usb 4-1: config 0 has no interface number 0
[  126.496038][   T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  126.521978][   T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  126.544496][   T29] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  126.565777][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.594783][   T10] usb usb5-port1: attempt power cycle
[  126.606299][   T29] usb 4-1: config 0 descriptor??
[  126.632145][ T6244] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  126.660121][   T29] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  126.855221][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.885472][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.948835][ T5723] usb 4-1: USB disconnect, device number 6
[  126.965833][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  127.014955][   T10] usb 5-1: device descriptor read/8, error -71
[  127.264224][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  127.304767][   T10] usb 5-1: device descriptor read/8, error -71
[  127.426783][   T10] usb usb5-port1: unable to enumerate USB device
[  127.748164][ T6261] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  127.784055][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'.
[  129.134525][  T899] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  129.325871][  T899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.355412][  T899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  129.384724][  T899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  129.428793][  T899] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  129.454332][  T899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.502479][  T899] usb 2-1: config 0 descriptor??
[  129.510176][ T6300] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  129.745019][  T899] ath6kl: Failed to submit usb control message: -71
[  129.758915][  T899] ath6kl: unable to send the bmi data to the device: -71
[  129.769207][  T899] ath6kl: Unable to send get target info: -71
[  129.787999][  T899] ath6kl: Failed to init ath6kl core: -71
[  129.809744][  T899] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  129.875565][  T899] usb 2-1: USB disconnect, device number 4
[  130.168551][ T6313] binder: BINDER_SET_CONTEXT_MGR already set
[  130.198771][ T6313] binder: 6311:6313 ioctl 4018620d 200000004a80 returned -16
[  130.233389][ T6315] nftables ruleset with unbound set
[  130.605382][  T899] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  130.794207][  T899] usb 5-1: Using ep0 maxpacket: 16
[  130.828765][  T899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.863298][  T899] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.918917][  T899] usb 5-1: config 0 interface 0 has no altsetting 0
[  130.918966][  T899] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  130.918991][  T899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.940734][  T899] usb 5-1: config 0 descriptor??
[  130.971616][  T899] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  130.983413][ T6327] netlink: 'syz.2.186': attribute type 10 has an invalid length.
[  131.006005][ T6327] fuse: Unknown parameter 'fÁ'
[  131.519812][ T6336] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.700529][ T6341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.198'.
[  131.885493][ T6349] vivid-004: =================  START STATUS  =================
[  131.930695][ T6349] vivid-004: Radio HW Seek Mode: Bounded
[  131.995916][ T6349] vivid-004: Radio Programmable HW Seek: false
[  132.014549][   T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  132.036539][ T6349] vivid-004: RDS Rx I/O Mode: Block I/O
[  132.073808][ T6349] vivid-004: Generate RBDS Instead of RDS: false
[  132.118494][ T6349] vivid-004: RDS Reception: true
[  132.149223][ T6349] vivid-004: RDS Program Type: 0 inactive
[  132.184969][ T6349] vivid-004: RDS PS Name:  inactive
[  132.196310][   T29] usb 1-1: Using ep0 maxpacket: 8
[  132.211561][ T6349] vivid-004: RDS Radio Text:  inactive
[  132.223894][   T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.328296][ T6349] vivid-004: RDS Traffic Announcement: false inactive
[  132.338238][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  132.356169][ T6349] vivid-004: RDS Traffic Program: false inactive
[  132.363733][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  132.383629][   T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.390497][ T6349] vivid-004: RDS Music: 
[  132.413587][   T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  132.451812][ T6349] false inactive
[  132.470483][ T6349] vivid-004: ==================  END STATUS  ==================
[  132.470823][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.773220][   T29] usb 1-1: usb_control_msg returned -32
[  132.794636][   T29] usbtmc 1-1:16.0: can't read capabilities
[  132.916424][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  132.927900][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  133.432978][   T29] usb 1-1: USB disconnect, device number 3
[  133.495637][ T5723] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  133.574837][ T5732] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  133.683624][ T5723] usb 3-1: device descriptor read/64, error -71
[  133.774244][ T5732] usb 2-1: Using ep0 maxpacket: 32
[  133.806804][ T5732] usb 2-1: config 2 has an invalid interface number: 45 but max is 0
[  133.841414][ T5732] usb 2-1: config 2 has no interface number 0
[  133.869316][ T5732] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  133.917711][ T5732] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.954923][ T5732] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  133.964715][   T10] usb 5-1: USB disconnect, device number 13
[  134.006221][ T5723] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  134.030564][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.066681][ T5732] usb 2-1: Product: syz
[  134.089428][ T5732] usb 2-1: Manufacturer: syz
[  134.107679][ T5732] usb 2-1: SerialNumber: syz
[  134.141349][ T5732] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected
[  134.151096][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  134.164242][ T5723] usb 3-1: device descriptor read/64, error -71
[  134.220308][ T5732] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  134.294494][ T5723] usb usb3-port1: attempt power cycle
[  134.352400][   T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  134.373873][  T899] usb 2-1: USB disconnect, device number 5
[  134.382891][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  134.412313][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  134.436757][  T899] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  134.451633][   T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  134.471030][  T899] kobil_sct 2-1:2.45: device disconnected
[  134.479753][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  134.488895][   T24] usb 1-1: Product: syz
[  134.501914][   T24] usb 1-1: Manufacturer: syz
[  134.512745][   T24] usb 1-1: SerialNumber: syz
[  134.531199][   T24] usb 1-1: config 0 descriptor??
[  134.577443][   T24] usb 1-1: selecting invalid altsetting 0
[  134.654339][ T5723] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  134.691401][   T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  134.702550][ T5723] usb 3-1: device descriptor read/8, error -71
[  134.711484][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.723587][   T10] usb 5-1: Product: syz
[  134.728417][   T10] usb 5-1: Manufacturer: syz
[  134.733097][   T10] usb 5-1: SerialNumber: syz
[  134.769642][ T6369] capability: warning: `syz.0.208' uses deprecated v2 capabilities in a way that may be insecure
[  134.786046][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.809002][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.817586][ T6373] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  134.887185][   T24] usb 1-1: USB disconnect, device number 4
[  134.954235][ T5723] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  134.985434][ T5723] usb 3-1: device descriptor read/8, error -71
[  135.107089][ T5723] usb usb3-port1: unable to enumerate USB device
[  135.160667][ T6378] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  135.604810][ T5723] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  135.618158][   T10] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[  135.774599][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  135.789036][ T5723] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  135.802876][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  135.815493][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  135.826824][ T5723] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.842154][   T10] usb 5-1: USB disconnect, device number 14
[  135.877416][ T5723] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.914187][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.504540][   T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  136.662837][ T5723] usb 2-1: usb_control_msg returned -71
[  136.676070][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  136.695743][ T5723] usbtmc 2-1:16.0: can't read capabilities
[  136.709255][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  136.748498][   T24] usb 4-1: config 0 has no interfaces?
[  136.753590][ T5723] usb 2-1: USB disconnect, device number 6
[  136.777100][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.830867][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.876910][   T24] usb 4-1: Product: syz
[  136.897041][   T24] usb 4-1: Manufacturer: syz
[  136.915882][   T24] usb 4-1: SerialNumber: syz
[  136.957252][   T24] usb 4-1: config 0 descriptor??
[  137.228621][   T24] usb 4-1: USB disconnect, device number 7
[  137.434513][ T5723] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  137.460078][ T6430] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  137.584182][ T5723] usb 3-1: device descriptor read/64, error -71
[  137.835553][ T5723] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  137.994228][ T5723] usb 3-1: device descriptor read/64, error -71
[  138.110735][ T5723] usb usb3-port1: attempt power cycle
[  138.224155][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  138.391680][   T24] usb 1-1: Using ep0 maxpacket: 8
[  138.434166][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  138.461118][   T24] usb 1-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  138.488790][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.494539][ T5723] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  138.514399][   T24] usb 1-1: Product: syz
[  138.527778][ T5723] usb 3-1: device descriptor read/8, error -71
[  138.548190][   T24] usb 1-1: Manufacturer: 
[  138.570545][   T24] usb 1-1: SerialNumber: syz
[  138.774224][ T5723] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  138.837832][ T5723] usb 3-1: device descriptor read/8, error -71
[  138.978749][ T5723] usb usb3-port1: unable to enumerate USB device
[  139.846144][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'.
[  140.378017][ T6471] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  140.411431][ T5723] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  141.354377][  T899] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  141.534307][  T899] usb 3-1: Using ep0 maxpacket: 8
[  141.567360][  T899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  141.599352][  T899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  141.638419][  T899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  141.690242][  T899] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  141.738920][  T899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  141.764346][  T899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.981198][   T24] usb 1-1: USB disconnect, device number 5
[  142.038235][  T899] usb 3-1: GET_CAPABILITIES returned 0
[  142.047744][ T5731] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  142.060106][  T899] usbtmc 3-1:16.0: can't read capabilities
[  142.227900][ T5731] usb 4-1: unable to get BOS descriptor or descriptor too short
[  142.241423][ T6482] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90
[  142.254686][ T5731] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  142.271701][  T899] usb 3-1: USB disconnect, device number 16
[  142.290619][ T5731] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  142.330701][ T5731] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  142.361130][ T5731] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  142.407970][ T5731] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  142.433676][ T5731] usb 4-1: config 1 interface 1 has no altsetting 0
[  142.455254][ T5731] usb 4-1: string descriptor 0 read error: -22
[  142.467627][ T5731] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  142.494843][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.502175][ T6468] netlink: 'syz.1.232': attribute type 10 has an invalid length.
[  142.579725][ T6468] 8021q: adding VLAN 0 to HW filter on device team0
[  142.633387][ T6468] bond0: (slave team0): Enslaving as an active interface with an up link
[  143.377760][   T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  143.450645][ T6498] binder_alloc: 6497: pid 6497 spamming oneway? 1 buffers allocated for a total size of 4096
[  143.556662][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.591745][ T5731] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[  143.597138][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.633134][   T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  143.659943][   T24] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  143.699955][   T24] usb 3-1: Manufacturer: syz
[  143.729696][ T6501] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  143.742074][   T24] usb 3-1: config 0 descriptor??
[  143.800589][ T6504] binder: 6502:6504 ioctl c018620c 2000000002c0 returned -22
[  143.947839][ T5731] usb 4-1: USB disconnect, device number 8
[  144.363181][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'.
[  144.444547][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'.
[  144.485966][ T6516] netlink: 'syz.4.249': attribute type 13 has an invalid length.
[  144.515503][ T6516] netlink: 'syz.4.249': attribute type 11 has an invalid length.
[  144.591920][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  144.621180][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  144.658485][   T24] usb 3-1: USB disconnect, device number 17
[  144.852536][ T5731] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  145.024200][ T5731] usb 1-1: Using ep0 maxpacket: 8
[  145.042850][ T5731] usb 1-1: unable to get BOS descriptor or descriptor too short
[  145.050831][ T6532] FAULT_INJECTION: forcing a failure.
[  145.050831][ T6532] name failslab, interval 1, probability 0, space 0, times 0
[  145.065149][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.4.256 Not tainted syzkaller #0 PREEMPT(full) 
[  145.065175][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  145.065187][ T6532] Call Trace:
[  145.065194][ T6532]  <TASK>
[  145.065202][ T6532]  dump_stack_lvl+0xe8/0x150
[  145.065231][ T6532]  should_fail_ex+0x412/0x560
[  145.065262][ T6532]  should_failslab+0xa8/0x100
[  145.065295][ T6532]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  145.065324][ T6532]  ? __alloc_skb+0x1d0/0x7d0
[  145.065349][ T6532]  ? __local_bh_enable_ip+0xd0/0x130
[  145.065375][ T6532]  __alloc_skb+0x1d0/0x7d0
[  145.065404][ T6532]  sock_wmalloc+0xb2/0x130
[  145.065435][ T6532]  pppoe_sendmsg+0x2b4/0x7c0
[  145.065465][ T6532]  ? __pfx_aa_sk_perm+0x10/0x10
[  145.065493][ T6532]  ? __pfx_pppoe_sendmsg+0x10/0x10
[  145.065521][ T6532]  ? aa_sock_msg_perm+0xf1/0x1b0
[  145.065548][ T6532]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.065579][ T6532]  ____sys_sendmsg+0x972/0x9f0
[  145.065607][ T6532]  ? __might_fault+0xaf/0x130
[  145.065640][ T6532]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.065677][ T6532]  ? import_iovec+0x73/0xa0
[  145.065710][ T6532]  ___sys_sendmsg+0x2a5/0x360
[  145.065737][ T6532]  ? __lock_acquire+0x6b5/0x2cf0
[  145.065764][ T6532]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.065809][ T6532]  ? kstrtouint+0x6e/0xe0
[  145.065859][ T6532]  ? __fget_files+0x2a/0x420
[  145.065881][ T6532]  ? __fget_files+0x3a0/0x420
[  145.065916][ T6532]  __sys_sendmmsg+0x27c/0x4e0
[  145.065948][ T6532]  ? __pfx___sys_sendmmsg+0x10/0x10
[  145.065970][ T6532]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  145.066015][ T6532]  ? ksys_write+0x242/0x270
[  145.066040][ T6532]  ? __pfx_ksys_write+0x10/0x10
[  145.066073][ T6532]  __x64_sys_sendmmsg+0xa0/0xc0
[  145.066098][ T6532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.066115][ T6532]  do_syscall_64+0x15f/0xf80
[  145.066144][ T6532]  ? trace_irq_disable+0x3b/0x140
[  145.066168][ T6532]  ? clear_bhb_loop+0x40/0x90
[  145.066187][ T6532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.066205][ T6532] RIP: 0033:0x7f28b659ce59
[  145.066224][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.066237][ T6532] RSP: 002b:00007f28b73e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  145.066255][ T6532] RAX: ffffffffffffffda RBX: 00007f28b6815fa0 RCX: 00007f28b659ce59
[  145.066266][ T6532] RDX: 0000000000000001 RSI: 0000200000004a40 RDI: 0000000000000003
[  145.066276][ T6532] RBP: 00007f28b73e0090 R08: 0000000000000000 R09: 0000000000000000
[  145.066285][ T6532] R10: 0000000024009800 R11: 0000000000000246 R12: 0000000000000001
[  145.066296][ T6532] R13: 00007f28b6816038 R14: 00007f28b6815fa0 R15: 00007f28b693fa48
[  145.066321][ T6532]  </TASK>
[  145.069568][ T5731] usb 1-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  145.361044][ T5723] usb 2-1: device descriptor read/64, error -71
[  145.369297][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.378114][ T5731] usb 1-1: Product: syz
[  145.382397][ T5731] usb 1-1: Manufacturer: 
[  145.388737][ T5731] usb 1-1: SerialNumber: syz
[  145.469917][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.259'.
[  145.583832][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.593474][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.605718][ T5723] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  145.686977][  T899] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  145.704487][ T6544] netlink: 'syz.2.261': attribute type 4 has an invalid length.
[  145.713632][ T6544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.261'.
[  145.745187][ T5723] usb 2-1: device descriptor read/64, error -71
[  145.789283][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.806944][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.847102][  T899] usb 4-1: Using ep0 maxpacket: 32
[  145.855366][ T5723] usb usb2-port1: attempt power cycle
[  145.867657][  T899] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  145.883197][  T899] usb 4-1: config 0 has no interface number 0
[  145.905279][  T899] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  145.916553][  T899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.924919][  T899] usb 4-1: Product: syz
[  145.929197][  T899] usb 4-1: Manufacturer: syz
[  145.933866][  T899] usb 4-1: SerialNumber: syz
[  145.941932][  T899] usb 4-1: config 0 descriptor??
[  146.077506][ T6544] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  146.118683][   T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.146672][   T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.168442][   T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.190313][   T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.215729][ T5723] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  146.265573][ T5723] usb 2-1: device descriptor read/8, error -71
[  146.320705][ T6551] PKCS7: Unknown OID: [5] (bad)
[  146.327641][ T6551] PKCS7: Only support pkcs7_signedData type
[  146.449369][  T899] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  146.468974][  T899] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  146.504230][ T5723] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  146.517814][ T6557] FAULT_INJECTION: forcing a failure.
[  146.517814][ T6557] name failslab, interval 1, probability 0, space 0, times 0
[  146.526957][ T5723] usb 2-1: device descriptor read/8, error -71
[  146.537931][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.2.265 Not tainted syzkaller #0 PREEMPT(full) 
[  146.537958][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  146.537970][ T6557] Call Trace:
[  146.537978][ T6557]  <TASK>
[  146.537987][ T6557]  dump_stack_lvl+0xe8/0x150
[  146.538016][ T6557]  should_fail_ex+0x412/0x560
[  146.538048][ T6557]  should_failslab+0xa8/0x100
[  146.538080][ T6557]  __kmalloc_noprof+0xe8/0x760
[  146.538113][ T6557]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  146.538141][ T6557]  ? __kmalloc_noprof+0x1b8/0x760
[  146.538174][ T6557]  tomoyo_realpath_from_path+0xe3/0x5d0
[  146.538214][ T6557]  ? tomoyo_domain+0xd7/0x130
[  146.538247][ T6557]  ? tomoyo_path_number_perm+0x219/0x630
[  146.538272][ T6557]  tomoyo_path_number_perm+0x246/0x630
[  146.538299][ T6557]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  146.538344][ T6557]  ? d_alloc_parallel+0x44a/0x1610
[  146.538396][ T6557]  ? __pfx_current_check_access_path+0x10/0x10
[  146.538422][ T6557]  ? d_alloc_parallel+0x14c7/0x1610
[  146.538461][ T6557]  tomoyo_path_mknod+0x14a/0x1a0
[  146.538494][ T6557]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  146.538527][ T6557]  ? __pfx_d_alloc_parallel+0x10/0x10
[  146.538559][ T6557]  security_path_mknod+0x176/0x370
[  146.538592][ T6557]  may_o_create+0x2d/0x370
[  146.538621][ T6557]  ? mode_strip_sgid+0x6a/0x1b0
[  146.538654][ T6557]  path_openat+0x1041/0x3860
[  146.538719][ T6557]  ? getname_long+0x50/0x130
[  146.538747][ T6557]  ? __pfx_path_openat+0x10/0x10
[  146.538797][ T6557]  do_file_open+0x23e/0x4a0
[  146.538832][ T6557]  ? __pfx_do_file_open+0x10/0x10
[  146.538886][ T6557]  ? _raw_spin_unlock+0x28/0x50
[  146.538911][ T6557]  ? alloc_fd+0x64b/0x6c0
[  146.538945][ T6557]  do_sys_openat2+0x113/0x200
[  146.538973][ T6557]  ? __pfx_do_sys_openat2+0x10/0x10
[  146.538998][ T6557]  ? ksys_write+0x242/0x270
[  146.539029][ T6557]  ? __pfx_ksys_write+0x10/0x10
[  146.539059][ T6557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.539082][ T6557]  __x64_sys_creat+0x8f/0xc0
[  146.539109][ T6557]  do_syscall_64+0x15f/0xf80
[  146.539137][ T6557]  ? trace_irq_disable+0x3b/0x140
[  146.539168][ T6557]  ? clear_bhb_loop+0x40/0x90
[  146.539200][ T6557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.539220][ T6557] RIP: 0033:0x7f272219ce59
[  146.539239][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.539254][ T6557] RSP: 002b:00007f27230bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  146.539276][ T6557] RAX: ffffffffffffffda RBX: 00007f2722415fa0 RCX: 00007f272219ce59
[  146.539290][ T6557] RDX: 0000000000000000 RSI: 00000000000000ae RDI: 00002000000000c0
[  146.539302][ T6557] RBP: 00007f27230bb090 R08: 0000000000000000 R09: 0000000000000000
[  146.539314][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.539325][ T6557] R13: 00007f2722416038 R14: 00007f2722415fa0 R15: 00007f272253fa48
[  146.539359][ T6557]  </TASK>
[  146.542461][ T6557] ERROR: Out of memory at tomoyo_realpath_from_path.
[  146.645664][ T5723] usb usb2-port1: unable to enumerate USB device
[  146.997603][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.012622][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.223101][  T899] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  147.237000][  T899] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61
[  147.527338][  T899] usb 4-1: USB disconnect, device number 9
[  147.602628][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'.
[  147.801298][ T5731] usb 1-1: USB disconnect, device number 6
[  147.907526][ T6580] fuse: Bad value for 'user_id'
[  147.930133][ T6580] fuse: Bad value for 'user_id'
[  148.012180][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.272'.
[  149.194192][   T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  149.424666][   T29] usb 4-1: Using ep0 maxpacket: 8
[  149.441456][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[  149.463984][   T29] usb 4-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  149.464666][  T899] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  149.491875][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.534364][   T29] usb 4-1: Product: syz
[  149.543669][   T29] usb 4-1: Manufacturer: 
[  149.558955][   T29] usb 4-1: SerialNumber: syz
[  149.704605][  T899] usb 2-1: Using ep0 maxpacket: 16
[  149.744828][  T899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.779935][  T899] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  149.807170][  T899] usb 2-1: config 0 interface 0 has no altsetting 0
[  149.821959][  T899] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  149.850934][  T899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.887676][  T899] usb 2-1: config 0 descriptor??
[  149.925908][  T809] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  149.946859][  T899] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  150.128755][  T809] usb 1-1: device descriptor read/64, error -71
[  150.394282][  T809] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  150.524937][  T809] usb 1-1: device descriptor read/64, error -71
[  150.644804][  T809] usb usb1-port1: attempt power cycle
[  150.696913][ T6624] tipc: Failed to remove unknown binding: 66,0,0/0:3777437260/3777437262
[  150.706759][ T6624] tipc: Failed to remove unknown binding: 66,0,0/0:3777437260/3777437261
[  150.720424][ T6624] tipc: Failed to remove unknown binding: 66,0,0/0:3777437260/3777437262
[  150.731680][ T6624] tipc: Failed to remove unknown binding: 66,0,0/0:3777437260/3777437261
[  150.994474][  T809] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  151.025693][  T809] usb 1-1: device descriptor read/8, error -71
[  151.265965][  T809] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  151.308037][  T809] usb 1-1: device descriptor read/8, error -71
[  151.422676][ T6633] netlink: 'syz.4.289': attribute type 12 has an invalid length.
[  151.431262][  T809] usb usb1-port1: unable to enumerate USB device
[  151.826829][  T809] usb 2-1: USB disconnect, device number 11
[  152.163103][   T29] usb 4-1: USB disconnect, device number 10
[  152.334220][ T5723] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  152.506298][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.523967][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.537229][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  152.556760][ T5723] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  152.570848][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.583503][ T5723] usb 2-1: config 0 descriptor??
[  152.931639][ T6665] syz.0.300 uses obsolete (PF_INET,SOCK_PACKET)
[  153.050079][ T5723] plantronics 0003:047F:FFFF.0001: report_id 0 is invalid
[  153.066565][ T5723] plantronics 0003:047F:FFFF.0001: item 0 0 1 8 parsing failed
[  153.077449][ T5723] plantronics 0003:047F:FFFF.0001: parse failed
[  153.085749][ T5723] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22
[  153.364365][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  153.587244][   T10] usb 5-1: Using ep0 maxpacket: 16
[  153.629304][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.666809][   T10] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  153.724790][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  153.745673][   T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  153.774800][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.850325][   T10] usb 5-1: config 0 descriptor??
[  153.912054][   T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  154.463774][ T6694] netlink: 'syz.1.292': attribute type 10 has an invalid length.
[  154.657515][ T6694] team0: Port device dummy0 added
[  154.985512][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'.
[  154.998966][ T6704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.312'.
[  155.035540][ T5631] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  155.204312][ T5631] usb 4-1: device descriptor read/64, error -71
[  155.309440][ T6710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.314'.
[  155.464723][ T5631] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  155.614308][ T5631] usb 4-1: device descriptor read/64, error -71
[  155.734520][ T5631] usb usb4-port1: attempt power cycle
[  156.094371][ T5631] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  156.160550][ T5631] usb 4-1: device descriptor read/8, error -71
[  156.242602][   T10] usb 5-1: USB disconnect, device number 15
[  156.437937][ T5631] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  156.475784][ T5631] usb 4-1: device descriptor read/8, error -71
[  156.560789][   T10] usb 2-1: USB disconnect, device number 12
[  156.604661][ T5631] usb usb4-port1: unable to enumerate USB device
[  156.938450][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[  156.958331][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[  157.218950][ T6740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.324'.
[  157.250820][ T6735] netlink: 204 bytes leftover after parsing attributes in process `syz.1.325'.
[  157.273713][ T6735] netlink: 84 bytes leftover after parsing attributes in process `syz.1.325'.
[  157.308822][ T6735] netlink: 68 bytes leftover after parsing attributes in process `syz.1.325'.
[  157.392324][ T6740] syzkaller1: entered promiscuous mode
[  157.410533][ T6740] syzkaller1: entered allmulticast mode
[  157.934562][ T5731] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  158.094158][ T5731] usb 3-1: Using ep0 maxpacket: 8
[  158.107266][ T5731] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.127569][ T5731] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.163102][ T5731] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.183257][ T6773] FAULT_INJECTION: forcing a failure.
[  158.183257][ T6773] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.203913][ T5731] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.210176][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) 
[  158.210253][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  158.210292][ T6773] Call Trace:
[  158.210315][ T6773]  <TASK>
[  158.210337][ T6773]  dump_stack_lvl+0xe8/0x150
[  158.210412][ T6773]  should_fail_ex+0x412/0x560
[  158.210498][ T6773]  _copy_to_user+0x31/0xb0
[  158.210586][ T6773]  simple_read_from_buffer+0xe1/0x170
[  158.210666][ T6773]  proc_fail_nth_read+0x1bb/0x230
[  158.210753][ T6773]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.210831][ T6773]  ? rw_verify_area+0x2a6/0x4d0
[  158.210921][ T6773]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.211009][ T6773]  vfs_read+0x20c/0xa70
[  158.211123][ T6773]  ? __pfx___mutex_lock+0x10/0x10
[  158.211217][ T6773]  ? __pfx_vfs_read+0x10/0x10
[  158.211294][ T6773]  ? __fget_files+0x2a/0x420
[  158.211370][ T6773]  ? __fget_files+0x3a0/0x420
[  158.211421][ T6773]  ? __fget_files+0x2a/0x420
[  158.211508][ T6773]  ksys_read+0x150/0x270
[  158.211587][ T6773]  ? __pfx_ksys_read+0x10/0x10
[  158.211687][ T6773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.211751][ T6773]  do_syscall_64+0x15f/0xf80
[  158.211819][ T6773]  ? trace_irq_disable+0x3b/0x140
[  158.211913][ T6773]  ? clear_bhb_loop+0x40/0x90
[  158.211972][ T6773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.212027][ T6773] RIP: 0033:0x7f07edd5d68e
[  158.212080][ T6773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  158.212124][ T6773] RSP: 002b:00007f07eed2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  158.212179][ T6773] RAX: ffffffffffffffda RBX: 00007f07eed2d6c0 RCX: 00007f07edd5d68e
[  158.212213][ T6773] RDX: 000000000000000f RSI: 00007f07eed2d0a0 RDI: 0000000000000004
[  158.212245][ T6773] RBP: 00007f07eed2d090 R08: 0000000000000000 R09: 0000000000000000
[  158.212276][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.212307][ T6773] R13: 00007f07ee016038 R14: 00007f07ee015fa0 R15: 00007f07ee13fa48
[  158.212385][ T6773]  </TASK>
[  158.444848][ T5731] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  158.457118][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.640793][ T6780] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  158.722055][ T5731] usb 3-1: GET_CAPABILITIES returned 0
[  158.728554][ T5731] usbtmc 3-1:16.0: can't read capabilities
[  158.812129][ T6780] ipvlan2: entered allmulticast mode
[  158.829972][ T6780] syz_tun: entered allmulticast mode
[  158.935283][ T6783] loop9: detected capacity change from 0 to 7
[  158.979483][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'.
[  159.008307][ T6783] Dev loop9: unable to read RDB block 7
[  159.035050][ T6783]  loop9: unable to read partition table
[  159.048617][ T6783] loop9: partition table beyond EOD, truncated
[  159.086973][ T6783] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  159.511554][ T5723] usb 3-1: USB disconnect, device number 18
[  160.074621][  T809] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  160.215109][  T809] usb 1-1: device descriptor read/64, error -71
[  160.224357][ T5731] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  160.357211][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'.
[  160.394412][ T5731] usb 2-1: Using ep0 maxpacket: 16
[  160.412128][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.433340][ T5731] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  160.461868][ T5731] usb 2-1: config 0 interface 0 has no altsetting 0
[  160.474150][ T5731] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  160.484153][  T809] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  160.493907][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.509854][ T5731] usb 2-1: config 0 descriptor??
[  160.536853][ T5731] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  160.634173][  T809] usb 1-1: device descriptor read/64, error -71
[  160.737633][ T5631] usb 2-1: USB disconnect, device number 13
[  160.760267][  T809] usb usb1-port1: attempt power cycle
[  161.146217][  T809] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  161.154241][   T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  161.195787][  T809] usb 1-1: device descriptor read/8, error -71
[  161.211495][ T6809] FAULT_INJECTION: forcing a failure.
[  161.211495][ T6809] name failslab, interval 1, probability 0, space 0, times 0
[  161.238939][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.3.350 Not tainted syzkaller #0 PREEMPT(full) 
[  161.238967][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  161.238979][ T6809] Call Trace:
[  161.238987][ T6809]  <TASK>
[  161.238995][ T6809]  dump_stack_lvl+0xe8/0x150
[  161.239023][ T6809]  should_fail_ex+0x412/0x560
[  161.239055][ T6809]  should_failslab+0xa8/0x100
[  161.239088][ T6809]  __kmalloc_noprof+0xe8/0x760
[  161.239114][ T6809]  ? __lock_acquire+0x6b5/0x2cf0
[  161.239136][ T6809]  ? iovec_from_user+0x87/0x250
[  161.239174][ T6809]  iovec_from_user+0x87/0x250
[  161.239207][ T6809]  __import_iovec+0x163/0x7e0
[  161.239245][ T6809]  import_iovec+0x73/0xa0
[  161.239286][ T6809]  ___sys_recvmsg+0x4bd/0x590
[  161.239321][ T6809]  ? __pfx____sys_recvmsg+0x10/0x10
[  161.239355][ T6809]  ? __fget_files+0x2a/0x420
[  161.239397][ T6809]  ? __fget_files+0x3a0/0x420
[  161.239428][ T6809]  do_recvmmsg+0x334/0x800
[  161.239463][ T6809]  ? __pfx_do_recvmmsg+0x10/0x10
[  161.239495][ T6809]  ? _copy_from_user+0x94/0xb0
[  161.239529][ T6809]  __x64_sys_recvmmsg+0x1b7/0x250
[  161.239555][ T6809]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  161.239585][ T6809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.239602][ T6809]  do_syscall_64+0x15f/0xf80
[  161.239624][ T6809]  ? trace_irq_disable+0x3b/0x140
[  161.239648][ T6809]  ? clear_bhb_loop+0x40/0x90
[  161.239667][ T6809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.239683][ T6809] RIP: 0033:0x7fb1fbd9ce59
[  161.239699][ T6809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.239712][ T6809] RSP: 002b:00007fb1fcbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  161.239729][ T6809] RAX: ffffffffffffffda RBX: 00007fb1fc015fa0 RCX: 00007fb1fbd9ce59
[  161.239741][ T6809] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  161.239752][ T6809] RBP: 00007fb1fcbd1090 R08: 0000200000003700 R09: 0000000000000000
[  161.239762][ T6809] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  161.239771][ T6809] R13: 00007fb1fc016038 R14: 00007fb1fc015fa0 R15: 00007fb1fc13fa48
[  161.239798][ T6809]  </TASK>
[  161.478763][   T29] usb 5-1: Using ep0 maxpacket: 8
[  161.501412][   T29] usb 5-1: unable to get BOS descriptor or descriptor too short
[  161.509564][  T809] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  161.543285][   T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.592871][   T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.604984][  T809] usb 1-1: device descriptor read/8, error -71
[  161.637543][   T29] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[  161.651023][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.660594][   T29] usb 5-1: Product: syz
[  161.702017][   T29] usb 5-1: Manufacturer: syz
[  161.736157][  T809] usb usb1-port1: unable to enumerate USB device
[  161.745919][   T29] usb 5-1: SerialNumber: syz
[  161.799581][ T6819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.354'.
[  161.989759][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.014934][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.042244][   T29] usb 5-1: 0:1 : does not exist
[  162.055352][   T29] usb 5-1: 0:2 : does not exist
[  162.174714][   T29] usb 5-1: USB disconnect, device number 16
[  162.272053][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.695356][ T6825] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  163.053038][ T6842] FAULT_INJECTION: forcing a failure.
[  163.053038][ T6842] name failslab, interval 1, probability 0, space 0, times 0
[  163.092586][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT(full) 
[  163.092612][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  163.092624][ T6842] Call Trace:
[  163.092632][ T6842]  <TASK>
[  163.092641][ T6842]  dump_stack_lvl+0xe8/0x150
[  163.092670][ T6842]  should_fail_ex+0x412/0x560
[  163.092700][ T6842]  should_failslab+0xa8/0x100
[  163.092731][ T6842]  __kmalloc_noprof+0xe8/0x760
[  163.092759][ T6842]  ? __pcs_replace_empty_main+0x2df/0x720
[  163.092781][ T6842]  ? __pcs_replace_empty_main+0x25c/0x720
[  163.092805][ T6842]  ? __pcs_replace_empty_main+0x25c/0x720
[  163.092830][ T6842]  __pcs_replace_empty_main+0x2df/0x720
[  163.092861][ T6842]  kmem_cache_alloc_node_noprof+0x441/0x690
[  163.092890][ T6842]  ? ovs_flow_alloc+0x103/0x1f0
[  163.092908][ T6842]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  163.092938][ T6842]  ovs_flow_alloc+0x103/0x1f0
[  163.092960][ T6842]  ovs_flow_cmd_new+0x2b9/0xe80
[  163.092997][ T6842]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  163.093090][ T6842]  ? __nla_parse+0x40/0x60
[  163.093124][ T6842]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  163.093146][ T6842]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  163.093174][ T6842]  genl_family_rcv_msg_doit+0x22a/0x330
[  163.093203][ T6842]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  163.093240][ T6842]  ? bpf_lsm_capable+0x9/0x20
[  163.093260][ T6842]  ? security_capable+0x7e/0x2c0
[  163.093283][ T6842]  genl_rcv_msg+0x61c/0x7a0
[  163.093302][ T6842]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.093316][ T6842]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  163.093344][ T6842]  netlink_rcv_skb+0x232/0x4b0
[  163.093364][ T6842]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.093379][ T6842]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  163.093409][ T6842]  ? down_read+0x270/0x2e0
[  163.093421][ T6842]  ? genl_rcv+0xd/0x40
[  163.093436][ T6842]  genl_rcv+0x28/0x40
[  163.093455][ T6842]  netlink_unicast+0x75c/0x8e0
[  163.093480][ T6842]  netlink_sendmsg+0x813/0xb40
[  163.093506][ T6842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.093528][ T6842]  ? aa_sock_msg_perm+0xf1/0x1b0
[  163.093548][ T6842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  163.093571][ T6842]  ____sys_sendmsg+0x972/0x9f0
[  163.093593][ T6842]  ? __might_fault+0xaf/0x130
[  163.093616][ T6842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.093642][ T6842]  ? import_iovec+0x73/0xa0
[  163.093666][ T6842]  ___sys_sendmsg+0x2a5/0x360
[  163.093686][ T6842]  ? __lock_acquire+0x6b5/0x2cf0
[  163.093704][ T6842]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.093751][ T6842]  ? __fget_files+0x2a/0x420
[  163.093767][ T6842]  ? __fget_files+0x3a0/0x420
[  163.093819][ T6842]  __x64_sys_sendmsg+0x1bd/0x2a0
[  163.093858][ T6842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.093886][ T6842]  ? __pfx_ksys_write+0x10/0x10
[  163.093917][ T6842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.093932][ T6842]  do_syscall_64+0x15f/0xf80
[  163.093958][ T6842]  ? trace_irq_disable+0x3b/0x140
[  163.093980][ T6842]  ? clear_bhb_loop+0x40/0x90
[  163.094004][ T6842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.094019][ T6842] RIP: 0033:0x7f28b659ce59
[  163.094056][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.094077][ T6842] RSP: 002b:00007f28b73e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.094098][ T6842] RAX: ffffffffffffffda RBX: 00007f28b6815fa0 RCX: 00007f28b659ce59
[  163.094111][ T6842] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  163.094123][ T6842] RBP: 00007f28b73e0090 R08: 0000000000000000 R09: 0000000000000000
[  163.094134][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  163.094144][ T6842] R13: 00007f28b6816038 R14: 00007f28b6815fa0 R15: 00007f28b693fa48
[  163.094176][ T6842]  </TASK>
[  163.487372][ T6825] ipvlan2: entered allmulticast mode
[  163.950505][ T6842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.154258][ T5631] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  164.324229][ T5631] usb 2-1: Using ep0 maxpacket: 16
[  164.341698][ T5631] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.378948][ T5631] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  164.412798][ T5631] usb 2-1: config 0 interface 0 has no altsetting 0
[  164.433178][ T5631] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  164.465799][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.489159][ T5631] usb 2-1: config 0 descriptor??
[  164.518170][ T5631] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  164.726705][ T5723] usb 2-1: USB disconnect, device number 14
[  165.201326][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.368'.
[  165.674852][ T5631] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  165.759375][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'.
[  165.844333][ T5631] usb 1-1: device descriptor read/64, error -71
[  166.024298][ T5723] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  166.094417][ T5631] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  166.195208][ T5723] usb 5-1: Using ep0 maxpacket: 8
[  166.212203][ T5723] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.236549][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.248564][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.259585][ T5631] usb 1-1: device descriptor read/64, error -71
[  166.260332][ T5723] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.282828][ T5723] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  166.301606][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.386981][ T5631] usb usb1-port1: attempt power cycle
[  166.588371][ T6881] netlink: 236 bytes leftover after parsing attributes in process `syz.2.378'.
[  166.624603][ T6881] netlink: 236 bytes leftover after parsing attributes in process `syz.2.378'.
[  166.673465][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'.
[  166.772367][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'.
[  166.772783][ T1018] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.794095][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  166.805107][ T5631] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  166.828939][ T1018] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.842945][ T1018] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.856304][ T5631] usb 1-1: device descriptor read/8, error -71
[  166.872158][ T1018] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.055099][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  167.090564][ T5723] usb 5-1: usb_control_msg returned -71
[  167.101084][ T5723] usbtmc 5-1:16.0: can't read capabilities
[  167.124242][ T5631] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  167.167961][ T5631] usb 1-1: device descriptor read/8, error -71
[  167.208387][ T5723] usb 5-1: USB disconnect, device number 17
[  167.235898][   T10] usb 4-1: Using ep0 maxpacket: 16
[  167.243333][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.275156][   T10] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  167.291386][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  167.296351][   T29] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  167.309844][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  167.313940][ T5631] usb usb1-port1: unable to enumerate USB device
[  167.322440][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.351303][   T10] usb 4-1: config 0 descriptor??
[  167.370889][   T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  167.496364][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.518596][   T29] usb 3-1: config 0 has no interfaces?
[  167.534267][   T29] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  167.545231][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.554644][   T29] usb 3-1: Product: syz
[  167.558974][   T29] usb 3-1: Manufacturer: syz
[  167.563728][   T29] usb 3-1: SerialNumber: syz
[  167.581057][ T5631] usb 4-1: USB disconnect, device number 15
[  167.590017][   T29] usb 3-1: config 0 descriptor??
[  167.802944][ T6886] FAULT_INJECTION: forcing a failure.
[  167.802944][ T6886] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.818422][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.2.380 Not tainted syzkaller #0 PREEMPT(full) 
[  167.818452][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  167.818464][ T6886] Call Trace:
[  167.818473][ T6886]  <TASK>
[  167.818482][ T6886]  dump_stack_lvl+0xe8/0x150
[  167.818512][ T6886]  should_fail_ex+0x412/0x560
[  167.818544][ T6886]  _copy_from_user+0x2d/0xb0
[  167.818574][ T6886]  raw_ioctl+0xbe2/0x41c0
[  167.818601][ T6886]  ? tomoyo_path_number_perm+0x219/0x630
[  167.818627][ T6886]  ? tomoyo_path_number_perm+0x219/0x630
[  167.818651][ T6886]  ? do_vfs_ioctl+0x1166/0x1530
[  167.818689][ T6886]  ? __pfx_raw_ioctl+0x10/0x10
[  167.818718][ T6886]  ? vfs_write+0x9bc/0xb90
[  167.818778][ T6886]  ? ksys_write+0x1fc/0x270
[  167.818812][ T6886]  ? bpf_lsm_file_ioctl+0x9/0x20
[  167.818842][ T6886]  ? __pfx_raw_ioctl+0x10/0x10
[  167.818866][ T6886]  __se_sys_ioctl+0xfc/0x170
[  167.818894][ T6886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.818916][ T6886]  do_syscall_64+0x15f/0xf80
[  167.818943][ T6886]  ? trace_irq_disable+0x3b/0x140
[  167.818973][ T6886]  ? clear_bhb_loop+0x40/0x90
[  167.818996][ T6886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.819015][ T6886] RIP: 0033:0x7f272219caeb
[  167.819034][ T6886] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  167.819049][ T6886] RSP: 002b:00007f27230b8f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.819069][ T6886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f272219caeb
[  167.819086][ T6886] RDX: 00007f27230b9fe0 RSI: 0000000080085502 RDI: 0000000000000003
[  167.819095][ T6886] RBP: 00007f27230bb090 R08: 0000000000000000 R09: 0000000000000000
[  167.819103][ T6886] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  167.819117][ T6886] R13: 0000000000000000 R14: 00007f2722415fa0 R15: 00007f272253fa48
[  167.819139][ T6886]  </TASK>
[  168.484637][ T5631] usb 3-1: USB disconnect, device number 19
[  168.756472][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'.
[  169.026184][   T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  169.194173][   T29] usb 1-1: Using ep0 maxpacket: 8
[  169.218881][   T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  169.259734][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  169.292370][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.328782][   T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.375646][   T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  169.394307][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.664888][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  169.795343][  T899] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  169.815129][ T6935] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  169.826501][   T24] usb 5-1: too many configurations: 112, using maximum allowed: 8
[  169.853181][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'.
[  169.866251][   T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  169.880175][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.891010][   T24] usb 5-1: Product: syz
[  169.898166][   T24] usb 5-1: Manufacturer: syz
[  169.904646][ T5723] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  169.912572][   T24] usb 5-1: SerialNumber: syz
[  169.926750][   T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  169.956350][  T899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.988970][  T899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.008053][  T899] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  170.018357][  T899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  170.030760][  T899] usb 4-1: SerialNumber: syz
[  170.045445][ T5723] usb 2-1: device descriptor read/64, error -71
[  170.098001][  T809] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  170.204669][   T29] usb 1-1: usb_control_msg returned -71
[  170.224966][   T29] usbtmc 1-1:16.0: can't read capabilities
[  170.296228][ T5723] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  170.345718][   T29] usb 1-1: USB disconnect, device number 19
[  170.455873][ T5723] usb 2-1: device descriptor read/64, error -71
[  170.493002][ T6927] netlink: 'syz.3.395': attribute type 16 has an invalid length.
[  170.533035][ T6927] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.395'.
[  170.596225][ T5723] usb usb2-port1: attempt power cycle
[  170.651785][ T6942] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  170.823903][  T899] usb 4-1: cannot find UAC_HEADER
[  171.014792][ T5723] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  171.055013][ T5723] usb 2-1: device descriptor read/8, error -71
[  171.083951][  T899] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  171.130182][  T899] usb 4-1: USB disconnect, device number 16
[  171.157992][  T809] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  171.203071][  T809] ath9k_htc: Failed to initialize the device
[  171.264659][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.331521][ T5723] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  171.351119][  T809] usb 5-1: ath9k_htc: USB layer deinitialized
[  171.446169][ T5723] usb 2-1: device descriptor read/8, error -71
[  171.614505][ T5723] usb usb2-port1: unable to enumerate USB device
[  171.922022][ T6942] ipvlan2: entered allmulticast mode
[  171.946180][ T6942] syz_tun: entered allmulticast mode
[  172.017622][   T24] usb 5-1: USB disconnect, device number 18
[  172.464222][ T5723] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  172.605538][ T6959] netlink: 52 bytes leftover after parsing attributes in process `syz.0.405'.
[  172.624209][ T5723] usb 4-1: Using ep0 maxpacket: 8
[  173.801852][ T6996] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  173.870181][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'.
[  173.988110][ T5731] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  174.015299][ T7001] syzkaller0: entered promiscuous mode
[  174.020940][ T7001] syzkaller0: entered allmulticast mode
[  174.041995][ T7001] 0: reclassify loop, rule prio 0, protocol 800
[  174.174459][ T5731] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.211342][ T5731] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  174.261684][ T5731] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  174.305786][ T5731] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.332521][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.393204][ T5731] usb 3-1: Product: syz
[  174.409092][ T5731] usb 3-1: Manufacturer: syz
[  174.423088][ T5731] usb 3-1: SerialNumber: syz
[  174.650922][ T6993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  174.704399][ T6993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  175.347830][ T6993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  175.369575][ T6993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  175.600972][ T5731] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  175.626595][ T5731] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  175.668697][ T5731] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  175.737072][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[  175.835237][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short
[  175.873908][ T5723] usb 4-1: unable to read config index 0 descriptor/start: -71
[  175.900658][ T5723] usb 4-1: can't read configurations, error -71
[  175.999276][ T7031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.428'.
[  176.755136][ T7038] binder: 7037:7038 ioctl 4030582b 200000000240 returned -22
[  176.795060][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  176.819838][ T7038] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  176.983228][ T5731] cdc_ncm 3-1:1.0: setting tx_max = 16384
[  177.019973][   T10] usb 5-1: Using ep0 maxpacket: 8
[  177.041847][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.093037][   T10] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  177.115984][ T5731] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  177.138231][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.160250][   T10] usb 5-1: Product: syz
[  177.179359][   T10] usb 5-1: Manufacturer: syz
[  177.193996][   T10] usb 5-1: SerialNumber: syz
[  177.200374][ T5731] usb 3-1: USB disconnect, device number 20
[  177.220925][ T5731] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  177.252972][   T10] usb 5-1: config 0 descriptor??
[  177.273307][   T10] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22
[  177.493110][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'.
[  177.736971][ T7061] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  177.764564][ T5731] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  177.932526][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  177.974334][ T5731] usb 3-1: Using ep0 maxpacket: 8
[  179.124438][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  179.474255][ T7088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.448'.
[  179.535820][   T10] usb 1-1: too many configurations: 112, using maximum allowed: 8
[  179.578925][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  179.600802][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.622693][   T10] usb 1-1: Product: syz
[  179.630706][   T10] usb 1-1: Manufacturer: syz
[  179.650419][   T10] usb 1-1: SerialNumber: syz
[  179.690281][   T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  179.719642][ T5723] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  179.981352][   T29] usb 5-1: USB disconnect, device number 19
[  180.027348][ T7081] random: crng reseeded on system resumption
[  180.158753][   T24] usb 1-1: USB disconnect, device number 20
[  180.564978][ T5731] usb 3-1: unable to get BOS descriptor or descriptor too short
[  180.585137][ T5731] usb 3-1: unable to read config index 0 descriptor/start: -71
[  180.631163][ T5731] usb 3-1: can't read configurations, error -71
[  180.662540][ T7104] netlink: 9 bytes leftover after parsing attributes in process `syz.1.453'.
[  180.700077][ T7100] netlink: 'syz.4.450': attribute type 2 has an invalid length.
[  180.715393][ T7106] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  180.751117][ T7097] netlink: 'syz.4.450': attribute type 2 has an invalid length.
[  180.759412][ T7104] gretap0: entered promiscuous mode
[  180.834903][ T5723] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  180.864809][ T5723] ath9k_htc: Failed to initialize the device
[  180.912584][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[  181.037914][ T7104] warning: `syz.1.453' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  181.229405][ T7104] tap0: tun_chr_ioctl cmd 1074812118
[  181.280288][ T5633] Bluetooth: unknown link type 232
[  181.286802][ T5633] Bluetooth: hci3: connection err: -111
[  181.299997][ T7104] netlink: 5 bytes leftover after parsing attributes in process `syz.1.453'.
[  181.356428][ T7104] 0ªî{X¹¦: renamed from gretap0
[  181.402770][ T7104] 0ªî{X¹¦: left promiscuous mode
[  181.426879][ T7104] 0ªî{X¹¦: entered allmulticast mode
[  181.456371][ T7104] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  181.819960][ T7125] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  182.030400][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'.
[  182.269359][ T7135] x_tables: duplicate underflow at hook 1
[  182.458072][ T7133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.460'.
[  183.214183][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  183.262254][ T7145] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.394224][   T24] usb 2-1: Using ep0 maxpacket: 8
[  183.433610][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  183.473694][   T24] usb 2-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  183.509810][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.528759][   T24] usb 2-1: Product: syz
[  183.545197][   T24] usb 2-1: Manufacturer: syz
[  183.567159][   T24] usb 2-1: SerialNumber: syz
[  184.275502][ T7164] loop9: detected capacity change from 0 to 4096
[  184.389653][ T7169] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  185.286736][ T7180] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  186.992573][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'.
[  187.150693][ T7211] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  187.371662][ T7219] fuse: Unknown parameter 'group_id00000000000000000000'
[  187.390265][   T24] usb 2-1: USB disconnect, device number 19
[  187.470515][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.483'.
[  187.678832][ T7227] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.074158][ T5723] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  188.245251][ T5723] usb 4-1: Using ep0 maxpacket: 8
[  188.273365][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short
[  188.292981][ T5723] usb 4-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  188.337930][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.365759][ T5723] usb 4-1: Product: syz
[  188.382063][ T5723] usb 4-1: Manufacturer: syz
[  188.403463][ T5723] usb 4-1: SerialNumber: syz
[  189.215415][ T5731] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  189.404289][ T5731] usb 3-1: Using ep0 maxpacket: 8
[  189.416346][ T5731] usb 3-1: config 0 has an invalid interface number: 33 but max is 1
[  189.431960][ T5731] usb 3-1: config 0 has no interface number 1
[  189.446618][ T5731] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  189.488433][ T5731] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[  189.561018][ T5731] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  189.589693][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.617998][ T5731] usb 3-1: Product: syz
[  189.630238][ T5731] usb 3-1: Manufacturer: syz
[  189.650531][ T5731] usb 3-1: SerialNumber: syz
[  189.688790][ T5731] usb 3-1: config 0 descriptor??
[  189.827214][ T5731] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  190.402650][ T5731] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  190.419661][ T2368] pvrusb2: Invalid read control endpoint
[  190.553746][ T7265] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  190.683977][ T5731] usb 3-1: USB disconnect, device number 23
[  190.697145][ T2368] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  190.893278][ T2368] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  191.647860][ T5723] usb 4-1: USB disconnect, device number 19
[  192.247724][ T7289] tipc: Failed to remove unknown binding: 66,0,0/0:1383941320/1383941322
[  192.291150][ T7289] tipc: Failed to remove unknown binding: 66,0,0/0:1383941320/1383941321
[  192.311450][ T7295] tipc: Failed to remove unknown binding: 66,0,0/0:1383941320/1383941322
[  192.321893][ T7287] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  192.331672][ T7295] tipc: Failed to remove unknown binding: 66,0,0/0:1383941320/1383941321
[  192.487103][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'.
[  192.583780][ T7300] program syz.4.514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.684531][ T5631] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  192.718117][ T7303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  192.854210][ T5631] usb 4-1: Using ep0 maxpacket: 16
[  192.886066][ T5631] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.928740][ T5631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  192.971785][ T5631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  193.019727][ T5631] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  193.055391][ T5631] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.098477][ T5631] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  193.134247][ T5631] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  193.155940][ T5631] usb 4-1: Manufacturer: syz
Stopping sshd: [  193.191713][ T5631] usb 4-1: config 0 descriptor??
[  193.213714][ T5723] IPVS: starting estimator thread 0...
[  193.344274][ T7310] IPVS: using max 29 ests per chain, 69600 per kthread
stopped /usr/sbin/sshd (pid 5384)
OK
[  193.636376][ T5631] rc_core: IR keymap rc-hauppauge not found
[  193.664737][ T5631] Registered IR keymap rc-empty
[  193.679152][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
Stopping crond: [  193.716304][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  193.754299][  T809] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  193.778822][ T5631] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  193.827400][ T5631] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8
[  193.872969][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
stopped /usr/sbin/crond (pid 5368)
[  193.924632][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  193.955129][  T809] usb 2-1: Using ep0 maxpacket: 32
OK
[  193.967242][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  193.981000][  T809] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  194.014622][  T809] usb 2-1: config 0 has no interface number 0
[  194.037219][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.052572][  T809] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  194.084255][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.101642][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.128836][  T809] usb 2-1: Product: syz
[  194.135022][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.151682][  T809] usb 2-1: Manufacturer: syz
[  194.167905][  T809] usb 2-1: SerialNumber: syz
[  194.174385][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.201717][  T809] usb 2-1: config 0 descriptor??
[  194.213227][ T7299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  194.226293][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.255568][  T809] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  194.290984][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.299973][  T809] usb 2-1: selecting invalid altsetting 1
[  194.320903][  T809] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  194.338332][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.357477][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.364992][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  194.394303][ T5631] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.408341][  T809] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  194.453713][  T809] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  194.462935][ T5631] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  194.481057][  T809] usb 2-1: media controller created
[  194.487004][ T5631] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  194.536150][ T5631] usb 4-1: USB disconnect, device number 20
[  194.557455][  T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  194.705635][  T809] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  194.716350][  T809] zl10353_read_register: readreg error (reg=127, ret==-71)
Stopping dhcpcd.[  194.753044][  T809] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
..
[  194.825338][   T29] usb 1-1: new high-speed USB device number 21 using dummy_hcd
stopped /sbin/dhcpcd (pid 5291)
[  194.874196][  T809] usb 2-1: USB disconnect, device number 20
[  194.994448][   T29] usb 1-1: Using ep0 maxpacket: 8
[  195.003404][   T29] usb 1-1: unable to get BOS descriptor or descriptor too short
[  195.024273][   T29] usb 1-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  195.042688][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.061966][   T29] usb 1-1: Product: syz
[  195.082737][   T29] usb 1-1: Manufacturer: syz
[  195.098964][   T29] usb 1-1: SerialNumber: syz
Stopping network: [  196.052635][ T7357] tipc: Failed to remove unknown binding: 66,0,0/0:1667934142/1667934144
[  196.085293][ T7362] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  196.106555][ T7357] tipc: Failed to remove unknown binding: 66,0,0/0:1667934142/1667934143
[  196.176946][ T7357] tipc: Failed to remove unknown binding: 66,0,0/0:1667934142/1667934144
[  196.209717][ T7357] tipc: Failed to remove unknown binding: 66,0,0/0:1667934142/1667934143
[  197.084097][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  197.252376][ T7380] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  197.427699][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.530'.
OK
Stopping iptables: [  198.144102][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  198.263731][   T29] usb 1-1: USB disconnect, device number 21
OK
[  198.444847][   T24] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  198.573824][ T7398] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
Stopping system message bus: [  198.669048][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.706088][   T24] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  198.726883][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.765892][   T24] usb 2-1: Product: syz
[  198.781972][   T24] usb 2-1: Manufacturer: syz
[  198.809053][   T24] usb 2-1: SerialNumber: syz
[  198.891044][   T24] usb 2-1: config 0 descriptor??
[  198.967653][   T24] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  199.137858][   T24] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  199.184772][   T24] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  199.274870][   T24] usb 2-1: USB disconnect, device number 21
[  200.014904][ T7412] bridge_slave_0: left allmulticast mode
[  200.053853][ T7412] bridge_slave_0: left promiscuous mode
[  200.069234][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state
done
[  200.137405][ T7412] bridge_slave_1: left allmulticast mode
[  200.169039][ T7412] bridge_slave_1: left promiscuous mode
[  200.201319][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.287017][ T7412] bond0: (slave bond_slave_0): Releasing backup interface
[  200.323403][ T7412] bond0: (slave bond_slave_1): Releasing backup interface
[  200.360501][ T7424] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  200.396023][ T7412] team0: Port device team_slave_0 removed
[  200.427430][ T7412] team0: Port device team_slave_1 removed
[  200.447677][ T7412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.460941][ T7412] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.472786][ T7412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.490288][ T7412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.503282][ T7412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  201.082597][ T7440] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[  201.112439][ T7443] sctp: [Deprecated]: syz.4.543 (pid 7443) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.112439][ T7443] Use struct sctp_sack_info instead
[  201.200663][ T7440] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.224550][ T5723] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  201.405409][ T5723] usb 1-1: Using ep0 maxpacket: 8
[  201.422944][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short
[  201.454696][ T5723] usb 1-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  201.471597][ T7444] bond1: (slave veth3): Enslaving as an active interface with a down link
[  201.488564][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.516852][ T5723] usb 1-1: Product: syz
[  201.531246][ T5723] usb 1-1: SerialNumber: syz
[  201.705128][ T7445] bond1: (slave dummy0): making interface the new active one
[  201.746976][ T7445] dummy0: entered promiscuous mode
[  201.752710][ T7449] vivid-007: =================  START STATUS  =================
[  201.762702][ T7445] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  201.772156][ T7449] vivid-007: Generate PTS: true
[  201.780292][ T7449] vivid-007: Generate SCR: true
[  201.785948][ T7449] tpg source WxH: 320x240 (Y'CbCr)
[  201.792618][ T7449] tpg field: 1
[  201.800617][ T7449] tpg crop: (0,0)/320x240
[  201.816307][ T7449] tpg compose: (0,0)/320x240
[  201.825809][ T7440] bond1 (unregistering): (slave veth3): Releasing active interface
[  201.834312][ T7449] tpg colorspace: 8
[  201.838648][ T7449] tpg transfer function: 0/0
[  201.843658][ T7449] tpg Y'CbCr encoding: 0/0
[  201.848746][ T7449] tpg quantization: 0/0
[  201.861945][ T7449] tpg RGB range: 0/2
[  201.872091][ T7449] vivid-007: ==================  END STATUS  ==================
[  201.906793][ T7440] bond1 (unregistering): (slave dummy0): Releasing active interface
Stopping klogd: [  201.978642][ T7440] bond1 (unregistering): Released all slaves
[  202.184008][ T7461] iommufd_mock iommufd_mock0: Adding to iommu group 0
OK
Stopping acpid: [  202.371712][ T7469] netlink: 36 bytes leftover after parsing attributes in process `syz.4.551'.
[  202.777296][ T7475] tipc: Failed to remove unknown binding: 66,0,0/0:2176233401/2176233403
[  202.807648][ T7475] tipc: Failed to remove unknown binding: 66,0,0/0:2176233401/2176233402
[  202.829144][ T7475] tipc: Failed to remove unknown binding: 66,0,0/0:2176233401/2176233403
[  202.855313][ T7475] tipc: Failed to remove unknown binding: 66,0,0/0:2176233401/2176233402
[  202.881200][ T7482] x_tables: ip6_tables: mh match: only valid for protocol 135
[  203.008756][ T7484] ALSA: mixer_oss: invalid OSS volume ''
[  203.174310][ T5631] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  203.335012][ T5631] usb 5-1: Using ep0 maxpacket: 8
[  203.347467][ T5631] usb 5-1: unable to get BOS descriptor or descriptor too short
[  203.366874][ T5631] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[  203.387263][ T5631] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 80, changing to 7
[  203.408158][ T5631] usb 5-1: string descriptor 0 read error: -22
[  203.415902][ T5631] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  203.427287][ T5631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.476906][ T5631] usb 5-1: unit 1 not found!
[  203.490931][ T5631] usb 5-1: unit 2 not found!
OK
Stopping syslogd: stopped /sbin/syslogd (pid 4979)
OK
[  204.185455][ T5723] usb 1-1: USB disconnect, device number 22
[  204.227727][ T5631] usb 5-1: USB disconnect, device number 20
[  204.321765][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'.
[  204.335931][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'.
[  204.574657][ T7515] FAULT_INJECTION: forcing a failure.
[  204.574657][ T7515] name failslab, interval 1, probability 0, space 0, times 0
[  204.601614][ T7514] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  204.613957][ T7515] CPU: 0 UID: 0 PID: 7515 Comm: syz.4.563 Not tainted syzkaller #0 PREEMPT(full) 
[  204.613986][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  204.613999][ T7515] Call Trace:
[  204.614007][ T7515]  <TASK>
[  204.614016][ T7515]  dump_stack_lvl+0xe8/0x150
[  204.614047][ T7515]  should_fail_ex+0x412/0x560
[  204.614080][ T7515]  should_failslab+0xa8/0x100
[  204.614113][ T7515]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  204.614142][ T7515]  ? dup_task_struct+0x52/0x840
[  204.614169][ T7515]  dup_task_struct+0x52/0x840
[  204.614189][ T7515]  ? _raw_spin_unlock_irq+0x23/0x50
[  204.614221][ T7515]  copy_process+0x89b/0x4440
[  204.614283][ T7515]  ? __pfx_copy_process+0x10/0x10
[  204.614314][ T7515]  ? mutex_init_lockdep+0xdf/0x110
[  204.614344][ T7515]  vhost_task_create+0x1f9/0x380
[  204.614372][ T7515]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  204.614399][ T7515]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  204.614427][ T7515]  ? __pfx_vhost_task_create+0x10/0x10
[  204.614462][ T7515]  ? __pfx_vhost_task_fn+0x10/0x10
[  204.614493][ T7515]  ? __lock_acquire+0x6b5/0x2cf0
[  204.614517][ T7515]  ? kasan_save_track+0x4f/0x80
[  204.614542][ T7515]  ? kasan_save_track+0x3e/0x80
[  204.614566][ T7515]  ? kasan_save_free_info+0x46/0x50
[  204.614585][ T7515]  ? __kasan_slab_free+0x5c/0x80
[  204.614610][ T7515]  ? kfree+0x1c5/0x640
[  204.614635][ T7515]  kvm_mmu_post_init_vm+0x147/0x2d0
[  204.614668][ T7515]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  204.614707][ T7515]  ? __mutex_trylock_common+0x158/0x260
[  204.614734][ T7515]  ? look_up_lock_class+0x57/0x110
[  204.614763][ T7515]  ? register_lock_class+0x31/0x2e0
[  204.614784][ T7515]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  204.614817][ T7515]  ? __lock_acquire+0x6b5/0x2cf0
[  204.614841][ T7515]  ? __mutex_lock+0x319/0x1550
[  204.614877][ T7515]  ? kasan_quarantine_put+0xbb/0x1f0
[  204.614915][ T7515]  ? do_raw_write_lock+0x11d/0x260
[  204.614961][ T7515]  kvm_vcpu_ioctl+0xa62/0xfd0
[  204.614995][ T7515]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  204.615019][ T7515]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  204.615069][ T7515]  ? __fget_files+0x2a/0x420
[  204.615096][ T7515]  ? __fget_files+0x2a/0x420
[  204.615118][ T7515]  ? __fget_files+0x3a0/0x420
[  204.615140][ T7515]  ? __fget_files+0x2a/0x420
[  204.615167][ T7515]  ? bpf_lsm_file_ioctl+0x9/0x20
[  204.615196][ T7515]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  204.615223][ T7515]  __se_sys_ioctl+0xfc/0x170
[  204.615260][ T7515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.615281][ T7515]  do_syscall_64+0x15f/0xf80
[  204.615308][ T7515]  ? trace_irq_disable+0x3b/0x140
[  204.615336][ T7515]  ? clear_bhb_loop+0x40/0x90
[  204.615372][ T7515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.615391][ T7515] RIP: 0033:0x7f28b659ce59
[  204.615411][ T7515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.615427][ T7515] RSP: 002b:00007f28b73bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  204.615448][ T7515] RAX: ffffffffffffffda RBX: 00007f28b6816090 RCX: 00007f28b659ce59
[  204.615462][ T7515] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  204.615474][ T7515] RBP: 00007f28b73bf090 R08: 0000000000000000 R09: 0000000000000000
[  204.615485][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.615497][ T7515] R13: 00007f28b6816128 R14: 00007f28b6816090 R15: 00007f28b693fa48
[  204.615529][ T7515]  </TASK>
umount: can't remount debugfs read-only
[  205.338863][ T7522] netlink: 'syz.4.566': attribute type 13 has an invalid length.
[  205.373084][ T7522] netlink: 'syz.4.566': attribute type 17 has an invalid length.
[  205.503288][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.518544][ T7522] 8021q: adding VLAN 0 to HW filter on device team0
[  205.538177][ T7522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.630628][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.645611][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.671575][ T7522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  205.683791][ T7522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.732222][ T7522] veth1_vlan: left promiscuous mode
[  205.755702][ T7522] veth0_vlan: left promiscuous mode
[  205.763570][ T7522] veth0_vlan: entered promiscuous mode
[  205.781806][ T7522] veth1_vlan: entered promiscuous mode
[  205.800504][ T7522] veth1_macvtap: left promiscuous mode
[  205.812730][ T7522] veth0_macvtap: left promiscuous mode
[  205.820523][ T7522] veth0_macvtap: entered promiscuous mode
[  205.829105][ T7522] veth1_macvtap: entered promiscuous mode
[  205.848809][ T7522] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  205.862664][ T7522] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  205.898593][ T7522] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  205.929687][ T7522] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  205.964203][ T7522] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network
[  206.017720][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.025073][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.069122][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.076462][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.474867][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.497767][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.536311][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.548668][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.558924][ T7536] tipc: Failed to remove unknown binding: 66,0,0/0:4120346264/4120346266
[  206.571744][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.581276][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.609163][ T7536] tipc: Failed to remove unknown binding: 66,0,0/0:4120346264/4120346265
[  206.621371][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.653622][ T7536] tipc: Failed to remove unknown binding: 66,0,0/0:4120346264/4120346266
[  206.664908][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.682650][ T7536] tipc: Failed to remove unknown binding: 66,0,0/0:4120346264/4120346265
[  206.735174][  T899] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  206.896132][  T899] usb 5-1: Using ep0 maxpacket: 8
[  206.916299][  T899] usb 5-1: unable to get BOS descriptor or descriptor too short
[  206.944217][  T899] usb 5-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40
[  206.964487][  T899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.979982][  T899] usb 5-1: Product: syz
[  206.989810][  T899] usb 5-1: SerialNumber: syz
[  207.015874][ T7542] x_tables: ip6_tables: mh match: only valid for protocol 135
[  207.163315][ T7546] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  207.336363][   T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  207.632272][   T10] usb 1-1: Using ep0 maxpacket: 8
[  207.668074][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  207.699086][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[  207.824284][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 80, changing to 7
[  207.852745][   T10] usb 1-1: string descriptor 0 read error: -22
[  207.869604][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  207.893587][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.024382][   T10] usb 1-1: unit 1 not found!
[  208.042610][   T10] usb 1-1: unit 2 not found!
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  208.407461][   T10] usb 1-1: USB disconnect, device number 23
Connection to 10.128.0.136 closed by remote host.
Sent SIGKILL to all processes
Requesting system poweroff
[  210.327743][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.634589][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.781240][ T2368] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing.
[  210.826620][ T7570] smc: removing smcd device lo
[  210.836215][ T2368] pvrusb2: Did you install the pvrusb2 firmware files in their proper location?
[  210.866388][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.881325][ T2368] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw
[  210.914344][ T2368] pvrusb2: Failure uploading firmware1
[  210.920056][ T2368] pvrusb2: Device initialization was not successful.
[  210.930824][ T2368] pvrusb2: Giving up since device microcontroller firmware appears to be missing.
[  210.940485][ T2368] pvrusb2: Failed to submit write-control URB status=-19
[  210.948284][ T5731] pvrusb2: Device being rendered inoperable
[  210.956279][ T2368] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  210.965603][ T2368] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  210.975743][ T2368] ------------[ cut here ]------------
[  210.981256][ T2368] ret
[  210.981280][ T2368] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#1: pvrusb2-context/2368
[  210.999371][ T2368] Modules linked in:
[  211.004556][ T2368] CPU: 1 UID: 0 PID: 2368 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) 
[  211.014595][ T2368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  211.024950][ T2368] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30
[  211.032061][ T2368] Code: bb fb e9 5d fc ff ff e8 88 de bb fb c6 05 d9 cf 10 0a 01 48 c7 c7 60 f2 53 8c e8 55 c7 1d fb e9 85 fc ff ff e8 6b de bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 f3 53 8c 4c 89 e2 e8 55 67 22 fb e9
[  211.052450][ T2368] RSP: 0018:ffffc900073d7670 EFLAGS: 00010293
[  211.058667][ T2368] RAX: ffffffff8609e5f5 RBX: dffffc0000000000 RCX: ffff88802c553d80
[  211.066750][ T2368] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[  211.074804][ T2368] RBP: 0000000000000001 R08: ffffffff9030bcf7 R09: 1ffffffff206179e
[  211.082808][ T2368] R10: dffffc0000000000 R11: fffffbfff206179f R12: ffffffff8cae5400
[  211.090916][ T2368] R13: 0000000000001770 R14: ffff88802bcdb0b0 R15: 00000000fffffff5
[  211.099085][ T2368] FS:  0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000
[  211.108182][ T2368] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.114964][ T2368] CR2: 0000200000404030 CR3: 00000000332b4000 CR4: 00000000003526f0
[  211.122999][ T2368] Call Trace:
[  211.126367][ T2368]  <TASK>
[  211.129343][ T2368]  ? kfree+0x1c5/0x640
[  211.134319][ T2368]  ? _request_firmware+0xf11/0x1780
[  211.139616][ T2368]  ? __kmalloc_cache_noprof+0x15b/0x660
[  211.146166][ T2368]  _request_firmware+0x1052/0x1780
[  211.151393][ T2368]  ? __pfx__request_firmware+0x10/0x10
[  211.158168][ T2368]  request_firmware+0x36/0x50
[  211.162934][ T2368]  pvr2_locate_firmware+0xb3/0x500
[  211.168509][ T2368]  pvr2_upload_firmware1+0x1ba/0x910
[  211.173883][ T2368]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  211.180042][ T2368]  ? __pfx_pvr2_upload_firmware1+0x10/0x10
[  211.185992][ T2368]  ? pvr2_hdw_initialize+0x3d7/0x3c50
[  211.191453][ T2368]  pvr2_hdw_initialize+0x428/0x3c50
[  211.196814][ T2368]  ? __pfx___mutex_trylock_common+0x10/0x10
[  211.203574][ T2368]  ? __pfx_pvr2_hdw_initialize+0x10/0x10
[  211.209338][ T2368]  ? rcu_is_watching+0x15/0xb0
[  211.214243][ T2368]  ? trace_contention_end+0x3d/0x140
[  211.219601][ T2368]  ? pvr2_context_thread_func+0x26a/0xb40
[  211.225553][ T2368]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  211.231290][ T2368]  ? pvr2_context_thread_func+0x102/0xb40
[  211.238071][ T2368]  ? __pfx___schedule+0x10/0x10
[  211.243040][ T2368]  ? __pfx___mutex_lock+0x10/0x10
[  211.248694][ T2368]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  211.254838][ T2368]  ? schedule+0x90/0x360
[  211.259143][ T2368]  ? schedule+0x16e/0x360
[  211.263518][ T2368]  pvr2_context_thread_func+0x490/0xb40
[  211.269262][ T2368]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  211.275440][ T2368]  ? __pfx_autoremove_wake_function+0x10/0x10
[  211.282248][ T2368]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  211.288185][ T2368]  ? __kthread_parkme+0x7a/0x1f0
[  211.293187][ T2368]  kthread+0x389/0x470
[  211.297386][ T2368]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  211.303612][ T2368]  ? __pfx_kthread+0x10/0x10
[  211.308319][ T2368]  ret_from_fork+0x514/0xb70
[  211.312987][ T2368]  ? __pfx_ret_from_fork+0x10/0x10
[  211.318451][ T2368]  ? __switch_to+0xc79/0x1410
[  211.323193][ T2368]  ? __pfx_kthread+0x10/0x10
[  211.327894][ T2368]  ret_from_fork_asm+0x1a/0x30
[  211.332724][ T2368]  </TASK>
[  211.336577][ T2368] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  211.343918][ T2368] CPU: 1 UID: 0 PID: 2368 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) 
[  211.353682][ T2368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  211.363794][ T2368] Call Trace:
[  211.367114][ T2368]  <TASK>
[  211.370073][ T2368]  vpanic+0x56c/0xa60
[  211.374108][ T2368]  ? __pfx__printk+0x10/0x10
[  211.378748][ T2368]  ? __pfx_vpanic+0x10/0x10
[  211.383346][ T2368]  ? is_bpf_text_address+0x292/0x2b0
[  211.388667][ T2368]  ? is_bpf_text_address+0x26/0x2b0
[  211.394002][ T2368]  panic+0xc5/0xd0
[  211.397767][ T2368]  ? __pfx_panic+0x10/0x10
[  211.402238][ T2368]  ? ret_from_fork_asm+0x1a/0x30
[  211.407231][ T2368]  __warn+0x315/0x4c0
[  211.411262][ T2368]  ? firmware_fallback_sysfs+0x746/0xa30
[  211.416950][ T2368]  ? firmware_fallback_sysfs+0x746/0xa30
[  211.422638][ T2368]  __report_bug+0x29a/0x540
[  211.427203][ T2368]  ? firmware_fallback_sysfs+0x746/0xa30
[  211.432965][ T2368]  ? __pfx___report_bug+0x10/0x10
[  211.438591][ T2368]  ? __up_read+0x291/0x6b0
[  211.443078][ T2368]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  211.448942][ T2368]  ? firmware_fallback_sysfs+0x746/0xa30
[  211.454627][ T2368]  report_bug+0x16a/0x220
[  211.459001][ T2368]  ? firmware_fallback_sysfs+0x746/0xa30
[  211.464692][ T2368]  ? firmware_fallback_sysfs+0x748/0xa30
[  211.470351][ T2368]  handle_bug+0x9c/0x200
[  211.474730][ T2368]  exc_invalid_op+0x1a/0x50
[  211.479366][ T2368]  asm_exc_invalid_op+0x1a/0x20
[  211.484343][ T2368] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30
[  211.490613][ T2368] Code: bb fb e9 5d fc ff ff e8 88 de bb fb c6 05 d9 cf 10 0a 01 48 c7 c7 60 f2 53 8c e8 55 c7 1d fb e9 85 fc ff ff e8 6b de bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 f3 53 8c 4c 89 e2 e8 55 67 22 fb e9
[  211.510780][ T2368] RSP: 0018:ffffc900073d7670 EFLAGS: 00010293
[  211.516890][ T2368] RAX: ffffffff8609e5f5 RBX: dffffc0000000000 RCX: ffff88802c553d80
[  211.524977][ T2368] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[  211.533072][ T2368] RBP: 0000000000000001 R08: ffffffff9030bcf7 R09: 1ffffffff206179e
[  211.541072][ T2368] R10: dffffc0000000000 R11: fffffbfff206179f R12: ffffffff8cae5400
[  211.549079][ T2368] R13: 0000000000001770 R14: ffff88802bcdb0b0 R15: 00000000fffffff5
[  211.557104][ T2368]  ? firmware_fallback_sysfs+0x745/0xa30
[  211.562891][ T2368]  ? kfree+0x1c5/0x640
[  211.567097][ T2368]  ? _request_firmware+0xf11/0x1780
[  211.572343][ T2368]  ? __kmalloc_cache_noprof+0x15b/0x660
[  211.577933][ T2368]  _request_firmware+0x1052/0x1780
[  211.583111][ T2368]  ? __pfx__request_firmware+0x10/0x10
[  211.588632][ T2368]  request_firmware+0x36/0x50
[  211.593362][ T2368]  pvr2_locate_firmware+0xb3/0x500
[  211.598525][ T2368]  pvr2_upload_firmware1+0x1ba/0x910
[  211.603864][ T2368]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  211.609906][ T2368]  ? __pfx_pvr2_upload_firmware1+0x10/0x10
[  211.615763][ T2368]  ? pvr2_hdw_initialize+0x3d7/0x3c50
[  211.621198][ T2368]  pvr2_hdw_initialize+0x428/0x3c50
[  211.626463][ T2368]  ? __pfx___mutex_trylock_common+0x10/0x10
[  211.632412][ T2368]  ? __pfx_pvr2_hdw_initialize+0x10/0x10
[  211.638094][ T2368]  ? rcu_is_watching+0x15/0xb0
[  211.642929][ T2368]  ? trace_contention_end+0x3d/0x140
[  211.648279][ T2368]  ? pvr2_context_thread_func+0x26a/0xb40
[  211.654062][ T2368]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  211.659754][ T2368]  ? pvr2_context_thread_func+0x102/0xb40
[  211.665543][ T2368]  ? __pfx___schedule+0x10/0x10
[  211.670468][ T2368]  ? __pfx___mutex_lock+0x10/0x10
[  211.675534][ T2368]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  211.681574][ T2368]  ? schedule+0x90/0x360
[  211.685871][ T2368]  ? schedule+0x16e/0x360
[  211.690241][ T2368]  pvr2_context_thread_func+0x490/0xb40
[  211.695836][ T2368]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  211.701955][ T2368]  ? __pfx_autoremove_wake_function+0x10/0x10
[  211.708076][ T2368]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  211.713941][ T2368]  ? __kthread_parkme+0x7a/0x1f0
[  211.719024][ T2368]  kthread+0x389/0x470
[  211.723170][ T2368]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  211.729298][ T2368]  ? __pfx_kthread+0x10/0x10
[  211.733949][ T2368]  ret_from_fork+0x514/0xb70
[  211.738589][ T2368]  ? __pfx_ret_from_fork+0x10/0x10
[  211.743744][ T2368]  ? __switch_to+0xc79/0x1410
[  211.748469][ T2368]  ? __pfx_kthread+0x10/0x10
[  211.753120][ T2368]  ret_from_fork_asm+0x1a/0x30
[  211.757948][ T2368]  </TASK>
[  211.761719][ T2368] Kernel Offset: disabled
[  211.766120][ T2368] Rebooting in 86400 seconds..