last executing test programs:

23m42.318852188s ago: executing program 4 (id=1245):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x10)

23m42.138887254s ago: executing program 4 (id=1247):
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
epoll_create(0xfff)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x200c})
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r6}, 0x14)

23m39.462134647s ago: executing program 4 (id=1255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251c7c00000c00018008000200", @ANYRES32=r0, @ANYBLOB="6fd0b2c89e0b2e94009b676a9c162e1e4f7f2a5a11185d6c4ad27f7b2b4c3285ef85e0dafd0554cb38901be058fba024a6074aa5fccb7250b285d151fe2b4f8708eec6b330dc1cfe1714c326fc36752f44886ab36bea68837a39ceb2522eb0a399b56c5b2fb117696970cc231b38b2f8a126cbf5258af48c7aa9e425d8e4085590b766640e5566b1818c95d5e5a7fc2981aa19d5c14846ca3ce01a6bddc5a725c32c3292bee9694aa18585dceb0c3dfdf20e4ad4a0bd1ac3215a2b2880e2fab70b0cdd7dc6feebbb506877eeda367ed19d6b98198cfcfc0c2b0a941fb53c79093ed42fc10a365b58b6ffde9fe3a53676b50e5d0f15821a830b8383d6"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0d0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c0003020102090501010002"], 0x0)
r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000006c0)={"2d70691d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ['\x00', "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
r6 = accept4(r3, 0x0, 0x0, 0x800)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100)=0x7d8, 0x0}, 0x20)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r8=>0x0, 0xfffffff4}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000000c0)={r8, 0xa90, 0x4b}, 0x10)

23m39.12358891s ago: executing program 2 (id=1260):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)

23m37.026898602s ago: executing program 2 (id=1262):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
setresgid(0x0, 0xee01, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)

23m36.807487696s ago: executing program 2 (id=1263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nullb(0xffffff9c, 0x0, 0x200, 0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r2, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010025bd700001000000fe880000000000000000000000000101fc01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000100000000000000500000000000000090000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000660800000000000001010100000000000000000000000000000000330000000200000000000000000000000000ffffac1414bb00000000"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000600)={0x50, 0x0, r6, {0x7, 0x2d, 0x0, 0x26145500, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180)
write$P9_RLERRORu(r7, &(0x7f0000000180)=ANY=[], 0x18)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000180)={0x7f, 0x7, 0xb, 0x7, 0x2, 0x9, "f0a12e0b7aaa03183991bff8db23e30a", 0x90, 0x9, 0xa3, 0x7f, 0xf6, 0x4, 0xf8})
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)

23m23.19966285s ago: executing program 32 (id=1255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251c7c00000c00018008000200", @ANYRES32=r0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0d0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c0003020102090501010002"], 0x0)
r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000006c0)={"2d70691d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ['\x00', "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
r6 = accept4(r3, 0x0, 0x0, 0x800)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100)=0x7d8, 0x0}, 0x20)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r8=>0x0, 0xfffffff4}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000000c0)={r8, 0xa90, 0x4b}, 0x10)

23m20.402487928s ago: executing program 33 (id=1263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nullb(0xffffff9c, 0x0, 0x200, 0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r2, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010025bd700001000000fe880000000000000000000000000101fc01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000100000000000000500000000000000090000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000660800000000000001010100000000000000000000000000000000330000000200000000000000000000000000ffffac1414bb00000000"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000600)={0x50, 0x0, r6, {0x7, 0x2d, 0x0, 0x26145500, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180)
write$P9_RLERRORu(r7, &(0x7f0000000180)=ANY=[], 0x18)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000180)={0x7f, 0x7, 0xb, 0x7, 0x2, 0x9, "f0a12e0b7aaa03183991bff8db23e30a", 0x90, 0x9, 0xa3, 0x7f, 0xf6, 0x4, 0xf8})
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)

19m44.821357122s ago: executing program 34 (id=1948):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x0)
lseek(r0, 0x9, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000100)={r2, &(0x7f0000000000)='([!$@&:{-{:\x8b%\x9d]\x00', 0x42000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x9]}, {0x5, 0x1b7, 0xfffffffe, 0x7}}, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001082dbd70000000020000000000", @ANYRES32=r4, @ANYBLOB="31200000000000005c0019800800010004000000090002002d5b262f000000003c0002"], 0x84}, 0x1, 0x0, 0x0, 0x4058805}, 0xc850)
prlimit64(0x0, 0xa731ecab459ac771, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000000b0603000000000000000000050000000900020073797a3100000000050001000700000034000780"], 0x5c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

19m34.45253602s ago: executing program 0 (id=2055):
sendmmsg$alg(0xffffffffffffffff, &(0x7f000000a900), 0x0, 0x40000)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsopen(0x0, 0x1)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = open$dir(0x0, 0x20200, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r4, 0x0)
write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0)
ioctl$RTC_UIE_ON(r2, 0x7003)

19m33.32177056s ago: executing program 0 (id=2059):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0xf2, 0x1, 0xc, 0x4a, @empty, @mcast2, 0x7, 0x40, 0x1, 0x58a9}})
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00')
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r4, 0x81, 0x0, &(0x7f0000000040))
socket$igmp(0x2, 0x3, 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0xffffffffffffff44)
unshare(0x26020480)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001529c23585000000060000009500000000000000395d7d00d0ac217064da111d626bb0779051f1c3fc2a9682be88a2dd61bd435fe24e3a272fd946bb8e16744441d6500453c90739021c271dee8d105967f8be"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x20000000, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x42, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000400)={0x6, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/210, 0xd2}], &(0x7f00000003c0)=[0x8d8, 0xfffffffffffff001], 0x1}, 0x20)
preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0)

19m31.007574349s ago: executing program 0 (id=2067):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x40, 0x4, 0x20, 0x0, 0x0, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

19m30.626830327s ago: executing program 0 (id=2070):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x8, 0x7ffffffe}]})
tkill(0x0, 0x19)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00')
readv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/104, 0x68}], 0x4)
poll(&(0x7f0000000a40)=[{r0, 0x20}, {r1, 0x1448}, {r1, 0x400}, {0xffffffffffffffff, 0x180}, {r0, 0x2e0}], 0x5, 0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0x70)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
syz_usb_control_io$uac1(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000500)={0x20, 0xb, 0x3b, {0x3b, 0x5, "0432d07423877a0a883edf1b1c0dc3f376299ed25ff8570629fdc4fe62feb8d7f392d8174abf2112e92da7baadf49e00cacaaa09321200793b"}}, &(0x7f0000000580)=ANY=[@ANYBLOB="005bd868373d8c030400"]}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x20, 0x15, 0xfffffffffffffff7, "05013ce1d1c6a6e1460c7b0029b9e48a2e98995f4acfd9df3e45b3a76c3219e328855fd254d7f41a485e7e0480e624e093b5577d69d316a671050e82b39a11d9c2df9f3342ee1a1df1557d21d237b7460fbe891490d0ddbbe01fe150084f734c09c3eb4d219fc21014"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000700)={0x20, 0x81, 0x3, "d668b9"}, &(0x7f00000008c0)={0x20, 0x82, 0x2, "a18e"}, &(0x7f0000000780)={0x20, 0x83, 0x1, 'J'}, &(0x7f00000007c0)=ANY=[@ANYBLOB="2700000010002aa105"], &(0x7f0000000800)={0x20, 0x85, 0x3, "2c013e"}})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
sendmsg$inet_sctp(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffffa9, &(0x7f00000025c0)=[{&(0x7f0000002080)="0a1d08b391ef2537ec79450147af72a4d5bd59dbe9c109eeee7b053bbd55354b4f019fef72d98567b5a030749764f819ceaf7c67b389949520581c8308388ebb130bafa1d3d4c94d5b4ec29178a1ce8d46d698d93ce6c37caa87ec0cfcd00a577202d788be7786bfabf3adff92cfdab3db7dc57b6f29177b457cac51c5779ff9fe6b82fd8fa9f8deeb70103c7f15800f95ea589f8b40cfe2802efcbfc49feb3d8a94f64dbb17c315af7ddf2739cac3028dd22ff5e80f1f6159bc575e073b925728381f1373429815ecd9a7b65e", 0xcd}, {&(0x7f0000002180)="6d0b98a92af6537181989bdef8312c7bd084465ae09a81e28d28ca4cc223feb4ffff6cdd19da00ff95ef6f590b552cb0f962adabace1048e66275faf8ffd8c24d76b27f9c4f9e0d35cebcdecd115a4a5023c92f268dd33b2144f363c84d601d2ddff727b821ad7cb8037abe13d58d5799f563adaa49b2ec43ba27e0f8f50a24f00d084b132ba41f751f5a7c297404b947e7d4c1e2ff2d5f346b6", 0x9a}, {&(0x7f0000002240)="ad493e365b916006542abc314e7484bdfe902727756cab3c943dd84af422b9337d8cf45ff2011230c11190d30d977845bb25b5b3a69d897a", 0x38}, {&(0x7f0000002280)="11a908cda3ac5b2e07c425daaf6836919cd632e045a96e0e6712a77600e133fd575efc7a76b781ac23fbe55bffb1ea11c69ee6e0622d44a9bb6571dfaa9a18ff7e240dcdf2fc18cacfe2732dafec07b77d88a37c2ace183f8684a0d1cd2144d895250861e23bfd0566e77e3fdc2ce94c8fd0f444519db48b7ca117ad917287f6a0d92cf945e1faafa9f9208922cc4e4dfe600cca21e892e4c1e3c8675918eaa9f3af6a595c3a5341726bd62f87c59ff649e9eaca140a1dac6d088416a158f12e7096f6ef7109e42051d85835e038e0c36f4cf206aa6ef89940d64a03398cbbe05d61c30be8b5175fd6a3dc2035d1", 0xee}, {&(0x7f0000002380)="67782af1c1399f000e94d4e7fa0e6cdf959e0f1914496b8c4c7fd9703ddb7476fdb5059eae04cd30df4ce3513528e285", 0x30}, {&(0x7f00000023c0)="af1f5c4a8c2d8e16a0185c797a04b0c1f116b08017a6f87504f890d581d6db66f5e33cda941405fd1f7a7c982d7be4d26dde39a35fc52f2f457302b6355dafdc47eed1a512b57989e0ec829d94ec83109c7493263d86faf1817541d52637875390a0382296154a41a4e5e3098f3bb8252a715cca34f0540124a3afdb75c9acceee1f9c92e42dc0e1425a178099630876af88ea4da41f1782108c53061da8987ac8a02ef5179501480f812b4e193e83c80416aee75de4cbc11213ebf413a68976dcab40d698", 0xc5}, {&(0x7f00000024c0)="1e10573b1809430064bd2fb7b6107d81bc63956600ae77077a9311396f84c0c68f29f15f628758354f65a8c8e8d86aaecb45312235bf52edb2e7ec3a29c13f53387bf25a30f9cf93c3404683bff8d9caabddf0a76d9cbde33f7d0a107218b82936168863e2184e20221b99f080319e7f5cf3698e423548877ec80c4167859fdf977b049f8d673df585b6fc39b8b92c7a6a14eadafc9166fac71e20b72123e1faa36c8607740d17e981d54af48708f4f5dcbce4622e9d08aa21433c2bada71d03ee2c5a2d641845d69c065e22", 0xcc}], 0x7, &(0x7f0000000080), 0x0, 0x1}, 0x14)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000100))
r6 = msgget$private(0x0, 0x460)
r7 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
add_key$user(&(0x7f0000000740), &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)="8d2e2d9fb95c3677c6c1d857b68c757f9d1803acaba5777815d9929f1e67e25ea9b91872495a5b2ef3f6f9b3a05f89e44e73e3d90d4ba0b432d8ce53b2c80bf27e0ef4da1accb19d9b670aaa7ba2c7beaf06717bbe5f382a1463605e2d08fa1105cc551608296d", 0x67, r7)
msgsnd(r6, &(0x7f0000000000)={0x3, "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"}, 0x401, 0x0)
msgrcv(0x0, &(0x7f0000000440)={0x0, ""/145}, 0x99, 0x1, 0x2400)
msgctl$IPC_RMID(r6, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)

19m28.963447148s ago: executing program 0 (id=2074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

19m27.124583473s ago: executing program 35 (id=2077):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000025, 0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, 0x4, 0x0, 0x0, 0x9, 0x3, 0x54, 0x41})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0xb)
open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r4], 0x0)

19m27.024204442s ago: executing program 0 (id=2078):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r4=>0x0})
r5 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97)
getdents64(r5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r4, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaacda8aaaaaaaabdaa2c86dd600000000014ecfffd00004e234922", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500203ff9078ff6f"], 0x0)

19m26.354266018s ago: executing program 36 (id=2078):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r4=>0x0})
r5 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97)
getdents64(r5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r4, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaacda8aaaaaaaabdaa2c86dd600000000014ecfffd00004e234922", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500203ff9078ff6f"], 0x0)

18m22.696067152s ago: executing program 7 (id=2254):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1f4, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x1, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x3}, 0x23c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4)
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000140)={'\x00', 0xe, 0x2, 0x5})

18m21.120755358s ago: executing program 7 (id=2260):
r0 = userfaultfd(0x801)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000180001006cbd7000f6dbdf250a800000000400000800040000000000", @ANYRES32=r2, @ANYBLOB="0600150007000000480016804400010001000000000000005c06040302180700ff02000000000000000000000000000100000000000000000000000000000000fc010000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r3 = userfaultfd(0x80800)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001980)={&(0x7f0000fab000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000bdc000/0x3000)=nil, &(0x7f0000be6000/0x3000)=nil, &(0x7f00007e5000/0x1000)=nil, &(0x7f00005da000/0x1000)=nil, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000dfc000/0x2000)=nil, &(0x7f0000ae8000/0x13000)=nil, &(0x7f0000cc4000/0x3000)=nil, &(0x7f0000aec000/0x4000)=nil, &(0x7f0000000980)="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", 0x1000, r1}, 0x68)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @remote, 0x9}, {0xa, 0x4e22, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, r6}}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x0)
fchdir(r7)
setsockopt$inet6_opts(r8, 0x29, 0x3b, &(0x7f0000000240)=@routing={0x2f, 0xa, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x17}]}, 0x58)
sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newnexthop={0x68, 0x68, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x77}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044044}, 0x0)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f000076f000/0x3000)=nil, 0x3000}})

18m20.886517193s ago: executing program 7 (id=2261):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}}, 0x20008040)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}}, 0x20008040) (async)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) (async)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0) (async)

18m20.343968216s ago: executing program 7 (id=2264):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00')
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x40000011})
r3 = socket(0xa, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0)
sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x4)
recvfrom$inet(r3, 0x0, 0x0, 0x40010120, 0x0, 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00')
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000003c0)={0x3, 0x0, [{0x3, 0x4, 0x0, 0x0, @sint={0xa, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @sint={0x40, 0x8}}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8800000010000104000000000000000022fffe35", @ANYRES32=0x0, @ANYBLOB="2b03000004000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026b85800fbdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="1c002c80d2fc0000070000000800000064dd0000d2fc000000000100"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="da3f607c4a55ea15b268ae682450ebea44c74a009595167c29a3523fb5f6083863d997562957f0c299420489ff0d8822678c80f52631be60b7c5715ba0179b6eecfd1271205970018cd9d901986fe5f74082789f8d08d84ca133b9cc2b4d456a29121e162599ff7ddf4d6e2fbcd9327f5da91905cfc62fa90c6417daa8a4db81da216bfd4a6791a26fb7983451f09345bc4a23ba37b3428d7a58884b28268afd2c7c59a658213bb9d8e427a1ac7cbc24904fe99da35ddc6bdd1fbe396e052101ff59c85725fc8238119fb05032770735cdc2cf3b776903e8f57b84b557f803180709dd899439e95c3d1b184522f1716672fc8e37ec42b26a95"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)

18m18.979784824s ago: executing program 7 (id=2269):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) (fail_nth: 1)

18m15.968117948s ago: executing program 7 (id=2283):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x23}}], 0x2, 0x404c851)

18m15.041905967s ago: executing program 37 (id=2283):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x23}}], 0x2, 0x404c851)

18m10.360980617s ago: executing program 5 (id=2301):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="240e857fe863733040cdb8c36226e744f4ec12b1353d1366484c6df4944148348ebf273355bd81a528f0da9ce5c4ad22414c74c5", 0x34}], 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020}, 0x2020)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SET_SECUREBITS(0x1c, 0xc)
setfsuid(0xee00)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)

18m10.015506381s ago: executing program 5 (id=2303):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d440e8b089b3f390068090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520120ffe8d178708c523c921b1b5b5b070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x800)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x300, 0x101, 0x30e}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b703000000000000850000005400000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "261fbabdae"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff", 0x6}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r9=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={<r10=>0x0}, &(0x7f0000000480)=0xc)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x100000000, 0x5, r10})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000000080)=0x200000000)

18m8.612311082s ago: executing program 5 (id=2306):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40814}, 0xc000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20)
syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES64=r1], 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
epoll_create1(0x80000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x307101)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x19}, 0x0, 0x7})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40200130, 0x4)
syz_genetlink_get_family_id$team(&(0x7f0000000200), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r8=>0x0, 0x4, 0x3, 0x1, 0x9, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0, 0x10, 0x700, 0x200, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', <r9=>0x0, 0x4, 0x3, 0x6, 0x0, 0x13, @mcast1, @mcast1, 0x10, 0x80, 0x2, 0x9}})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000005c0)={@local, @empty, <r10=>0x0}, &(0x7f0000000600)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="8c010000", @ANYRESDEC=r0, @ANYBLOB="04002bbd7000fddbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400feffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f509000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r10, @ANYBLOB="9772f8c4f8537dc84709221c01000100370f279409bc2cb0371b2040c287d6499243f7daf2309d9421abbd927a54ebeadbe2b638d5edafd31ec5b45e7d01831764b7167aa310953874daf18d0beead64ace4f368ec73af6815b22dfef342c0b0350d000000881405ae9d3f83db947eff68fdfdcddd75399e21d9dc4596d232681e25370d57592f94394fbce4aa0b9a623c867a37a2301403e6f038f7137b8cbe7288a0505cda8245a2f6e5a195c1498ee410aa6e096f466cf509dfc47445b66ca2243f19df"], 0x18c}}, 0x50)
close_range(r2, 0xffffffffffffffff, 0x0)

18m4.739643461s ago: executing program 5 (id=2316):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00')

18m4.68365694s ago: executing program 5 (id=2317):
r0 = syz_io_uring_complete(0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000001000000000000000000000000000000000000000000000000010000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0400000000000000030000000000000004000000b56b6e000001030200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/52)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
socket(0x8, 0x80000, 0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000019c0))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001700)=ANY=[@ANYRESOCT=r4, @ANYRES16=r3], 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002cbd700048c465f5469b0f35080039000100000005003500040000000a000900bbbbbbbb0800000015002a0001000000080032000200000008000b00020000f407a3ed53d073fc10aefc1ae3003400000000000a000900ffffffffff"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10)
prlimit64(r3, 0xe, &(0x7f0000000380)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000016c0))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4)
openat$ptmx(0xffffff9c, &(0x7f0000000200), 0x201, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x68c, 0x1000, 0x0, 0x80007}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda95, 0x0, 0x3, 0x233}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d95, 0x8, 0x1, 0x115}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ff1, 0x2000, 0x3, 0x164, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1454, 0x40, 0x1, 0x15f}}], 0x4, &(0x7f0000001540)={0x2e, 0x36, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x3, 0xaea, 0x0, &(0x7f0000000540)=@buf_max_buf="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"}}, 0x0)
r7 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f00000001c0)={0x980000, 0x2, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980921, 0x3, '\x00', @value=0x4}})

18m0.664827005s ago: executing program 5 (id=2326):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00')

18m0.259335899s ago: executing program 38 (id=2326):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00')

17m10.047535497s ago: executing program 2 (id=2327):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00')

17m9.487664192s ago: executing program 2 (id=2471):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x3, 0xf1, 0x0, 0x7fffffffffffb, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4384})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x0, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x3, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x6f7, 0x9, 0x0, 0x1, 0x3, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010)

17m6.948142826s ago: executing program 2 (id=2491):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000fcdbffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000150f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x8)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="f81e4ead72f1b3ba519fa7a49b61", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50)

17m6.742607529s ago: executing program 39 (id=2491):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000fcdbffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000150f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x8)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="f81e4ead72f1b3ba519fa7a49b61", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50)

13m57.662152911s ago: executing program 4 (id=2284):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x20100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8)

13m57.349372483s ago: executing program 4 (id=3631):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x300, 0x0, 0x10001, 0x5}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000380))
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)

13m56.14762789s ago: executing program 4 (id=3633):
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x12})
socket$inet6(0xa, 0x2, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
read$FUSE(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getpid()
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffffff, 0x0, 0xc00, 0x1ea)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

13m38.706129877s ago: executing program 40 (id=3633):
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x12})
socket$inet6(0xa, 0x2, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
read$FUSE(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getpid()
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffffff, 0x0, 0xc00, 0x1ea)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

6.864253978s ago: executing program 3 (id=5997):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0xb)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040))
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0xe)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)
r1 = landlock_create_ruleset(&(0x7f0000000100)={0x821, 0x1, 0x0, 0x0, 0x1}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)

6.515083202s ago: executing program 3 (id=5999):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000008410e49424000010203010902"], 0x0)
pipe(&(0x7f0000000080))
socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x88b, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0xd3, 0xd3, 0x20, 0x20, 0x1fc9, 0x117, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x879, 0x3, 0x40, 0x7, 0x80, 0x2, "", [{{0x9, 0x4, 0x7e, 0x6, 0xb, 0xf0, 0xc1, 0x1c, 0x1, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x2}, @generic={0xa, 0x31, "9a8114c6203de172"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3, 0x8, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6e, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x80}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xc3, 0x2, 0xfb}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x0, 0x7f, 0x4}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x76, 0x9, 0x54, [@generic={0x4c, 0x22, "f237041b38bbb45287463c58c219a3bac8bf8cd9baccfefcb8f908083132660a997d1cc7b3703783d1db68e294f70038cb0af43dcfe4a21a32e14e38a7efb6e7acbe0936ec98c79f7e1c"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x4, 0xfc, 0x2, [@generic={0x7d, 0xb, "5d8b273704de0e056baca96a3b1b224ad0acaeb6c3408357ca15791f9d1353186dae640b3c28048975a1dcb9d7bc4db39b907c78e29cba940e333bf5c21ef7e9a805fc872fadee717f681296d4531c6f2d089e2afed69243a07ab9c0c8bd29dbc92032f23f8f46df1d6c67466fbf9d2c225b1e5c96fa1447994a7d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x81, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x800}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x0, 0x1, 0xd4}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0x6, 0x9, [@generic={0x97, 0x6d4c229268bac666, "ad5a22dc5aa4b6098f2745d34e5a461dd25f1b8944700b910c62976618f60ee67eabfefa04588b5b4c5f5530b3365285b88abc5d2ca518443ade83b7cecda56c21caab8b1b242cf361c261073079d25d66e6fb07cde6d9e2787b162d89b5833de8cff4aede7644fd1cb0033d1255cc016f5539d5c118bdc2e3f8e6583882d9b0832075d4a4884ccaa5b033f39f05a31daad517cd61"}, @generic={0x6, 0xf, "847d9a07"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x2, 0x1, 0xf9, [@generic={0xcf, 0x23, "96af89339b027ec00bb6df4909d57b64a5129ff23a31bfd3402bb76dba77a4a1f1e0b0c1f8b5ea2b5047aaae733790f8bada2efd32dc99573bcc3cf816dfc04bf54a2da6f1ba97dc5797a72e005cffe16819b366cfad4aef05602715131ccf1815914da13ef817fc1582e0a97f1d027cd962e6ec825b852b5f25f0063627d3bd9eac654c08fa218b41c005b93e33c048c7efded13f7a8b381b6dbaa8e5543874b7feeb8fc65ae5e2405708fa7ea0a34cf39461bf6ad07a3b2b751734da06db02e340fd34df0db4a5940ffcc35d"}, @generic={0x32, 0x31, "e3125f97ffdc2ea7a62077f38638c20e646fdfcec7f520382e16141e8d56081c215a16c86373347255d30134e3986a71"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x6, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2c20}]}}]}}, {{0x9, 0x4, 0x6e, 0x7, 0x8, 0x2d, 0xea, 0x7d, 0x0, [@hid_hid={0x9, 0x21, 0x1ce0, 0x7, 0x1, {0x22, 0x7a2}}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0xf9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xbe}, @generic={0x2a, 0x1, "d73bb012eda585f21bb4163705ad6698559da26ca5e86167c05f8676b3d77b456fc1b9280a7d9c28"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xfa, 0x10, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xe239}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x0, 0x7f, 0x7f}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5, 0x6, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xf, 0x9, 0xe, [@generic={0xcd, 0x24, "82092d5c9039c5fbae093f8883464967708b384bf14c92e16f2403820c4de8268bcb64b4a50826a6eda54712f9da76bacce041a0cc035537093f6cbec1ecb91f14141e46e96fea5a9bbac7eef4ae06b29fb1912f8ebb85977ce56d60de527bcd85ddb9df5f1ccf724bbe65060a667abeb756d27595ab57c5bfad8bc6f34a5d845306c94875b32407cddbdfe60d7ba677003738a11892f685d0df68ffc4bf2161e494d5613c9049d32b791af39ba46f7bc830e560af8a9b5f8749b9b78ecd0359262f6a26751f6cbbf4717d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x0, 0x2, 0x8, [@generic={0x1a, 0x7, "d5e04e5e6c14a64324fe6d42be1c264ab93adcf4478295bb"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x5, 0x0, 0x9, [@generic={0x72, 0x30, "fc352d8d8c33fc7bb17b697d0311c22b70a819a5e414d7fbedc243a64f3fd108211e47d4cbf2edc0d2dcd9273af2463f09da6c1640e974140e5a7b971ac6fcc6ed0c723449ee08816d2ebefe9e814345fa53947153e2c4181f21bb0c1cf116f68c8adfc4c3f8d3de217fc1e1a13a4d08"}, @generic={0x10, 0x23, "0640290bfee95acf74419efa1ade"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x1, 0xc1, [@generic={0xdf, 0x1, "62781260074a4af7b1d5dd3d6e3db8f9f94202f03df96d831b2786c30a88b9a0728d49a4a76918fc539056bbd85b6221cea79dcf45113f260bb556a05bad946c98082c3616a28278ab8e96e17b6d000bccea644513b15e564a1459c615ea2a4d722045fdd0d62fe81147f82f3dfbae0c16538172afc1c44cbeef26ac51a67c5ee25596827f0504887556c96cba5e76ca07d066b84959cf7b9637cbfb566993ba896353264b6ba04039b966dc9f8fdaee9b4ebcbe194bc3931f3082bac0984094d600e824bcf2daa4eee7368dabfbb8e0da9c2e7715550cbd83677bbd4c"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xd}]}}]}}, {{0x9, 0x4, 0xdc, 0xff, 0x9, 0xf0, 0xcb, 0xa6, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0xf}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x8}]}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x6, 0x9, 0x6, [@generic={0xa8, 0x6, "3347acd1d211bd9b257e97f48445254e9061c962d2803dda1fc4df3793985e111e438d9c7267cec846282d975ff1e5d75b4a9b067750faa199f56522c740067270fc2a7a69681e3070f693cab73be300344f5009c1bd1459d0da3b7dfef96cc834e136ff1b6484fe9881a2c2a88f80ddcf3674b2c1f548c7f5e9a0349cca35b513043ef761136fc629f796c4e6d7ca24b7a713aa8cebefea9fb56817649edb684144e2179835"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x3, 0x6, 0x4, [@generic={0x2a, 0x30, "ce3ea7c6b5a686f9fbee01b75f04bc24aabd0cd3143a6b7f5bf4690dcc3bbf9d2c7a552a549455e5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x22, 0x6c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x38a}, @generic={0xb4, 0x21, "55bd654bc62d321fd547ae4416a912d07e20605ae24e349e5e78d26dc666be35f3cb7257bc62340af0f449ddd3de2bf75c0bd118ea26ff111d29ee82f47a7794f1646c2255737d669676b66a7b322d929c91763f0b3facf12031b0725fb0a77811402160a01a6154054701559fadc4a2f4a5d39992d49ec033ffdd7dc29f65f95c803221f992ea935f91d167f10985e235c27fff404a6b3becbd3b383796eeb7cca7cf0dbf2e944ea3bc141d567bbbe1d514"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xd, 0x10, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x4, 0x81, 0xaa}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0xb5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}, @generic={0x76, 0x2, "f0f0eeb1e77a303f85aaa736b1ac34362a95f722b997702f47321090ecdf62baab9450ecd36e4b6ed2010681a97d8d3e2b6ba42e07edf792a2ad9dda19109642b118f36ad19c37067c51a6a86e81b74e76add40fd2972dfb34beb4c1bac97e5a19b3c4bc3b79143c6007dba3cb7a2bfcb8699f74"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x9, 0x7}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x6, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7f19}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x3, 0xff, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x1}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x300, 0xc, 0x7, 0xe, 0x40, 0x80}, 0x1c, &(0x7f00000013c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "3b6d667cab878e3a7742ac301ca65882"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x413}}, {0xa7, &(0x7f0000001440)=@string={0xa7, 0x3, "bd5dd50a22ceac2891c9d574a9b5f5ec5f8efb4ff26240e50279864da3ce07f1dd5eed52fd7d40cd9d0ab004766b7941fa3dfd031dade3b6b7466606774c76e5da2add391360149e6178002795e04adb010880a46b98f2a1c85e37dc9862be18b46b704d251ca43b558ca32e64cbe436ec6f9cb4e92b26f0afd6be8bf843be078218d6310751ba0131ebf6a43a3fa86e916b739012e41a024d2b029dcbf9881e61a2a50116"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x459}}, {0x41, &(0x7f0000001540)=@string={0x41, 0x3, "8d6b901f094e8eb9250ab866d87ecd5bfab06e3fc2ccad5de386c2a6370ee0f2b0395e9a0acfb00c092e3e4cf361e7dab2a210202f6cc3bbd7765a4ac1512d"}}]})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x25a, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2033f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0)

4.9866866s ago: executing program 6 (id=6005):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtaction={0x124, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x110, 0x1, [@m_ife={0xdc, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xea2, 0xda80, 0x20000000, 0x7, 0xbb2}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @random="c77ace969b07"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0x73, 0x6, "5e0120dde07d0a0eee9bed02879318d674348738e3e2d46db4013d556327b2e74a48ecf6e0d59da9a6e7316e4e5eae3410cdfd22ef9a567a1bb153eb8b79c76bf92c5caabad4126d5cc4293daade9a0a4414aaf246cd8c45b92716a0df4af4d33a16a1ba5a29064c408d2b54d5c94a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x30, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x4}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4.74192618s ago: executing program 6 (id=6007):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='Z', 0x1}], 0x1}}], 0x1, 0x4004)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9)

3.727790335s ago: executing program 6 (id=6011):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x404042, 0x0)
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, 0x0)
syz_usb_connect(0x2, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400000000000009049200030f62760009051cc200000000000705e37e1b82e60905f2964640a76e915ee8a28122c71e1e2efc155c7d7effd5d7e3e64ca14dad08604f07a42354221b4c40645f32eb2069fc3abd2eed0f7519099780ffddf2d6719a2f4146d37480a46e2d1a425b49ad42be1cca26ac552f036b605e2e969f3559af33480f36c3255a0881361cf89ac9212206554871e1ad36fb00d07c18e7e9cf8b0bc713120075f6338682af8e0080a837b987cb0e7e67bcd17df9ea855180e62b", @ANYRES64, @ANYRES64], 0x0)

3.636705485s ago: executing program 3 (id=6012):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000440))
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0)
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d)
write$tun(r6, 0x0, 0x19)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013030102030109024600"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
syz_ublk_setup_io_uring(0x1ea3, 0x0, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)

2.831851177s ago: executing program 9 (id=6014):
r0 = socket(0x2b, 0x1, 0x1)
listen(r0, 0x401)
accept4$vsock_stream(r0, 0x0, 0x0, 0x800)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xfffffffe, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x7, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffc, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x7, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x100b, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
unshare(0x20000400)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

2.135654761s ago: executing program 8 (id=6020):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x200000000000}, 0x18)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x400c0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x4f}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, 0x0, 0x2}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)

2.064388768s ago: executing program 8 (id=6022):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

1.896567253s ago: executing program 9 (id=6024):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x4, 0x0) (async)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000440)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, 0x0) (async)
ptrace(0x10, r0)
r2 = syz_pidfd_open(r0, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x8) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r3=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05", 0x1, 0x804, &(0x7f00000001c0)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', <r4=>0x0, 0x4, 0xe, 0x9, 0xffffffff, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x7800, 0x782, 0x4, 0x2}}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r10=>0x0}) (async)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4)
sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x800}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@private, @private, <r14=>0x0}, &(0x7f0000000300)=0xc) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xe9, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x454, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "1a68a41c6dc9d003d75356bb3294a7d10614fd407b0a0ec213443d5032a2559f1f27c097dbd7adaa008661380a197d1e18cbe2812f78a9d72c2aae46040f75ebcccca2ee858a3111211eaadffbb34d67fb6786dda6ffecfa9cb3ba50cc9b3b5fbe68921a4eb8cd5066c03b7929ac122bb4296bcddba7998d375084df0e08ac13a80ed1ed510c6649b06da41657510ab4d243120b609dddc4b9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf780}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "e85becbb719df2f6eb0d0c564fc5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6294}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x466}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "3a34e3fff57625f63910f9678a1c16583dc30c900c4d71eb7fd3a02622399e8652944df36dc50eba2671649677b82baef470055499ed57b96d0e7e981db4582774091761326f46b67dd7fd07c4385c081fc020d5f2ea3c2ce93608a69a878730b5ba6201b8b218fc04ae2151949ff7d752c3fd32b7207bc485b9cd1fee0b3db4093577cc43372bd84042e516c9e50e046a0e96146607a656ee1b281ed2c0ab00"}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, "bf"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x41, 0x5, "95cde5e9c7a58a4f04251338eba231bd8d25236b513eef0299691fce53be42137c2f7a3fb510e106e1459c3dcf1e8053dc3c7f4ffb72650a24926ab2e6"}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x24000044}, 0x800) (async)
waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0)

1.80822783s ago: executing program 8 (id=6025):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f000001c080)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f)

1.648359361s ago: executing program 9 (id=6026):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.646468836s ago: executing program 8 (id=6027):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0})

1.570230379s ago: executing program 9 (id=6028):
r0 = socket$packet(0x11, 0x3, 0x300)
clock_getres(0xfffffffffffffff5, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000040)=0x2)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4, 0x4}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x4000008, 0x13012, r0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r3 = userfaultfd(0x80001)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000002240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={r6, 0x1}, &(0x7f0000000080)=0x8)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x28, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10007}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xee00}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
r8 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
clock_nanosleep(0x5, 0x1, &(0x7f0000000240), &(0x7f00000002c0))
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
syz_clone(0x81100000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.568938904s ago: executing program 8 (id=6029):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001c40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000000700)={0x13f4, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x30}}}}, [@NL80211_ATTR_BEACON_TAIL={0x38e, 0xf, [@tim={0x5, 0xf2, {0xf, 0x88, 0xd0, "6a12a0e4cb0abfd4fe698b574d7682e08dd8133171f06e709f9df17b47722950efc81bf1010659fd52c539935d12ef38b3012628153222e562d2797acd3cffdf13fae480fe6c91e186b50211709a38be3a9f6045b8d04505bd3ed28992347b2a804d82d66faf2d385a42277fcf8007b2157c6b4237a586f32c60470db1c6c29a07239e058861dbc33f759726187ba096009a3fda23d0e02e92ec65e599c3e5d738ef7991bfc6787937627f903a0f06c35fb66cc87e1520628086c249d06b259d72224fb9d78e4828151cef7d071b400c015d2e07a35d12fb4063b08249c7ad7e5236448204cae395187e648324b72d"}}, @chsw_timing={0x68, 0x4, {0x2, 0x6cb}}, @fast_bss_trans={0x37, 0x138, {0x3, 0x8, "da164e1f97e680704f880b5163247ca4", "79e442513390812dcdb02ef9998e644322bb2128bb4dfbd5d1ce75e378ce3725", "4c3a55d05e033874e37a081ea70442ba16f41e49cf79ecb7a3974d86c1fa79f0", [{0x4, 0x27, "d37901dd3e87b8539849fd8b77120acba7850db09af683c46164ded5c1d5a979a50c8ebc16cfe3"}, {0x1, 0x27, "558a9723d76a60118c241318616ce16a36ffe1da48ef3ecab9e3bdea6522a0a9697a009bf8244a"}, {0x1, 0x20, "08bb7ed89af287a9f22a9b981a1ec55bca1a00cc965bcd1ed9b4324c853f7ab5"}, {0x4, 0x17, "784f3b907f8025179a82dc7e8934abf9009ac48740627a"}, {0x4, 0x1a, "5d959789512a15910b9212246bfcdfd8bb4720c355498b234fe5"}, {0x3, 0xf, "976aa63aa0ca408fa3c228711fe917"}, {0x4, 0x13, "96f9e37b84969f70997c86a246dac3e7717ddc"}, {0x1, 0x15, "fcccaedf0b035f30162274531788c2fbd28ed72e73"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0xc2, @device_a, 0xfff, @value=@device_b, 0x0, 0x4, @device_a, 0xa1}}, @measure_req={0x26, 0x102, {0x2, 0xf, 0xfb, "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"}}, @ssid={0x0, 0x5, @random="cfe0722290"}, @supported_rates={0x1, 0x8, [{0x9, 0x1}, {0x18}, {0x30, 0x1}, {0x1b, 0x1}, {0x60}, {0x30}, {0x12, 0x1}, {0x5, 0x1}]}, @random_vendor={0xdd, 0x6, "345be2561f56"}, @mic={0x8c, 0x10, {0xa2, "1d3d58e4eb9b", @short="30a5ce79500f3e68"}}]}, @NL80211_ATTR_PROBE_RESP={0x56b, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16c, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x13, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x2, [{0x48}, {0x48}]}, @mesh_chsw={0x76, 0x6, {0xff, 0xb, 0x29, 0xf6}}]}, @NL80211_ATTR_PROBE_RESP={0xe1, 0x91, "45150cd1e580a70bbcb9f31469a3d500d3d1f16e71f259c186a6c36b4c64fe598d386c72064efc04c2a7fc70893da8b8abff298d6c799ca8e9716e1466419d1c1c55e2e9faab107b63fcdbfdbe24e8cfa879bff7503ffb2555503e23f60a07bee3fb90ebdee2bae2f11ef5762b3367070f95cdad124560b913267a6c7a32ea0ddcc8779abdbf3173d4a951bdf6996f6a6f5ada93219895e202ab1e70f828a2c24c22bd8f9bb0e2164b039e2783d1c0f14a4e997b21923e4d595f4bdb1f9a0ee5fa8306241ba89bc13da2c687ce3ed08d4fc219fce466419bcdf98aa897"}, @NL80211_ATTR_PROBE_RESP={0x688, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1e9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_b, @initial, {0xc}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x9, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0x24}, @void, @void, @val={0x5, 0x36, {0xfb, 0xda, 0xc, "bda1a27f633a41ebacbf8a905f09ce4ae74f67e17ee808a54fecc2ec42c3a756050af28c1562a5bf1516abacdc2ccaa57c9866"}}, @val={0x25, 0x3, {0x1, 0x4, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0xab, 0xff}}, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0x8000000000000001, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x84, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x20}}, @val={0x76, 0x6, {0x8, 0x3, 0x14, 0x40}}, [{0xdd, 0xe9, "c07b6d6ed2870867cd413d03975cdd431f6615b4b8d9150718c84d3fcbb831fc2d0e6296e54eefff44b705c33108c0119c971462464aa2c75b3f52570bc9a4167eced25268f40b4d46f54406685e1ffad373e4ffcedb55662fe0635ef5fc2cbd685fdabc8a0014650d16b099c78b10da884060ecca18136ab26684a0009272eedf82ee979c3f7e2146ede4efc708e262c2835ec4abe642141ee59170314356bd2ae24e3c50264e39408d3a2d33dd00724208ec0adc7e569e456c296b055a19ea137e9748ac3825aa34cc34e968d522048c5df11476a67f2f8b5cfc737f1dd944e738f4db8f790b06fc"}, {0xdd, 0x55, "928d71d00d102f3f5b7404d04625b54d9f7c1d3f59ff99c585f14efda371b91fe7c3eec01499d12abdd6fe8fe49dec5410f2daa26bd9320a2d97a9cc1036fa4d176ca8489a0532e152897157e4a10af5eed15465e9"}]}}]}, 0x13f4}, 0x1, 0x0, 0x0, 0x8801}, 0x4c0c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0)
fsetxattr$smack_xattr_label(r0, &(0x7f0000002380)='security.SMACK64EXEC\x00', &(0x7f00000023c0)={'^&'}, 0x3, 0x3)

1.52144598s ago: executing program 1 (id=6030):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
epoll_create1(0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1.509246303s ago: executing program 8 (id=6031):
syz_usbip_server_init(0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000480)={0x0, {0x7fff, 0x4}})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x60000, 0x45, &(0x7f0000000180)=""/69}, {0x8000000, 0xd5, &(0x7f0000000200)=""/213}, {0xddce4000, 0x4c, &(0x7f0000000300)=""/76}, {0x8000000, 0x0, 0x0}]}) (fail_nth: 2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008238d01800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
openat(r3, &(0x7f00000003c0)='./file0/file0/file0\x00', 0x0, 0xa)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000)
madvise(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x15)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.420704946s ago: executing program 1 (id=6032):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x404, @empty, 0xe}, 0x1c)
listen(r1, 0x204)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

1.178509816s ago: executing program 1 (id=6033):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x204)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7f, @empty, 0xffffffff}, 0x1c)
listen(r0, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

1.016611769s ago: executing program 1 (id=6034):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000"], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x4040)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

945.642186ms ago: executing program 1 (id=6035):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x61b, &(0x7f0000001400)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x5f9, 0x0, @opaque="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"}}}}}, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080))
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000))
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000040)={&(0x7f0000000000)=""/61, 0x3d})

759.813612ms ago: executing program 9 (id=6036):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, <r0=>0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x20004890)
syz_open_procfs(r0, &(0x7f0000000040)='ns\x00')
socket(0x11, 0x1, 0x4)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

369.684345ms ago: executing program 6 (id=6037):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a19282f3acab99fb7b9de327b562dde940e74d37436aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a", 0x7d}, {&(0x7f00000000c0)="efd8934ed1ec5107b3162b04db66f7", 0xf}, {&(0x7f0000000300), 0x2}], 0x3, 0x0, 0x10}], 0x24, 0xc0)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)

238.052044ms ago: executing program 9 (id=6038):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc)
close_range(r0, 0xffffffffffffffff, 0x2000000000000)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}, 0x1, 0x0, 0x0, 0x62004000}, 0x804)

139.717498ms ago: executing program 3 (id=6039):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x7a8, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c)
write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80)

139.439508ms ago: executing program 6 (id=6040):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x38f682, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x1)
creat(0x0, 0xdafbe5d6891b6e4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb1000011", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

119.986259ms ago: executing program 3 (id=6041):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001c40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000000700)={0x13f4, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x30}}}}, [@NL80211_ATTR_BEACON_TAIL={0x38e, 0xf, [@tim={0x5, 0xf2, {0xf, 0x88, 0xd0, "6a12a0e4cb0abfd4fe698b574d7682e08dd8133171f06e709f9df17b47722950efc81bf1010659fd52c539935d12ef38b3012628153222e562d2797acd3cffdf13fae480fe6c91e186b50211709a38be3a9f6045b8d04505bd3ed28992347b2a804d82d66faf2d385a42277fcf8007b2157c6b4237a586f32c60470db1c6c29a07239e058861dbc33f759726187ba096009a3fda23d0e02e92ec65e599c3e5d738ef7991bfc6787937627f903a0f06c35fb66cc87e1520628086c249d06b259d72224fb9d78e4828151cef7d071b400c015d2e07a35d12fb4063b08249c7ad7e5236448204cae395187e648324b72d"}}, @chsw_timing={0x68, 0x4, {0x2, 0x6cb}}, @fast_bss_trans={0x37, 0x138, {0x3, 0x8, "da164e1f97e680704f880b5163247ca4", "79e442513390812dcdb02ef9998e644322bb2128bb4dfbd5d1ce75e378ce3725", "4c3a55d05e033874e37a081ea70442ba16f41e49cf79ecb7a3974d86c1fa79f0", [{0x4, 0x27, "d37901dd3e87b8539849fd8b77120acba7850db09af683c46164ded5c1d5a979a50c8ebc16cfe3"}, {0x1, 0x27, "558a9723d76a60118c241318616ce16a36ffe1da48ef3ecab9e3bdea6522a0a9697a009bf8244a"}, {0x1, 0x20, "08bb7ed89af287a9f22a9b981a1ec55bca1a00cc965bcd1ed9b4324c853f7ab5"}, {0x4, 0x17, "784f3b907f8025179a82dc7e8934abf9009ac48740627a"}, {0x4, 0x1a, "5d959789512a15910b9212246bfcdfd8bb4720c355498b234fe5"}, {0x3, 0xf, "976aa63aa0ca408fa3c228711fe917"}, {0x4, 0x13, "96f9e37b84969f70997c86a246dac3e7717ddc"}, {0x1, 0x15, "fcccaedf0b035f30162274531788c2fbd28ed72e73"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0xc2, @device_a, 0xfff, @value=@device_b, 0x0, 0x4, @device_a, 0xa1}}, @measure_req={0x26, 0x102, {0x2, 0xf, 0xfb, "603279a5b2f4a5c63e0677f3b41036e3d951c04813b46ea8f155297cb44896a1a97b201a955810345b00f6fd4a44abbf930ed4048058456d5c8b03da6c60349289261663116ec220a6b61df24767545a6bc6b24ac8e97ea1e0c74d63d8d39226f505f7fc7716e0df5e37d07c4cd68d96dd0701145e3c3f6cd7f1092ff00c57c05143acf2b03ff710977fa65cd20414b7186026894399c0a8f569663f60a3169506d129d84b170b05c46d21c7752030ab1ee6a392a697c52f6fdb41c35fb8fd33f24c1dd64f9985e780778c8b6b3d03f136dc712e35de67a735c5edf5486c2d369b68e17fb6f2818ac1adbcb7af1ac0e3cdc7e5f956fca1d2719a3b2cc9e4e3"}}, @ssid={0x0, 0x5, @random="cfe0722290"}, @supported_rates={0x1, 0x8, [{0x9, 0x1}, {0x18}, {0x30, 0x1}, {0x1b, 0x1}, {0x60}, {0x30}, {0x12, 0x1}, {0x5, 0x1}]}, @random_vendor={0xdd, 0x6, "345be2561f56"}, @mic={0x8c, 0x10, {0xa2, "1d3d58e4eb9b", @short="30a5ce79500f3e68"}}]}, @NL80211_ATTR_PROBE_RESP={0x56b, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16c, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x13, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x2, [{0x48}, {0x48}]}, @mesh_chsw={0x76, 0x6, {0xff, 0xb, 0x29, 0xf6}}]}, @NL80211_ATTR_PROBE_RESP={0xe1, 0x91, "45150cd1e580a70bbcb9f31469a3d500d3d1f16e71f259c186a6c36b4c64fe598d386c72064efc04c2a7fc70893da8b8abff298d6c799ca8e9716e1466419d1c1c55e2e9faab107b63fcdbfdbe24e8cfa879bff7503ffb2555503e23f60a07bee3fb90ebdee2bae2f11ef5762b3367070f95cdad124560b913267a6c7a32ea0ddcc8779abdbf3173d4a951bdf6996f6a6f5ada93219895e202ab1e70f828a2c24c22bd8f9bb0e2164b039e2783d1c0f14a4e997b21923e4d595f4bdb1f9a0ee5fa8306241ba89bc13da2c687ce3ed08d4fc219fce466419bcdf98aa897"}, @NL80211_ATTR_PROBE_RESP={0x688, 0x91, "908bccbb05a185504ff90627475aed4994183dcf1fc77eb6be3acb1fd26b72e58373703485f47dfba061cb3ce9280faeddfc2a763cf66404e1d6bb015265fda48414c278132bce84854dddba84be9a4f72d657dc9a0fbd6b9459c6df78e08593bfa9289a6c923184270bc2d26c7de433c89857973cbb855bd1c3f8db1c59e954721dd29e0f8fc76778e526cb3d155a8328512da1c55e8741fef54c3a62ba15e98eac89e592934b3d774f37039bb9c049c67204aa67e8a16f719d1734c69d1ab8dcc55d1aa46d3c4dcce216329d03bfc07164fc166b34ee929293f09af820ac9b8d868598335b5244e589d6f0c3c80bee9819f6db42c3b241ed38c429f50cf4c3bab22bc3ad96e23ca6ddf93220324262e84b9dc94c7765ed21a4f00853ccc77130e895d65910042ade9c39a71c9ee2382db1ef3eabf86b8c7cb9152b6a38bb8d4caade3bbe97fcc26eb9ffa38df4dd1366c74da4284f88d2b17ac3df0e7acbdd7ad886bd8330dbb7cdf2b3dd56a5493840b66eb5d179b62a76310c07e7784fc9b370a3135130d0eeffa6c4cbad0dc85a46ccde5844d2fa13cb773fb304aa8860d12555f049c2cf107fa6aef83a8c4782622b54725700a8b17e156b54597ea3baf5d7ee68a642e56093596cbfad86956bf7d7ebb36be3913358d3a1f92e2eef9da32c46ed3460ab1ac6f99aff30c5cdbfe0ed3f99beaec8cd76d097b2b83b63c9aec98cca859381a8da5ca23384d0a0155c4f952d6ecb07db6449a04554ddc2dd13ca62e9cceb9fe9bee1963a57ec47e8046f36ef35a5ec23c4ec82342b22c3fee1c9722de0727f39ca4d4765ee84349ff48e45ab344840938db698fc914e016e9f33835245ae9fd8cbb8a10a3afcc45ff6b8a8a58401e799f198128548c98accacb0ebf3aa4f75578c426ef52ff6262cc6dde6df09b534b2c4baa71631abb24d6f0945f28413578061a831c4719ef9fb372901f000072e646a458626d9c01f062c8bc5c1058885d0bc40e7d7d23db16c524c6e2b242b9eb7238b35891997da0788c976fa42324a09187f9edf0f89b218eed0ce0c4cbca2a9101334fdb946ae5b6b6ad3d12d09eb3f1caed3336c7884293bb373f4b22602f246f29169d09f887cdbb96a399baa19d3bd7a7b3e49149e34410fe1cd1ebb7e317caf7c8e5a0487d56f8907694a87e9d1ad9adc45fc37115b17d7a5b5f093b36d728f763d71e247ef512051f2421685e77186e8b82fd3b1eab93cfcd0caab9cc17cbcc1f4d6016ef4488b8e02b6892bc5362b402f232a01b87e9bee97ec15dbf111a26dd82eea8473d7a418a4770677a26bc35e350a0fbf1814bcad6e410ce509fa2488403e3d7c74d4bee68420dbbefb571d22dccb22f85fbd9a40973bbcb3fc01c847ce50210765dcf65fbf5bf4199d5de757e297e2f120d46722bacd3d4615815732a28997e9843d44c118ce1ccc2150be0b6f8901c81186c0dd2bd2d5ba695488022cb10f337a00291c1a379886964cb3b23ef0660a7f54c66dd51d2cdd71a65f74aa6c39b2416088fc162dc9d6442a17afac5327c367c3af22c618125560a2444d95805f00bf25a4a22a48713c8eca15c2fb0d11f8a33fe64ebfbe4af2e93011cc3d96f2b1c4b41c25c9bb69945ba312f618e01dea72647e7ac3a7a2acf0b1b85f6c52e629e282f1c9cf096c4fa63e58075b5c628a78011d504cedb79a055903c0ef830c7d5e4b980ff21de1e5b1c29b2ec23d029d722c7d636b860875af9369a26aa555efa40fa98eeae6b0143f3f70be77c5774ecd42c3d669758fa6de5805fd898e492f612a1959a6ce25bda7beb21ba441839221ad3f35c11ffc803667d6e5e52fa808f59c4c81e3b458a577a93b5fd46a637b86c66f544046d54faa22813dcbd6ca6e9349cac1af086736f6f0453e83331f51a1122e9449d2d073e6575f1469f202832ed296804fd00351720e7577b90e05893c73999855514b6483805b7e939a958ed35da920e969d71daf64ac4f16523426f3d395e94385399a110a1fa1501c67f359fb6ce8c54b90745a8a8efe5ca3634240ba27a6b963bdd9c135b595793ea452db99520f9363729f0b8c42bcf0c335f6379a4868d99db9a2616d839004c4abf7e6febb7f1af5b2ceabdbd499c595a70e6e40fe407a00c1a225e1ac49ed6149eb25725a684d70ed3211a1b63b08984d61441dd7889ab3b42eb7cc46f35ae2bdf767df94c3559cddf7d75489b3b1072807c690dde3bda06754a740f10ab0f671c8587c262fb0355f73ad917a64d4adc7eb42fb6c858eed4e7db74e23e7c71a1da38ee5d34662659ff1c3a563cf9e6bbb140aeeafc153258a6da6fa11a229c9417f8a668fb4d0"}, @NL80211_ATTR_BEACON_HEAD={0x1e9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_b, @initial, {0xc}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x9, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0x24}, @void, @void, @val={0x5, 0x36, {0xfb, 0xda, 0xc, "bda1a27f633a41ebacbf8a905f09ce4ae74f67e17ee808a54fecc2ec42c3a756050af28c1562a5bf1516abacdc2ccaa57c9866"}}, @val={0x25, 0x3, {0x1, 0x4, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0xab, 0xff}}, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0x8000000000000001, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x84, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x20}}, @val={0x76, 0x6, {0x8, 0x3, 0x14, 0x40}}, [{0xdd, 0xe9, "c07b6d6ed2870867cd413d03975cdd431f6615b4b8d9150718c84d3fcbb831fc2d0e6296e54eefff44b705c33108c0119c971462464aa2c75b3f52570bc9a4167eced25268f40b4d46f54406685e1ffad373e4ffcedb55662fe0635ef5fc2cbd685fdabc8a0014650d16b099c78b10da884060ecca18136ab26684a0009272eedf82ee979c3f7e2146ede4efc708e262c2835ec4abe642141ee59170314356bd2ae24e3c50264e39408d3a2d33dd00724208ec0adc7e569e456c296b055a19ea137e9748ac3825aa34cc34e968d522048c5df11476a67f2f8b5cfc737f1dd944e738f4db8f790b06fc"}, {0xdd, 0x55, "928d71d00d102f3f5b7404d04625b54d9f7c1d3f59ff99c585f14efda371b91fe7c3eec01499d12abdd6fe8fe49dec5410f2daa26bd9320a2d97a9cc1036fa4d176ca8489a0532e152897157e4a10af5eed15465e9"}]}}]}, 0x13f4}, 0x1, 0x0, 0x0, 0x8801}, 0x4c0c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0)
fsetxattr$smack_xattr_label(r0, &(0x7f0000002380)='security.SMACK64EXEC\x00', &(0x7f00000023c0)={'^&'}, 0x3, 0x3)

102.264775ms ago: executing program 1 (id=6042):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x2)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)

43.949758ms ago: executing program 3 (id=6043):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x404, @empty, 0xe}, 0x1c)
listen(r1, 0x204)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

0s ago: executing program 6 (id=6044):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

kernel console output (not intermixed with test programs):

deo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1873.789236][T24373] uvcvideo 9-1:220.0: No valid video chain found.
[ 1873.789293][T24373] usb 9-1: selecting invalid altsetting 0
[ 1873.898156][T24373] usb 9-1: selecting invalid altsetting 0
[ 1873.898193][T24373] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[ 1873.906701][T24373] usb 9-1: USB disconnect, device number 126
[ 1874.781819][T13896] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1874.927790][T13896] usb 4-1: device descriptor read/64, error -71
[ 1875.114337][T27690] netlink: 'syz.1.5633': attribute type 1 has an invalid length.
[ 1875.176007][T13896] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1875.315000][T13896] usb 4-1: device descriptor read/64, error -71
[ 1875.433118][T13896] usb usb4-port1: attempt power cycle
[ 1875.799599][T22162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1875.817324][T13896] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1875.842327][T13896] usb 4-1: device descriptor read/8, error -71
[ 1875.952365][T22162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1875.994590][T22162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1875.995845][T24373] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1876.018991][T22162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1876.038180][T22162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1876.132876][T13896] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1876.184332][T13896] usb 4-1: device descriptor read/8, error -71
[ 1876.436879][T13896] usb usb4-port1: unable to enumerate USB device
[ 1876.573719][T27715] netlink: 'syz.8.5640': attribute type 2 has an invalid length.
[ 1877.258953][T27723] FAULT_INJECTION: forcing a failure.
[ 1877.258953][T27723] name failslab, interval 1, probability 0, space 0, times 0
[ 1877.258986][T27723] CPU: 1 UID: 0 PID: 27723 Comm: syz.3.5642 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1877.259011][T27723] Tainted: [L]=SOFTLOCKUP
[ 1877.259018][T27723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1877.259031][T27723] Call Trace:
[ 1877.259038][T27723]  <TASK>
[ 1877.259046][T27723]  dump_stack_lvl+0xe8/0x150
[ 1877.259078][T27723]  should_fail_ex+0x467/0x600
[ 1877.259107][T27723]  should_failslab+0xa8/0x100
[ 1877.259129][T27723]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1877.259158][T27723]  ? __alloc_skb+0x1d7/0x7a0
[ 1877.259182][T27723]  ? __alloc_skb+0x1d7/0x7a0
[ 1877.259211][T27723]  __alloc_skb+0x1d7/0x7a0
[ 1877.259238][T27723]  netlink_sendmsg+0x5d4/0xb40
[ 1877.259266][T27723]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1877.259286][T27723]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1877.259315][T27723]  ? __kernel_text_address+0xd/0x30
[ 1877.259332][T27723]  ? unwind_get_return_address+0x4d/0x90
[ 1877.259354][T27723]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1877.259371][T27723]  sock_sendmsg_nosec+0x13a/0x180
[ 1877.259397][T27723]  ____sys_sendmsg+0x565/0x870
[ 1877.259415][T27723]  ? __might_fault+0xaf/0x130
[ 1877.259440][T27723]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1877.259467][T27723]  ? import_iovec+0x73/0xa0
[ 1877.259489][T27723]  ___sys_sendmsg+0x2a5/0x360
[ 1877.259506][T27723]  ? __lock_acquire+0x683/0x2ce0
[ 1877.259528][T27723]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1877.259578][T27723]  ? __fget_files+0x2a/0x420
[ 1877.259604][T27723]  ? __fget_files+0x3a8/0x420
[ 1877.259631][T27723]  __x64_sys_sendmsg+0x1b7/0x290
[ 1877.259652][T27723]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1877.259686][T27723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1877.259706][T27723]  do_syscall_64+0x174/0x580
[ 1877.259732][T27723]  ? clear_bhb_loop+0x40/0x90
[ 1877.259754][T27723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1877.259773][T27723] RIP: 0033:0x7f209d83de59
[ 1877.259798][T27723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1877.259813][T27723] RSP: 002b:00007f209ba96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1877.259833][T27723] RAX: ffffffffffffffda RBX: 00007f209dac5fa0 RCX: 00007f209d83de59
[ 1877.259846][T27723] RDX: 0000000020000000 RSI: 00002000000009c0 RDI: 0000000000000004
[ 1877.259858][T27723] RBP: 00007f209ba96090 R08: 0000000000000000 R09: 0000000000000000
[ 1877.259869][T27723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1877.259880][T27723] R13: 00007f209dac6038 R14: 00007f209dac5fa0 R15: 00007fff7e92dff8
[ 1877.259910][T27723]  </TASK>
[ 1877.345233][T27725] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.5643'.
[ 1877.442616][T24373] usb 2-1: device descriptor read/64, error -71
[ 1877.642631][T27729] FAULT_INJECTION: forcing a failure.
[ 1877.642631][T27729] name failslab, interval 1, probability 0, space 0, times 0
[ 1877.642665][T27729] CPU: 0 UID: 0 PID: 27729 Comm: syz.3.5644 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1877.642691][T27729] Tainted: [L]=SOFTLOCKUP
[ 1877.642698][T27729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1877.642709][T27729] Call Trace:
[ 1877.642717][T27729]  <TASK>
[ 1877.642725][T27729]  dump_stack_lvl+0xe8/0x150
[ 1877.642757][T27729]  should_fail_ex+0x467/0x600
[ 1877.642785][T27729]  should_failslab+0xa8/0x100
[ 1877.642810][T27729]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1877.642835][T27729]  ? __alloc_skb+0x1d7/0x7a0
[ 1877.642857][T27729]  ? __alloc_skb+0x1d7/0x7a0
[ 1877.642886][T27729]  __alloc_skb+0x1d7/0x7a0
[ 1877.642913][T27729]  _sctp_make_chunk+0x59/0x290
[ 1877.643015][T27729]  sctp_make_datafrag_empty+0x12a/0x240
[ 1877.643038][T27729]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[ 1877.643057][T27729]  ? __kmalloc_cache_noprof+0x3d2/0x6b0
[ 1877.643083][T27729]  ? sctp_datamsg_from_user+0x88/0xef0
[ 1877.643099][T27729]  ? sctp_datamsg_from_user+0x88/0xef0
[ 1877.643118][T27729]  ? sctp_auth_send_cid+0x69/0x250
[ 1877.643142][T27729]  sctp_datamsg_from_user+0x735/0xef0
[ 1877.643178][T27729]  sctp_sendmsg_to_asoc+0x13cf/0x1880
[ 1877.643208][T27729]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1877.643231][T27729]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 1877.643266][T27729]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[ 1877.643287][T27729]  ? __local_bh_enable+0x1e1/0x2f0
[ 1877.643316][T27729]  ? __local_bh_enable_ip+0x1ae/0x2b0
[ 1877.643336][T27729]  ? sctp_sendmsg_check_sflags+0x18a/0x330
[ 1877.643365][T27729]  sctp_sendmsg+0x1759/0x2a50
[ 1877.643400][T27729]  ? unwind_get_return_address+0x4d/0x90
[ 1877.643420][T27729]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1877.643448][T27729]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1877.643466][T27729]  ? smack_socket_sendmsg+0x1a9/0x590
[ 1877.643490][T27729]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[ 1877.643512][T27729]  ? _parse_integer_limit+0x192/0x1e0
[ 1877.643548][T27729]  ? sock_rps_record_flow+0x19/0x350
[ 1877.643572][T27729]  ? inet_sendmsg+0x298/0x320
[ 1877.643590][T27729]  ? get_pid_task+0x20/0x1f0
[ 1877.643617][T27729]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1877.643636][T27729]  sock_sendmsg_nosec+0x10e/0x180
[ 1877.643660][T27729]  sock_write_iter+0x2e4/0x3f0
[ 1877.643683][T27729]  ? __pfx_sock_write_iter+0x10/0x10
[ 1877.643710][T27729]  ? bpf_lsm_file_permission+0x9/0x20
[ 1877.643735][T27729]  ? security_file_permission+0x75/0x260
[ 1877.643761][T27729]  vfs_write+0x61e/0xbb0
[ 1877.643791][T27729]  ? __pfx_vfs_write+0x10/0x10
[ 1877.643821][T27729]  ? __fget_files+0x2a/0x420
[ 1877.643848][T27729]  ksys_write+0x156/0x270
[ 1877.643872][T27729]  ? __pfx_ksys_write+0x10/0x10
[ 1877.643901][T27729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1877.643922][T27729]  do_syscall_64+0x174/0x580
[ 1877.643944][T27729]  ? trace_irq_disable+0x3b/0x140
[ 1877.643962][T27729]  ? clear_bhb_loop+0x40/0x90
[ 1877.643984][T27729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1877.644002][T27729] RIP: 0033:0x7f209d83de59
[ 1877.644020][T27729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1877.644036][T27729] RSP: 002b:00007f209ba96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1877.644055][T27729] RAX: ffffffffffffffda RBX: 00007f209dac5fa0 RCX: 00007f209d83de59
[ 1877.644078][T27729] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1877.644089][T27729] RBP: 00007f209ba96090 R08: 0000000000000000 R09: 0000000000000000
[ 1877.644100][T27729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1877.644111][T27729] R13: 00007f209dac6038 R14: 00007f209dac5fa0 R15: 00007fff7e92dff8
[ 1877.644140][T27729]  </TASK>
[ 1877.699155][T24373] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1877.864442][T24373] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1877.864469][T24373] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1877.864486][T24373] usb 2-1: config 220 has no interface number 2
[ 1877.864556][T24373] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1877.864580][T24373] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1877.864596][T24373] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1877.864611][T24373] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1877.871537][T24373] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1877.871573][T24373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1877.871591][T24373] usb 2-1: Product: syz
[ 1877.871603][T24373] usb 2-1: Manufacturer: syz
[ 1877.871616][T24373] usb 2-1: SerialNumber: syz
[ 1877.914216][T27734] tmpfs: Bad value for 'nr_inodes'
[ 1877.918532][T27734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5645'.
[ 1878.381777][T24373] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1878.381808][T24373] uvcvideo 2-1:220.0: No valid video chain found.
[ 1878.381866][T24373] usb 2-1: selecting invalid altsetting 0
[ 1878.506492][T24373] usb 2-1: selecting invalid altsetting 0
[ 1878.506515][T24373] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[ 1878.514913][T24373] usb 2-1: USB disconnect, device number 14
[ 1878.628172][T22162] Bluetooth: hci3: command tx timeout
[ 1878.928412][T24373] IPVS: starting estimator thread 0...
[ 1879.024601][T27761] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1879.945903][T27765] netlink: 'syz.3.5654': attribute type 2 has an invalid length.
[ 1881.234979][T22162] Bluetooth: hci3: command tx timeout
[ 1881.668283][T27790] FAULT_INJECTION: forcing a failure.
[ 1881.668283][T27790] name failslab, interval 1, probability 0, space 0, times 0
[ 1881.668316][T27790] CPU: 1 UID: 0 PID: 27790 Comm: syz.1.5661 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1881.668339][T27790] Tainted: [L]=SOFTLOCKUP
[ 1881.668345][T27790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1881.668355][T27790] Call Trace:
[ 1881.668361][T27790]  <TASK>
[ 1881.668367][T27790]  dump_stack_lvl+0xe8/0x150
[ 1881.668392][T27790]  should_fail_ex+0x467/0x600
[ 1881.668416][T27790]  should_failslab+0xa8/0x100
[ 1881.668433][T27790]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1881.668455][T27790]  ? __alloc_skb+0x1d7/0x7a0
[ 1881.668472][T27790]  ? __alloc_skb+0x1d7/0x7a0
[ 1881.668494][T27790]  __alloc_skb+0x1d7/0x7a0
[ 1881.668515][T27790]  netlink_sendmsg+0x5d4/0xb40
[ 1881.668536][T27790]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1881.668550][T27790]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1881.668570][T27790]  ? __kernel_text_address+0xd/0x30
[ 1881.668583][T27790]  ? unwind_get_return_address+0x4d/0x90
[ 1881.668600][T27790]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1881.668612][T27790]  sock_sendmsg_nosec+0x13a/0x180
[ 1881.668631][T27790]  ____sys_sendmsg+0x565/0x870
[ 1881.668644][T27790]  ? __might_fault+0xaf/0x130
[ 1881.668671][T27790]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1881.668691][T27790]  ? import_iovec+0x73/0xa0
[ 1881.668708][T27790]  ___sys_sendmsg+0x2a5/0x360
[ 1881.668720][T27790]  ? __lock_acquire+0x683/0x2ce0
[ 1881.668738][T27790]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1881.668776][T27790]  ? __fget_files+0x2a/0x420
[ 1881.668789][T27790]  ? __fget_files+0x3a8/0x420
[ 1881.668809][T27790]  __x64_sys_sendmsg+0x1b7/0x290
[ 1881.668825][T27790]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1881.668851][T27790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.668866][T27790]  do_syscall_64+0x174/0x580
[ 1881.668886][T27790]  ? clear_bhb_loop+0x40/0x90
[ 1881.668902][T27790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.668916][T27790] RIP: 0033:0x7fabe4b3de59
[ 1881.668929][T27790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1881.668941][T27790] RSP: 002b:00007fabe2d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1881.668958][T27790] RAX: ffffffffffffffda RBX: 00007fabe4dc5fa0 RCX: 00007fabe4b3de59
[ 1881.668968][T27790] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007
[ 1881.668977][T27790] RBP: 00007fabe2d96090 R08: 0000000000000000 R09: 0000000000000000
[ 1881.668986][T27790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1881.668994][T27790] R13: 00007fabe4dc6038 R14: 00007fabe4dc5fa0 R15: 00007ffdc61cf758
[ 1881.669017][T27790]  </TASK>
[ 1881.803869][ T9335] IPVS: starting estimator thread 0...
[ 1882.105892][T27794] IPVS: using max 11 ests per chain, 26400 per kthread
[ 1883.052159][T27805] cifs: Unknown parameter 'fd'
[ 1883.225945][T13896] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 1883.236738][T22162] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1883.237228][T22162] Bluetooth: hci2: Injecting HCI hardware error event
[ 1883.253847][ T5619] Bluetooth: hci2: hardware error 0x00
[ 1883.290219][ T9335] usb 9-1: new full-speed USB device number 127 using dummy_hcd
[ 1883.358141][T27699] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1883.358342][T27699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1883.358557][T27699] bridge_slave_0: entered allmulticast mode
[ 1883.364462][T27699] bridge_slave_0: entered promiscuous mode
[ 1883.419768][T22162] Bluetooth: hci3: command tx timeout
[ 1883.501333][T13896] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[ 1883.501362][T13896] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1883.501380][T13896] usb 10-1: config 220 has no interface number 2
[ 1883.501523][T13896] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1883.501548][T13896] usb 10-1: config 220 interface 0 has no altsetting 0
[ 1883.501565][T13896] usb 10-1: config 220 interface 76 has no altsetting 0
[ 1883.515868][T27547] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1883.517558][T13896] usb 10-1: config 220 interface 1 has no altsetting 0
[ 1883.550246][T27699] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1883.587973][T27699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1883.588243][T27699] bridge_slave_1: entered allmulticast mode
[ 1883.638128][T13896] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1883.638158][T13896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.638270][T13896] usb 10-1: Product: syz
[ 1883.638284][T13896] usb 10-1: Manufacturer: syz
[ 1883.638297][T13896] usb 10-1: SerialNumber: syz
[ 1883.638585][ T9335] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1883.638608][ T9335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.638626][ T9335] usb 9-1: Product: syz
[ 1883.638639][ T9335] usb 9-1: Manufacturer: syz
[ 1883.638652][ T9335] usb 9-1: SerialNumber: syz
[ 1883.648499][T27699] bridge_slave_1: entered promiscuous mode
[ 1883.652001][ T9335] usb 9-1: config 0 descriptor??
[ 1883.722168][T27547] usb 2-1: Using ep0 maxpacket: 8
[ 1883.732657][T27547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1883.732757][T27547] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1883.732779][T27547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1883.791375][T27547] usb 2-1: config 0 descriptor??
[ 1883.898412][T27699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1883.924073][T27699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1883.978559][ T9335] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1884.163313][T27699] team0: Port device team_slave_0 added
[ 1884.166241][T27699] team0: Port device team_slave_1 added
[ 1884.224414][T27699] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1884.224429][T27699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1884.224451][T27699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1884.226574][T27699] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1884.226587][T27699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1884.226606][T27699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1884.293956][T27547] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1884.355252][T27547] usb 2-1: USB disconnect, device number 15
[ 1884.584340][T27833] ipvlan1: mtu less than device minimum
[ 1884.617792][T27699] hsr_slave_0: entered promiscuous mode
[ 1884.632300][T27699] hsr_slave_1: entered promiscuous mode
[ 1885.439396][ T5790] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1885.599201][ T5790] usb 4-1: Using ep0 maxpacket: 16
[ 1885.601507][ T5790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1885.601530][ T5790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1885.605012][ T5790] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1885.605039][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1885.605057][ T5790] usb 4-1: Product: syz
[ 1885.605070][ T5790] usb 4-1: Manufacturer: syz
[ 1885.605084][ T5790] usb 4-1: SerialNumber: syz
[ 1885.631503][T22162] Bluetooth: hci3: command tx timeout
[ 1885.779645][ T5790] usb 4-1: 0:2 : does not exist
[ 1885.779723][ T5790] usb 4-1: unit 6 not found!
[ 1885.829309][ T5619] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1885.991304][T27836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1886.016497][T27836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1886.052265][T27699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1886.158443][ T5619] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1886.198907][ T5619] Bluetooth: hci1: Injecting HCI hardware error event
[ 1886.209882][T22162] Bluetooth: hci1: hardware error 0x00
[ 1886.223028][ T9335] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1886.376263][ T9335] usb 9-1: USB disconnect, device number 127
[ 1886.435171][T13896] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1886.435202][T13896] uvcvideo 10-1:220.0: No valid video chain found.
[ 1886.435268][T13896] usb 10-1: selecting invalid altsetting 0
[ 1886.477471][T13896] usb 10-1: selecting invalid altsetting 0
[ 1886.477493][T13896] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[ 1886.621567][T13896] usb 10-1: USB disconnect, device number 52
[ 1887.057798][T13896] IPVS: starting estimator thread 0...
[ 1887.335588][T27850] IPVS: using max 10 ests per chain, 24000 per kthread
[ 1888.249703][T17809] usb 4-1: USB disconnect, device number 118
[ 1888.731099][T27880] FAULT_INJECTION: forcing a failure.
[ 1888.731099][T27880] name failslab, interval 1, probability 0, space 0, times 0
[ 1888.731129][T27880] CPU: 1 UID: 0 PID: 27880 Comm: syz.9.5688 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1888.731148][T27880] Tainted: [L]=SOFTLOCKUP
[ 1888.731153][T27880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1888.731162][T27880] Call Trace:
[ 1888.731168][T27880]  <TASK>
[ 1888.731174][T27880]  dump_stack_lvl+0xe8/0x150
[ 1888.731199][T27880]  should_fail_ex+0x467/0x600
[ 1888.731222][T27880]  should_failslab+0xa8/0x100
[ 1888.731239][T27880]  __kmalloc_noprof+0xfe/0x780
[ 1888.731253][T27880]  ? tomoyo_encode+0x2ad/0x570
[ 1888.731268][T27880]  ? tomoyo_encode+0x2ad/0x570
[ 1888.731288][T27880]  tomoyo_encode+0x2ad/0x570
[ 1888.731307][T27880]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1888.731330][T27880]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1888.731352][T27880]  tomoyo_path_number_perm+0x246/0x5f0
[ 1888.731373][T27880]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1888.731391][T27880]  ? __lock_acquire+0x683/0x2ce0
[ 1888.731416][T27880]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1888.731434][T27880]  ? hook_file_ioctl+0x1f3/0x600
[ 1888.731455][T27880]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1888.731487][T27880]  ? __fget_files+0x2a/0x420
[ 1888.731502][T27880]  ? __fget_files+0x2a/0x420
[ 1888.731514][T27880]  ? __fget_files+0x3a8/0x420
[ 1888.731526][T27880]  ? __fget_files+0x2a/0x420
[ 1888.731542][T27880]  security_file_ioctl+0xc3/0x2a0
[ 1888.731559][T27880]  __se_sys_ioctl+0x47/0x170
[ 1888.731576][T27880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.731591][T27880]  do_syscall_64+0x174/0x580
[ 1888.731607][T27880]  ? trace_irq_disable+0x3b/0x140
[ 1888.731620][T27880]  ? clear_bhb_loop+0x40/0x90
[ 1888.731638][T27880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.731651][T27880] RIP: 0033:0x7f32d052de59
[ 1888.731665][T27880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1888.731677][T27880] RSP: 002b:00007f32ce786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1888.731693][T27880] RAX: ffffffffffffffda RBX: 00007f32d07b5fa0 RCX: 00007f32d052de59
[ 1888.731704][T27880] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003
[ 1888.731713][T27880] RBP: 00007f32ce786090 R08: 0000000000000000 R09: 0000000000000000
[ 1888.731722][T27880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1888.731731][T27880] R13: 00007f32d07b6038 R14: 00007f32d07b5fa0 R15: 00007ffe9dd17bd8
[ 1888.731755][T27880]  </TASK>
[ 1888.814401][T27880] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1888.929631][T27699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1889.017482][T27888] FAULT_INJECTION: forcing a failure.
[ 1889.017482][T27888] name failslab, interval 1, probability 0, space 0, times 0
[ 1889.017516][T27888] CPU: 0 UID: 0 PID: 27888 Comm: syz.3.5690 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1889.017541][T27888] Tainted: [L]=SOFTLOCKUP
[ 1889.017547][T27888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1889.017559][T27888] Call Trace:
[ 1889.017566][T27888]  <TASK>
[ 1889.017574][T27888]  dump_stack_lvl+0xe8/0x150
[ 1889.017606][T27888]  should_fail_ex+0x467/0x600
[ 1889.017637][T27888]  should_failslab+0xa8/0x100
[ 1889.017661][T27888]  __kmalloc_noprof+0xfe/0x780
[ 1889.017680][T27888]  ? tomoyo_encode+0x2ad/0x570
[ 1889.017700][T27888]  ? tomoyo_encode+0x2ad/0x570
[ 1889.017727][T27888]  tomoyo_encode+0x2ad/0x570
[ 1889.017753][T27888]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1889.017788][T27888]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1889.017815][T27888]  tomoyo_path_number_perm+0x246/0x5f0
[ 1889.017844][T27888]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1889.017869][T27888]  ? __lock_acquire+0x683/0x2ce0
[ 1889.017902][T27888]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1889.017932][T27888]  ? hook_file_ioctl+0x1f3/0x600
[ 1889.017956][T27888]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1889.017998][T27888]  ? __fget_files+0x2a/0x420
[ 1889.018019][T27888]  ? __fget_files+0x2a/0x420
[ 1889.018036][T27888]  ? __fget_files+0x3a8/0x420
[ 1889.018052][T27888]  ? __fget_files+0x2a/0x420
[ 1889.018073][T27888]  security_file_ioctl+0xc3/0x2a0
[ 1889.018095][T27888]  __se_sys_ioctl+0x47/0x170
[ 1889.018117][T27888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1889.018137][T27888]  do_syscall_64+0x174/0x580
[ 1889.018161][T27888]  ? trace_irq_disable+0x3b/0x140
[ 1889.018179][T27888]  ? clear_bhb_loop+0x40/0x90
[ 1889.018202][T27888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1889.018220][T27888] RIP: 0033:0x7f209d83de59
[ 1889.018238][T27888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1889.018254][T27888] RSP: 002b:00007f209ba96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1889.018274][T27888] RAX: ffffffffffffffda RBX: 00007f209dac5fa0 RCX: 00007f209d83de59
[ 1889.018288][T27888] RDX: 0000200000000040 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1889.018300][T27888] RBP: 00007f209ba96090 R08: 0000000000000000 R09: 0000000000000000
[ 1889.018311][T27888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1889.018323][T27888] R13: 00007f209dac6038 R14: 00007f209dac5fa0 R15: 00007fff7e92dff8
[ 1889.018354][T27888]  </TASK>
[ 1889.018412][T27888] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1889.771568][T22162] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1890.240461][T27898] syzkaller0: entered promiscuous mode
[ 1890.240488][T27898] syzkaller0: entered allmulticast mode
[ 1891.017306][   T37] kauditd_printk_skb: 12 callbacks suppressed
[ 1891.017321][   T37] audit: type=1326 audit(1783260349.209:34086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.017358][   T37] audit: type=1326 audit(1783260349.209:34085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.017389][   T37] audit: type=1326 audit(1783260349.209:34087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.017436][   T37] audit: type=1326 audit(1783260349.209:34088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.017467][   T37] audit: type=1326 audit(1783260349.209:34089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.017973][   T37] audit: type=1326 audit(1783260349.209:34090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.018283][   T37] audit: type=1326 audit(1783260349.209:34091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.018317][   T37] audit: type=1326 audit(1783260349.209:34092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.018594][   T37] audit: type=1326 audit(1783260349.209:34093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.020659][   T37] audit: type=1326 audit(1783260349.209:34094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27940 comm="syz.8.5711" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fec9a00de59 code=0x7ffc0000
[ 1891.415472][T22162] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1891.415983][T22162] Bluetooth: hci0: Injecting HCI hardware error event
[ 1891.433893][ T5619] Bluetooth: hci0: hardware error 0x00
[ 1892.089035][T17809] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1892.270436][T17809] usb 4-1: Using ep0 maxpacket: 8
[ 1892.278320][T17809] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[ 1892.278388][T17809] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1892.278427][T17809] usb 4-1: config 6 has no interface number 0
[ 1892.278666][T17809] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1892.288669][T17809] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1892.288740][T17809] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1892.288833][T17809] usb 4-1: Product: syz
[ 1892.288890][T17809] usb 4-1: Manufacturer: syz
[ 1892.288948][T17809] usb 4-1: SerialNumber: syz
[ 1892.440808][T17809] hso 4-1:6.2: Failed to find INT IN ep
[ 1892.499287][T27699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1892.689023][T28002] syzkaller0: entered promiscuous mode
[ 1892.689061][T28002] syzkaller0: entered allmulticast mode
[ 1892.771651][T28036] 9p: Bad value for 'wfdno'
[ 1893.164882][T28052] netlink: 'syz.8.5723': attribute type 1 has an invalid length.
[ 1893.284854][T28056] netlink: 'syz.8.5723': attribute type 10 has an invalid length.
[ 1893.284874][T28056] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5723'.
[ 1893.488927][T13896] usb 10-1: new full-speed USB device number 53 using dummy_hcd
[ 1893.683097][T13896] usb 10-1: config 0 has an invalid interface number: 146 but max is -1
[ 1893.683125][T13896] usb 10-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config
[ 1893.683142][T13896] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1893.683161][T13896] usb 10-1: config 0 has no interface number 0
[ 1893.683204][T13896] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 1893.683224][T13896] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1893.683235][T13896] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1893.683247][T13896] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[ 1893.683260][T13896] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1893.683272][T13896] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid maxpacket 16454, setting to 64
[ 1893.685546][T13896] usb 10-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1893.685572][T13896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1893.685590][T13896] usb 10-1: Product: syz
[ 1893.685598][T13896] usb 10-1: Manufacturer: syz
[ 1893.685605][T13896] usb 10-1: SerialNumber: syz
[ 1893.689563][T13896] usb 10-1: config 0 descriptor??
[ 1893.699381][T28054] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1893.699538][T28054] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1893.849646][T13896] usb 10-1: will this work? Command EP is not usually 12
[ 1893.849662][T13896] usb 10-1: will this work? Response EP is not usually 3
[ 1893.849670][T13896] usb 10-1: will this work? Image data EP is not usually 2
[ 1893.866276][T27699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.888648][T13896] scsi host1: microtekX6
[ 1893.960585][T13896] usb 10-1: USB disconnect, device number 53
[ 1894.014828][T25321] usb 10-1: error -19 submitting URB
[ 1894.109894][  T943] usb 10-1: error -19 submitting URB
[ 1894.141920][T28052] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1894.143069][T28055] dummy0: left promiscuous mode
[ 1894.143226][T25321] usb 10-1: error -19 submitting URB
[ 1894.194725][  T943] usb 10-1: error -19 submitting URB
[ 1894.276817][T27547] usb 4-1: USB disconnect, device number 119
[ 1894.318933][T28056] dummy0: entered promiscuous mode
[ 1894.470815][T28066] atomic_op ffff88807497c218 conn xmit_atomic 0000000000000000
[ 1894.555020][T28068] FAULT_INJECTION: forcing a failure.
[ 1894.555020][T28068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1894.555054][T28068] CPU: 0 UID: 0 PID: 28068 Comm: syz.1.5728 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1894.555077][T28068] Tainted: [L]=SOFTLOCKUP
[ 1894.555082][T28068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1894.555091][T28068] Call Trace:
[ 1894.555098][T28068]  <TASK>
[ 1894.555106][T28068]  dump_stack_lvl+0xe8/0x150
[ 1894.555138][T28068]  should_fail_ex+0x467/0x600
[ 1894.555169][T28068]  _copy_to_user+0x31/0xb0
[ 1894.555191][T28068]  simple_read_from_buffer+0xe1/0x170
[ 1894.555215][T28068]  proc_fail_nth_read+0x1be/0x230
[ 1894.555237][T28068]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1894.555259][T28068]  ? rw_verify_area+0x250/0x4d0
[ 1894.555281][T28068]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1894.555349][T28068]  vfs_read+0x219/0xa90
[ 1894.555387][T28068]  ? __pfx_vfs_read+0x10/0x10
[ 1894.555410][T28068]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1894.555434][T28068]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1894.555458][T28068]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1894.555482][T28068]  ? mutex_lock_nested+0x152/0x1d0
[ 1894.555500][T28068]  ? fdget_pos+0x252/0x320
[ 1894.555525][T28068]  ksys_read+0x156/0x270
[ 1894.555548][T28068]  ? __pfx_ksys_read+0x10/0x10
[ 1894.555577][T28068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.555597][T28068]  do_syscall_64+0x174/0x580
[ 1894.555621][T28068]  ? trace_irq_disable+0x3b/0x140
[ 1894.555638][T28068]  ? clear_bhb_loop+0x40/0x90
[ 1894.555661][T28068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.555679][T28068] RIP: 0033:0x7fabe4afe68e
[ 1894.555698][T28068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1894.555714][T28068] RSP: 002b:00007fabe2d95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1894.555734][T28068] RAX: ffffffffffffffda RBX: 00007fabe2d966c0 RCX: 00007fabe4afe68e
[ 1894.555747][T28068] RDX: 000000000000000f RSI: 00007fabe2d960a0 RDI: 0000000000000004
[ 1894.555758][T28068] RBP: 00007fabe2d96090 R08: 0000000000000000 R09: 0000000000000000
[ 1894.555769][T28068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1894.555778][T28068] R13: 00007fabe4dc6038 R14: 00007fabe4dc5fa0 R15: 00007ffdc61cf758
[ 1894.555804][T28068]  </TASK>
[ 1894.783046][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1894.791489][T28075] syzkaller0: entered promiscuous mode
[ 1894.791513][T28075] syzkaller0: entered allmulticast mode
[ 1894.958510][T28080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5733'.
[ 1895.584988][T27547] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1895.788014][T27547] usb 9-1: Using ep0 maxpacket: 32
[ 1895.942774][T27547] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[ 1895.942803][T27547] usb 9-1: config 0 has no interface number 0
[ 1895.942850][T27547] usb 9-1: config 0 interface 184 has no altsetting 0
[ 1896.208204][T27547] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1896.208232][T27547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1896.208251][T27547] usb 9-1: Product: syz
[ 1896.208263][T27547] usb 9-1: Manufacturer: syz
[ 1896.208277][T27547] usb 9-1: SerialNumber: syz
[ 1896.228457][T27547] usb 9-1: config 0 descriptor??
[ 1896.538444][T28089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5736'.
[ 1896.722530][T28080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5733'.
[ 1897.042377][T27547] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1897.042405][T27547] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1897.258534][T27547] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[ 1897.258564][T27547] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[ 1897.258581][T27547] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1897.258897][T27547] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61
[ 1897.504985][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 1897.505047][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 1897.560499][T25315] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1897.573731][T25315] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1897.573768][T25315] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1897.573793][T25315] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1899.458380][T28022] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1899.487096][T27547] usb 9-1: USB disconnect, device number 2
[ 1899.681414][T28022] usb 2-1: Using ep0 maxpacket: 8
[ 1899.683132][T28022] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[ 1899.683154][T28022] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1899.683171][T28022] usb 2-1: config 6 has no interface number 0
[ 1899.683196][T28022] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1899.686363][T28022] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1899.686379][T28022] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1899.686389][T28022] usb 2-1: Product: syz
[ 1899.686397][T28022] usb 2-1: Manufacturer: syz
[ 1899.686404][T28022] usb 2-1: SerialNumber: syz
[ 1899.701290][T28022] hso 2-1:6.2: Failed to find INT IN ep
[ 1899.718996][T28118] 9p: Bad value for 'rfdno'
[ 1899.922057][T28125] syzkaller0: entered promiscuous mode
[ 1899.922082][T28125] syzkaller0: entered allmulticast mode
[ 1900.630387][ T5733] usb 4-1: new full-speed USB device number 120 using dummy_hcd
[ 1900.745705][T28132] FAULT_INJECTION: forcing a failure.
[ 1900.745705][T28132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1900.745734][T28132] CPU: 1 UID: 0 PID: 28132 Comm: syz.8.5749 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1900.745753][T28132] Tainted: [L]=SOFTLOCKUP
[ 1900.745758][T28132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1900.745767][T28132] Call Trace:
[ 1900.745773][T28132]  <TASK>
[ 1900.745779][T28132]  dump_stack_lvl+0xe8/0x150
[ 1900.745805][T28132]  should_fail_ex+0x467/0x600
[ 1900.745828][T28132]  _copy_from_user+0x2d/0xb0
[ 1900.745844][T28132]  kstrtouint_from_user+0xd6/0x180
[ 1900.745865][T28132]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1900.745882][T28132]  ? __lock_acquire+0x683/0x2ce0
[ 1900.745908][T28132]  proc_fail_nth_write+0x8e/0x210
[ 1900.745923][T28132]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1900.745943][T28132]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1900.745959][T28132]  vfs_write+0x29f/0xbb0
[ 1900.745981][T28132]  ? __pfx_vfs_write+0x10/0x10
[ 1900.745998][T28132]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1900.746017][T28132]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1900.746035][T28132]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1900.746052][T28132]  ? mutex_lock_nested+0x152/0x1d0
[ 1900.746065][T28132]  ? fdget_pos+0x252/0x320
[ 1900.746085][T28132]  ksys_write+0x156/0x270
[ 1900.746102][T28132]  ? __pfx_ksys_write+0x10/0x10
[ 1900.746124][T28132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1900.746141][T28132]  do_syscall_64+0x174/0x580
[ 1900.746158][T28132]  ? trace_irq_disable+0x3b/0x140
[ 1900.746171][T28132]  ? clear_bhb_loop+0x40/0x90
[ 1900.746189][T28132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1900.746202][T28132] RIP: 0033:0x7fec99fce68e
[ 1900.746216][T28132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1900.746228][T28132] RSP: 002b:00007fec98244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1900.746244][T28132] RAX: ffffffffffffffda RBX: 00007fec982456c0 RCX: 00007fec99fce68e
[ 1900.746254][T28132] RDX: 0000000000000001 RSI: 00007fec982450a0 RDI: 0000000000000004
[ 1900.746262][T28132] RBP: 00007fec98245090 R08: 0000000000000000 R09: 0000000000000000
[ 1900.746271][T28132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1900.746279][T28132] R13: 00007fec9a296128 R14: 00007fec9a296090 R15: 00007ffdfab9e678
[ 1900.746302][T28132]  </TASK>
[ 1900.793509][ T5733] usb 4-1: config 0 has an invalid interface number: 146 but max is -1
[ 1900.793535][ T5733] usb 4-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config
[ 1900.793553][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1900.793571][ T5733] usb 4-1: config 0 has no interface number 0
[ 1900.793611][ T5733] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 1900.793642][ T5733] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1900.793662][ T5733] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1900.793684][ T5733] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[ 1900.793707][ T5733] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1900.793728][ T5733] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid maxpacket 16454, setting to 64
[ 1900.795891][ T5733] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1900.795915][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1900.795934][ T5733] usb 4-1: Product: syz
[ 1900.795947][ T5733] usb 4-1: Manufacturer: syz
[ 1900.795960][ T5733] usb 4-1: SerialNumber: syz
[ 1900.803056][ T5733] usb 4-1: config 0 descriptor??
[ 1900.804098][T28129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1900.804272][T28129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1900.807105][ T5733] usb 4-1: will this work? Command EP is not usually 12
[ 1900.807124][ T5733] usb 4-1: will this work? Response EP is not usually 3
[ 1900.807137][ T5733] usb 4-1: will this work? Image data EP is not usually 2
[ 1900.832381][ T5733] scsi host1: microtekX6
[ 1900.864906][T13896] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1900.971939][T27989] usb 4-1: error -90 submitting URB
[ 1900.983181][   T57] usb 4-1: error -90 submitting URB
[ 1901.023079][ T5733] usb 4-1: USB disconnect, device number 120
[ 1901.025874][   T57] usb 4-1: error -19 submitting URB
[ 1901.026656][T13896] usb 10-1: Using ep0 maxpacket: 8
[ 1901.057620][T13896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1901.057668][T13896] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1901.057689][T13896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1901.068585][   T57] usb 4-1: error -19 submitting URB
[ 1901.165253][T13896] usb 10-1: config 0 descriptor??
[ 1901.315760][T27699] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1901.316358][T28131] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 1901.363544][ T9335] usb 2-1: USB disconnect, device number 16
[ 1901.417079][T13896] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1901.459171][T27699] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1901.461886][T27699] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1901.652959][T27699] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1901.692042][T27699] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1901.717064][T28022] usb 10-1: USB disconnect, device number 54
[ 1901.717184][    C0] iowarrior 10-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1901.760385][T27699] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1901.789214][T27699] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1901.914434][T28140] FAULT_INJECTION: forcing a failure.
[ 1901.914434][T28140] name failslab, interval 1, probability 0, space 0, times 0
[ 1901.914468][T28140] CPU: 0 UID: 0 PID: 28140 Comm: syz.1.5751 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1901.914493][T28140] Tainted: [L]=SOFTLOCKUP
[ 1901.914500][T28140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1901.914511][T28140] Call Trace:
[ 1901.914518][T28140]  <TASK>
[ 1901.914525][T28140]  dump_stack_lvl+0xe8/0x150
[ 1901.914556][T28140]  should_fail_ex+0x467/0x600
[ 1901.914587][T28140]  should_failslab+0xa8/0x100
[ 1901.914609][T28140]  __kmalloc_noprof+0xfe/0x780
[ 1901.914632][T28140]  ? tomoyo_encode+0x2ad/0x570
[ 1901.914652][T28140]  ? tomoyo_encode+0x2ad/0x570
[ 1901.914679][T28140]  tomoyo_encode+0x2ad/0x570
[ 1901.914705][T28140]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1901.914736][T28140]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1901.914763][T28140]  tomoyo_path_number_perm+0x246/0x5f0
[ 1901.914792][T28140]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1901.914817][T28140]  ? __lock_acquire+0x683/0x2ce0
[ 1901.914849][T28140]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1901.914873][T28140]  ? hook_file_ioctl+0x1f3/0x600
[ 1901.914896][T28140]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1901.914938][T28140]  ? __fget_files+0x2a/0x420
[ 1901.914959][T28140]  ? __fget_files+0x2a/0x420
[ 1901.914975][T28140]  ? __fget_files+0x3a8/0x420
[ 1901.914991][T28140]  ? __fget_files+0x2a/0x420
[ 1901.915013][T28140]  security_file_ioctl+0xc3/0x2a0
[ 1901.915034][T28140]  __se_sys_ioctl+0x47/0x170
[ 1901.915061][T28140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1901.915082][T28140]  do_syscall_64+0x174/0x580
[ 1901.915106][T28140]  ? clear_bhb_loop+0x40/0x90
[ 1901.915126][T28140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1901.915143][T28140] RIP: 0033:0x7fabe4b3de59
[ 1901.915160][T28140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1901.915173][T28140] RSP: 002b:00007fabe2d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1901.915192][T28140] RAX: ffffffffffffffda RBX: 00007fabe4dc5fa0 RCX: 00007fabe4b3de59
[ 1901.915205][T28140] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003
[ 1901.915217][T28140] RBP: 00007fabe2d96090 R08: 0000000000000000 R09: 0000000000000000
[ 1901.915229][T28140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1901.915239][T28140] R13: 00007fabe4dc6038 R14: 00007fabe4dc5fa0 R15: 00007ffdc61cf758
[ 1901.915271][T28140]  </TASK>
[ 1901.916423][T28140] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1901.946174][T27699] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1902.481187][T28153] FAULT_INJECTION: forcing a failure.
[ 1902.481187][T28153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1902.481221][T28153] CPU: 1 UID: 0 PID: 28153 Comm: syz.3.5755 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1902.481245][T28153] Tainted: [L]=SOFTLOCKUP
[ 1902.481253][T28153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1902.481264][T28153] Call Trace:
[ 1902.481271][T28153]  <TASK>
[ 1902.481279][T28153]  dump_stack_lvl+0xe8/0x150
[ 1902.481310][T28153]  should_fail_ex+0x467/0x600
[ 1902.481338][T28153]  strncpy_from_user+0x36/0x2c0
[ 1902.481365][T28153]  do_getname+0x77/0x250
[ 1902.481390][T28153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1902.481411][T28153]  __se_sys_mknodat+0x27/0x150
[ 1902.481432][T28153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1902.481452][T28153]  do_syscall_64+0x174/0x580
[ 1902.481475][T28153]  ? trace_irq_disable+0x3b/0x140
[ 1902.481493][T28153]  ? clear_bhb_loop+0x40/0x90
[ 1902.481523][T28153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1902.481541][T28153] RIP: 0033:0x7f209d83de59
[ 1902.481559][T28153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1902.481574][T28153] RSP: 002b:00007f209ba96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 1902.481594][T28153] RAX: ffffffffffffffda RBX: 00007f209dac5fa0 RCX: 00007f209d83de59
[ 1902.481608][T28153] RDX: 00000000000081c0 RSI: 0000200000000300 RDI: ffffffffffffff9c
[ 1902.481621][T28153] RBP: 00007f209ba96090 R08: 0000000000000000 R09: 0000000000000000
[ 1902.481632][T28153] R10: 000000000002c800 R11: 0000000000000246 R12: 0000000000000001
[ 1902.481644][T28153] R13: 00007f209dac6038 R14: 00007f209dac5fa0 R15: 00007fff7e92dff8
[ 1902.481674][T28153]  </TASK>
[ 1902.537375][T27699] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1902.732859][T28156] FAULT_INJECTION: forcing a failure.
[ 1902.732859][T28156] name failslab, interval 1, probability 0, space 0, times 0
[ 1902.732887][T28156] CPU: 0 UID: 0 PID: 28156 Comm: syz.3.5757 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1902.732907][T28156] Tainted: [L]=SOFTLOCKUP
[ 1902.732911][T28156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1902.732920][T28156] Call Trace:
[ 1902.732926][T28156]  <TASK>
[ 1902.732931][T28156]  dump_stack_lvl+0xe8/0x150
[ 1902.732958][T28156]  should_fail_ex+0x467/0x600
[ 1902.732981][T28156]  should_failslab+0xa8/0x100
[ 1902.732998][T28156]  __kmalloc_noprof+0xfe/0x780
[ 1902.733013][T28156]  ? tomoyo_encode+0x2ad/0x570
[ 1902.733028][T28156]  ? tomoyo_encode+0x2ad/0x570
[ 1902.733048][T28156]  tomoyo_encode+0x2ad/0x570
[ 1902.733067][T28156]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1902.733090][T28156]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1902.733111][T28156]  tomoyo_path_number_perm+0x246/0x5f0
[ 1902.733132][T28156]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1902.733152][T28156]  ? __lock_acquire+0x683/0x2ce0
[ 1902.733177][T28156]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1902.733196][T28156]  ? hook_file_ioctl+0x1f3/0x600
[ 1902.733213][T28156]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1902.733244][T28156]  ? __fget_files+0x2a/0x420
[ 1902.733260][T28156]  ? __fget_files+0x2a/0x420
[ 1902.733271][T28156]  ? __fget_files+0x3a8/0x420
[ 1902.733283][T28156]  ? __fget_files+0x2a/0x420
[ 1902.733298][T28156]  security_file_ioctl+0xc3/0x2a0
[ 1902.733314][T28156]  __se_sys_ioctl+0x47/0x170
[ 1902.733330][T28156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1902.733346][T28156]  do_syscall_64+0x174/0x580
[ 1902.733362][T28156]  ? trace_irq_disable+0x3b/0x140
[ 1902.733375][T28156]  ? clear_bhb_loop+0x40/0x90
[ 1902.733392][T28156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1902.733405][T28156] RIP: 0033:0x7f209d83de59
[ 1902.733419][T28156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1902.733431][T28156] RSP: 002b:00007f209ba96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1902.733446][T28156] RAX: ffffffffffffffda RBX: 00007f209dac5fa0 RCX: 00007f209d83de59
[ 1902.733456][T28156] RDX: 00002000000017c0 RSI: 00000000c0306201 RDI: 0000000000000004
[ 1902.733464][T28156] RBP: 00007f209ba96090 R08: 0000000000000000 R09: 0000000000000000
[ 1902.733472][T28156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1902.733480][T28156] R13: 00007f209dac6038 R14: 00007f209dac5fa0 R15: 00007fff7e92dff8
[ 1902.733502][T28156]  </TASK>
[ 1902.733518][T28156] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1902.746227][T27699] 8021q: adding VLAN 0 to HW filter on device team0
[ 1902.775925][T25304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1902.776164][T25304] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1902.897546][T25304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1902.898833][T25304] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1903.545863][T28163] syzkaller0: entered promiscuous mode
[ 1903.545889][T28163] syzkaller0: entered allmulticast mode
[ 1903.612452][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5759'.
[ 1904.810969][T17809] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1904.995982][T17809] usb 10-1: Using ep0 maxpacket: 8
[ 1905.033364][T17809] usb 10-1: config 6 has an invalid interface number: 2 but max is 0
[ 1905.033435][T17809] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1905.033475][T17809] usb 10-1: config 6 has no interface number 0
[ 1905.033718][T17809] usb 10-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1905.113143][T17809] usb 10-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1905.113216][T17809] usb 10-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1905.113259][T17809] usb 10-1: Product: syz
[ 1905.113295][T17809] usb 10-1: Manufacturer: syz
[ 1905.113330][T17809] usb 10-1: SerialNumber: syz
[ 1905.226246][T17809] hso 10-1:6.2: Failed to find INT IN ep
[ 1905.367159][T28175] FAULT_INJECTION: forcing a failure.
[ 1905.367159][T28175] name failslab, interval 1, probability 0, space 0, times 0
[ 1905.367193][T28175] CPU: 1 UID: 0 PID: 28175 Comm: syz.1.5761 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1905.367218][T28175] Tainted: [L]=SOFTLOCKUP
[ 1905.367224][T28175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1905.367234][T28175] Call Trace:
[ 1905.367242][T28175]  <TASK>
[ 1905.367251][T28175]  dump_stack_lvl+0xe8/0x150
[ 1905.367283][T28175]  should_fail_ex+0x467/0x600
[ 1905.367313][T28175]  should_failslab+0xa8/0x100
[ 1905.367335][T28175]  __kmalloc_noprof+0xfe/0x780
[ 1905.367355][T28175]  ? tomoyo_encode+0x2ad/0x570
[ 1905.367375][T28175]  ? tomoyo_encode+0x2ad/0x570
[ 1905.367402][T28175]  tomoyo_encode+0x2ad/0x570
[ 1905.367429][T28175]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1905.367460][T28175]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1905.367486][T28175]  tomoyo_path_number_perm+0x246/0x5f0
[ 1905.367519][T28175]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1905.367545][T28175]  ? __lock_acquire+0x683/0x2ce0
[ 1905.367578][T28175]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1905.367602][T28175]  ? hook_file_ioctl+0x1f3/0x600
[ 1905.367625][T28175]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1905.367667][T28175]  ? __fget_files+0x2a/0x420
[ 1905.367688][T28175]  ? __fget_files+0x2a/0x420
[ 1905.367711][T28175]  ? __fget_files+0x3a8/0x420
[ 1905.367727][T28175]  ? __fget_files+0x2a/0x420
[ 1905.367749][T28175]  security_file_ioctl+0xc3/0x2a0
[ 1905.367770][T28175]  __se_sys_ioctl+0x47/0x170
[ 1905.367792][T28175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1905.367813][T28175]  do_syscall_64+0x174/0x580
[ 1905.367836][T28175]  ? trace_irq_disable+0x3b/0x140
[ 1905.367854][T28175]  ? clear_bhb_loop+0x40/0x90
[ 1905.367877][T28175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1905.367894][T28175] RIP: 0033:0x7fabe4b3de59
[ 1905.367910][T28175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1905.367925][T28175] RSP: 002b:00007fabe2d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1905.367944][T28175] RAX: ffffffffffffffda RBX: 00007fabe4dc5fa0 RCX: 00007fabe4b3de59
[ 1905.367956][T28175] RDX: 0000200000000000 RSI: 0000000080085520 RDI: 0000000000000003
[ 1905.367967][T28175] RBP: 00007fabe2d96090 R08: 0000000000000000 R09: 0000000000000000
[ 1905.367977][T28175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1905.367987][T28175] R13: 00007fabe4dc6038 R14: 00007fabe4dc5fa0 R15: 00007ffdc61cf758
[ 1905.368015][T28175]  </TASK>
[ 1905.370532][T28175] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1905.842410][T28181] 9p: Bad value for 'wfdno'
[ 1906.965068][T28210] 9pnet_fd: Insufficient options for proto=fd
[ 1907.060198][T27699] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1907.164087][T13896] usb 10-1: USB disconnect, device number 55
[ 1907.832754][T28227] FAULT_INJECTION: forcing a failure.
[ 1907.832754][T28227] name failslab, interval 1, probability 0, space 0, times 0
[ 1907.832788][T28227] CPU: 0 UID: 0 PID: 28227 Comm: syz.8.5778 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1907.832810][T28227] Tainted: [L]=SOFTLOCKUP
[ 1907.832817][T28227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1907.832827][T28227] Call Trace:
[ 1907.832834][T28227]  <TASK>
[ 1907.832842][T28227]  dump_stack_lvl+0xe8/0x150
[ 1907.832873][T28227]  should_fail_ex+0x467/0x600
[ 1907.832900][T28227]  should_failslab+0xa8/0x100
[ 1907.832922][T28227]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1907.832960][T28227]  ? __alloc_skb+0x1d7/0x7a0
[ 1907.832986][T28227]  ? __alloc_skb+0x1d7/0x7a0
[ 1907.833015][T28227]  __alloc_skb+0x1d7/0x7a0
[ 1907.833042][T28227]  netlink_sendmsg+0x5d4/0xb40
[ 1907.833071][T28227]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1907.833091][T28227]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1907.833115][T28227]  ? __kernel_text_address+0xd/0x30
[ 1907.833132][T28227]  ? unwind_get_return_address+0x4d/0x90
[ 1907.833154][T28227]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1907.833170][T28227]  sock_sendmsg_nosec+0x13a/0x180
[ 1907.833192][T28227]  ____sys_sendmsg+0x565/0x870
[ 1907.833210][T28227]  ? __might_fault+0xaf/0x130
[ 1907.833234][T28227]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1907.833260][T28227]  ? import_iovec+0x73/0xa0
[ 1907.833280][T28227]  ___sys_sendmsg+0x2a5/0x360
[ 1907.833297][T28227]  ? __lock_acquire+0x683/0x2ce0
[ 1907.833319][T28227]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1907.833363][T28227]  ? __fget_files+0x2a/0x420
[ 1907.833380][T28227]  ? __fget_files+0x3a8/0x420
[ 1907.833408][T28227]  __x64_sys_sendmsg+0x1b7/0x290
[ 1907.833427][T28227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1907.833456][T28227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1907.833475][T28227]  do_syscall_64+0x174/0x580
[ 1907.833497][T28227]  ? trace_irq_disable+0x3b/0x140
[ 1907.833514][T28227]  ? clear_bhb_loop+0x40/0x90
[ 1907.833533][T28227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1907.833548][T28227] RIP: 0033:0x7fec9a00de59
[ 1907.833564][T28227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1907.833578][T28227] RSP: 002b:00007fec98266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1907.833597][T28227] RAX: ffffffffffffffda RBX: 00007fec9a295fa0 RCX: 00007fec9a00de59
[ 1907.833609][T28227] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000004
[ 1907.833620][T28227] RBP: 00007fec98266090 R08: 0000000000000000 R09: 0000000000000000
[ 1907.833630][T28227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1907.833639][T28227] R13: 00007fec9a296038 R14: 00007fec9a295fa0 R15: 00007ffdfab9e678
[ 1907.833664][T28227]  </TASK>
[ 1908.092429][T27547] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1908.255331][T27547] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1908.255362][T27547] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1908.255386][T27547] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1908.255416][T27547] usb 10-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[ 1908.255434][T27547] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1908.274843][T27547] usb 10-1: config 0 descriptor??
[ 1908.276095][T28228] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1908.722080][T27699] veth0_vlan: entered promiscuous mode
[ 1908.742529][T27699] veth1_vlan: entered promiscuous mode
[ 1908.837649][T28228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1908.838241][T28228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1909.786038][T27699] veth0_macvtap: entered promiscuous mode
[ 1909.834993][T27699] veth1_macvtap: entered promiscuous mode
[ 1910.015503][T27699] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1910.056274][T27699] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1910.095025][T25304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1910.095236][T25304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1910.095263][T25304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1910.095286][T25304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1910.517710][T28261] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[ 1910.714429][T27547] usbhid 10-1:0.0: can't add hid device: -71
[ 1910.714542][T27547] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1910.745309][T28027] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1910.904094][T27547] usb 10-1: USB disconnect, device number 56
[ 1910.957979][T28027] usb 2-1: Using ep0 maxpacket: 16
[ 1910.973816][T28027] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 1910.973841][T28027] usb 2-1: config 0 has no interface number 0
[ 1910.973884][T28027] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1910.973906][T28027] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1910.980937][T28027] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1910.980966][T28027] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1910.980989][T28027] usb 2-1: Product: syz
[ 1910.981001][T28027] usb 2-1: SerialNumber: syz
[ 1911.124629][T28027] usb 2-1: config 0 descriptor??
[ 1911.151998][T28027] cm109 2-1:0.8: invalid payload size 0, expected 4
[ 1911.154937][T28027] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input84
[ 1911.186552][T28030] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1911.375123][T28030] usb 4-1: Using ep0 maxpacket: 8
[ 1911.403129][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1911.407794][T28030] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[ 1911.407819][T28030] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1911.407836][T28030] usb 4-1: config 6 has no interface number 0
[ 1911.407876][T28030] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1911.414293][T28030] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1911.414321][T28030] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1911.414339][T28030] usb 4-1: Product: syz
[ 1911.414351][T28030] usb 4-1: Manufacturer: syz
[ 1911.414364][T28030] usb 4-1: SerialNumber: syz
[ 1911.443049][T28266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5789'.
[ 1911.443071][T28266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5789'.
[ 1911.666947][T28030] hso 4-1:6.2: Failed to find INT IN ep
[ 1912.759545][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.759792][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.760018][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.760241][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.760466][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.760702][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.760927][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.761162][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.761390][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.761626][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1912.848149][T28024] usb 2-1: USB disconnect, device number 17
[ 1912.852880][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1912.952035][T28024] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1913.269148][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1913.269170][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1913.363402][ T5733] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1913.461890][T28283] Invalid argument reading file caps for ./file0
[ 1913.812464][ T5733] usb 9-1: Using ep0 maxpacket: 8
[ 1914.068942][ T5733] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1914.068987][ T5733] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1914.069009][ T5733] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1914.110957][ T5733] usb 9-1: config 0 descriptor??
[ 1914.329227][T28285] netlink: 'syz.1.5795': attribute type 1 has an invalid length.
[ 1914.348367][ T5733] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1914.389193][T27547] usb 4-1: USB disconnect, device number 121
[ 1914.396905][ T1521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.396924][ T1521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.398641][T28285] netlink: 'syz.1.5795': attribute type 10 has an invalid length.
[ 1914.398659][T28285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5795'.
[ 1914.477797][T28285] dummy0: entered promiscuous mode
[ 1914.602450][T28289] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[ 1914.624503][T28027] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1914.627369][ T9335] usb 9-1: USB disconnect, device number 3
[ 1914.839130][T28027] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1914.839154][T28027] usb 10-1: config 0 has no interfaces?
[ 1914.839181][T28027] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1914.839201][T28027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1914.849642][T28027] usb 10-1: config 0 descriptor??
[ 1914.983970][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5801'.
[ 1914.983985][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5801'.
[ 1916.477969][T28311] netlink: 'syz.1.5805': attribute type 2 has an invalid length.
[ 1916.764949][ T9335] usb 10-1: USB disconnect, device number 57
[ 1916.965924][T28027] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1917.126084][T28027] usb 9-1: Using ep0 maxpacket: 8
[ 1917.128432][T28027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1917.128477][T28027] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1917.128499][T28027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1917.142724][T28027] usb 9-1: config 0 descriptor??
[ 1917.452088][T28027] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1917.648579][    C0] iowarrior 9-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1917.648631][T28027] usb 9-1: USB disconnect, device number 4
[ 1918.268924][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5814'.
[ 1918.268948][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5814'.
[ 1920.655222][T28380] Invalid argument reading file caps for ./file0
[ 1921.690216][T28395] FAULT_INJECTION: forcing a failure.
[ 1921.690216][T28395] name failslab, interval 1, probability 0, space 0, times 0
[ 1921.690251][T28395] CPU: 0 UID: 0 PID: 28395 Comm: syz.9.5828 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1921.690276][T28395] Tainted: [L]=SOFTLOCKUP
[ 1921.690282][T28395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1921.690293][T28395] Call Trace:
[ 1921.690301][T28395]  <TASK>
[ 1921.690309][T28395]  dump_stack_lvl+0xe8/0x150
[ 1921.690339][T28395]  should_fail_ex+0x467/0x600
[ 1921.690368][T28395]  should_failslab+0xa8/0x100
[ 1921.690390][T28395]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1921.690418][T28395]  ? __alloc_skb+0x1d7/0x7a0
[ 1921.690445][T28395]  ? __alloc_skb+0x1d7/0x7a0
[ 1921.690474][T28395]  __alloc_skb+0x1d7/0x7a0
[ 1921.690501][T28395]  netlink_sendmsg+0x5d4/0xb40
[ 1921.690528][T28395]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1921.690548][T28395]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1921.690573][T28395]  ? __kernel_text_address+0xd/0x30
[ 1921.690591][T28395]  ? unwind_get_return_address+0x4d/0x90
[ 1921.690610][T28395]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1921.690627][T28395]  sock_sendmsg_nosec+0x13a/0x180
[ 1921.690655][T28395]  ____sys_sendmsg+0x565/0x870
[ 1921.690670][T28395]  ? __might_fault+0xaf/0x130
[ 1921.690691][T28395]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1921.690715][T28395]  ? import_iovec+0x73/0xa0
[ 1921.690735][T28395]  ___sys_sendmsg+0x2a5/0x360
[ 1921.690750][T28395]  ? __lock_acquire+0x683/0x2ce0
[ 1921.690771][T28395]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1921.690818][T28395]  ? __fget_files+0x2a/0x420
[ 1921.690834][T28395]  ? __fget_files+0x3a8/0x420
[ 1921.690859][T28395]  __x64_sys_sendmsg+0x1b7/0x290
[ 1921.690879][T28395]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1921.690911][T28395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1921.690930][T28395]  do_syscall_64+0x174/0x580
[ 1921.690952][T28395]  ? trace_irq_disable+0x3b/0x140
[ 1921.690968][T28395]  ? clear_bhb_loop+0x40/0x90
[ 1921.690990][T28395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1921.691007][T28395] RIP: 0033:0x7f32d052de59
[ 1921.691025][T28395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1921.691047][T28395] RSP: 002b:00007f32ce786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1921.691067][T28395] RAX: ffffffffffffffda RBX: 00007f32d07b5fa0 RCX: 00007f32d052de59
[ 1921.691080][T28395] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003
[ 1921.691092][T28395] RBP: 00007f32ce786090 R08: 0000000000000000 R09: 0000000000000000
[ 1921.691104][T28395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1921.691115][T28395] R13: 00007f32d07b6038 R14: 00007f32d07b5fa0 R15: 00007ffe9dd17bd8
[ 1921.691143][T28395]  </TASK>
[ 1921.711835][T28396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5825'.
[ 1921.711859][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5825'.
[ 1921.797732][T27547] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1922.032957][T27547] usb 9-1: Using ep0 maxpacket: 8
[ 1922.042236][T27547] usb 9-1: config 0 has no interfaces?
[ 1922.055470][T27547] usb 9-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[ 1922.055507][T27547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1922.055527][T27547] usb 9-1: Product: syz
[ 1922.055539][T27547] usb 9-1: Manufacturer: syz
[ 1922.055551][T27547] usb 9-1: SerialNumber: syz
[ 1922.061419][T27547] usb 9-1: config 0 descriptor??
[ 1922.313290][T28390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1922.313872][T28390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1922.339558][T28024] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1922.493062][T28024] usb 10-1: Using ep0 maxpacket: 8
[ 1922.495283][T28024] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1922.495330][T28024] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1922.495351][T28024] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1922.511217][T28024] usb 10-1: config 0 descriptor??
[ 1922.568295][ T5733] usb 9-1: USB disconnect, device number 5
[ 1922.788328][T28024] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1922.996992][    C0] iowarrior 10-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 1922.997470][T28024] usb 10-1: USB disconnect, device number 58
[ 1924.072376][T28430] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[ 1924.786528][T28440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5841'.
[ 1924.786551][T28440] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5841'.
[ 1925.282477][T28452] FAULT_INJECTION: forcing a failure.
[ 1925.282477][T28452] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1925.282512][T28452] CPU: 1 UID: 0 PID: 28452 Comm: syz.3.5845 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1925.282536][T28452] Tainted: [L]=SOFTLOCKUP
[ 1925.282543][T28452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1925.282554][T28452] Call Trace:
[ 1925.282561][T28452]  <TASK>
[ 1925.282570][T28452]  dump_stack_lvl+0xe8/0x150
[ 1925.282632][T28452]  should_fail_ex+0x467/0x600
[ 1925.282662][T28452]  _copy_from_user+0x2d/0xb0
[ 1925.282684][T28452]  kstrtouint_from_user+0xd6/0x180
[ 1925.282710][T28452]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1925.282729][T28452]  ? __lock_acquire+0x683/0x2ce0
[ 1925.282764][T28452]  proc_fail_nth_write+0x8e/0x210
[ 1925.282784][T28452]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1925.282810][T28452]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1925.282829][T28452]  vfs_write+0x29f/0xbb0
[ 1925.282859][T28452]  ? __pfx_vfs_write+0x10/0x10
[ 1925.282882][T28452]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1925.282908][T28452]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1925.282931][T28452]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1925.282954][T28452]  ? mutex_lock_nested+0x152/0x1d0
[ 1925.282972][T28452]  ? fdget_pos+0x252/0x320
[ 1925.282999][T28452]  ksys_write+0x156/0x270
[ 1925.283022][T28452]  ? __pfx_ksys_write+0x10/0x10
[ 1925.283052][T28452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1925.283072][T28452]  do_syscall_64+0x174/0x580
[ 1925.283095][T28452]  ? trace_irq_disable+0x3b/0x140
[ 1925.283112][T28452]  ? clear_bhb_loop+0x40/0x90
[ 1925.283135][T28452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1925.283151][T28452] RIP: 0033:0x7f209d7fe68e
[ 1925.283167][T28452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1925.283180][T28452] RSP: 002b:00007f209ba74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1925.283199][T28452] RAX: ffffffffffffffda RBX: 00007f209ba756c0 RCX: 00007f209d7fe68e
[ 1925.283210][T28452] RDX: 0000000000000001 RSI: 00007f209ba750a0 RDI: 000000000000000a
[ 1925.283220][T28452] RBP: 00007f209ba75090 R08: 0000000000000000 R09: 0000000000000000
[ 1925.283231][T28452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1925.283241][T28452] R13: 00007f209dac6128 R14: 00007f209dac6090 R15: 00007fff7e92dff8
[ 1925.283271][T28452]  </TASK>
[ 1925.570659][T28458] FAULT_INJECTION: forcing a failure.
[ 1925.570659][T28458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1925.570694][T28458] CPU: 0 UID: 0 PID: 28458 Comm: syz.8.5847 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1925.570719][T28458] Tainted: [L]=SOFTLOCKUP
[ 1925.570726][T28458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1925.570736][T28458] Call Trace:
[ 1925.570743][T28458]  <TASK>
[ 1925.570761][T28458]  dump_stack_lvl+0xe8/0x150
[ 1925.570793][T28458]  should_fail_ex+0x467/0x600
[ 1925.570822][T28458]  strncpy_from_user+0x36/0x2c0
[ 1925.570849][T28458]  do_getname+0x77/0x250
[ 1925.570876][T28458]  do_sys_openat2+0xcc/0x200
[ 1925.570896][T28458]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1925.570923][T28458]  ? ksys_write+0x248/0x270
[ 1925.570949][T28458]  ? __pfx_ksys_write+0x10/0x10
[ 1925.570972][T28458]  __x64_sys_openat+0x138/0x170
[ 1925.570991][T28458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1925.571010][T28458]  do_syscall_64+0x174/0x580
[ 1925.571034][T28458]  ? trace_irq_disable+0x3b/0x140
[ 1925.571051][T28458]  ? clear_bhb_loop+0x40/0x90
[ 1925.571073][T28458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1925.571091][T28458] RIP: 0033:0x7fec9a00de59
[ 1925.571109][T28458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1925.571124][T28458] RSP: 002b:00007fec98266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1925.571143][T28458] RAX: ffffffffffffffda RBX: 00007fec9a295fa0 RCX: 00007fec9a00de59
[ 1925.571156][T28458] RDX: 0000000000000000 RSI: 0000200000000980 RDI: ffffffffffffff9c
[ 1925.571169][T28458] RBP: 00007fec98266090 R08: 0000000000000000 R09: 0000000000000000
[ 1925.571180][T28458] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001
[ 1925.571191][T28458] R13: 00007fec9a296038 R14: 00007fec9a295fa0 R15: 00007ffdfab9e678
[ 1925.571220][T28458]  </TASK>
[ 1926.679360][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5853'.
[ 1926.679387][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5853'.
[ 1926.704740][ T5733] usb 4-1: new full-speed USB device number 122 using dummy_hcd
[ 1926.891995][ T5733] usb 4-1: config 34 has an invalid interface number: 167 but max is 0
[ 1926.892022][ T5733] usb 4-1: config 34 has no interface number 0
[ 1926.892052][ T5733] usb 4-1: config 34 interface 167 has no altsetting 0
[ 1926.932756][ T5733] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54
[ 1926.932784][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1926.932801][ T5733] usb 4-1: Product: syz
[ 1926.932813][ T5733] usb 4-1: Manufacturer: syz
[ 1926.932826][ T5733] usb 4-1: SerialNumber: syz
[ 1927.308154][T28497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5850'.
[ 1927.430606][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5850'.
[ 1928.200670][T28499] vlan2: entered promiscuous mode
[ 1928.200692][T28499] syz_tun: entered promiscuous mode
[ 1928.372539][ T5733] usb 4-1: USB disconnect, device number 122
[ 1928.863552][T28523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5868'.
[ 1929.088853][T28024] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1929.190922][T28532] netlink: 'syz.9.5872': attribute type 10 has an invalid length.
[ 1929.190939][T28532] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5872'.
[ 1929.191111][T28532] dummy0: entered promiscuous mode
[ 1929.195616][T17809] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1929.251287][T28024] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1929.251312][T28024] usb 9-1: config 0 has no interfaces?
[ 1929.251340][T28024] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1929.251363][T28024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1929.260734][T28024] usb 9-1: config 0 descriptor??
[ 1929.379298][T17809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[ 1929.379340][T17809] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[ 1929.379359][T17809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1929.400809][T17809] usb 4-1: config 0 descriptor??
[ 1929.534627][T28024] usb 9-1: USB disconnect, device number 6
[ 1929.857007][T17809] hid_parser_main: 25 callbacks suppressed
[ 1929.857029][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857058][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857085][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857111][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857135][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857161][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857185][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857209][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857232][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857264][T17809] hid_mf 0003:0079:1801.0036: unknown main item tag 0x0
[ 1929.857789][T17809] hid_mf 0003:0079:1801.0036: unexpected long global item
[ 1929.951407][T17809] hid_mf 0003:0079:1801.0036: HID parse failed.
[ 1929.951480][T17809] hid_mf 0003:0079:1801.0036: probe with driver hid_mf failed with error -22
[ 1931.719149][T13896] usb 4-1: USB disconnect, device number 123
[ 1932.156345][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5881'.
[ 1932.582810][   T37] kauditd_printk_skb: 103 callbacks suppressed
[ 1932.582828][   T37] audit: type=1326 audit(1783260388.084:34198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28573 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe4b3de59 code=0x0
[ 1932.641746][T28576] binder: 28573:28576 ioctl c018620c 200000000400 returned -1
[ 1932.830518][T13896] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1932.997564][T13896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1932.997588][T13896] usb 4-1: config 0 has no interfaces?
[ 1932.997615][T13896] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1932.997627][T13896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1933.014823][T13896] usb 4-1: config 0 descriptor??
[ 1933.269583][T27547] usb 4-1: USB disconnect, device number 124
[ 1933.320933][T28581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5892'.
[ 1933.534809][T28591] netlink: 'syz.1.5896': attribute type 1 has an invalid length.
[ 1933.568374][T28591] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1933.612018][T28591] dummy0: left promiscuous mode
[ 1933.632439][T28593] netlink: 'syz.1.5896': attribute type 10 has an invalid length.
[ 1933.632459][T28593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5896'.
[ 1933.684526][T28591] bond1: (slave dummy0): making interface the new active one
[ 1933.696044][T28591] bond1: (slave dummy0): Enslaving as an active interface with an up link
[ 1933.770035][T28593] dummy0: entered promiscuous mode
[ 1933.792623][T27547] usb 10-1: new full-speed USB device number 59 using dummy_hcd
[ 1933.815197][T28593] bond1: (slave dummy0): Releasing active interface
[ 1934.083316][T27547] usb 10-1: config 0 has an invalid interface number: 52 but max is 0
[ 1934.083343][T27547] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1934.083361][T27547] usb 10-1: config 0 has no interface number 0
[ 1934.083403][T27547] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1934.083426][T27547] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1934.083446][T27547] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1934.083469][T27547] usb 10-1: config 0 interface 52 has no altsetting 0
[ 1934.085827][T27547] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1934.085853][T27547] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1934.085872][T27547] usb 10-1: Manufacturer: syz
[ 1934.090812][T27547] usb 10-1: config 0 descriptor??
[ 1934.109920][T27547] hub 10-1:0.52: bad descriptor, ignoring hub
[ 1934.109956][T27547] hub 10-1:0.52: probe with driver hub failed with error -5
[ 1934.738537][T27547] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1934.738793][T27547] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -5
[ 1934.888931][T28604] macvlan2: entered promiscuous mode
[ 1934.902589][T28604] macvlan3: entered promiscuous mode
[ 1935.174468][T28618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5903'.
[ 1935.350565][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5907'.
[ 1936.683973][   T37] audit: type=1326 audit(1783260391.929:34199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28643 comm="syz.8.5913" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9a00de59 code=0x0
[ 1936.776247][T28030] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1936.817768][ T5733] usb 10-1: USB disconnect, device number 59
[ 1936.824441][T28645] binder: 28643:28645 ioctl c018620c 200000000400 returned -1
[ 1936.935604][T28030] usb 4-1: Using ep0 maxpacket: 32
[ 1936.938312][T28030] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1936.939648][T28030] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[ 1936.939670][T28030] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[ 1936.939689][T28030] usb 4-1: config 14 has no interface number 0
[ 1936.939704][T28030] usb 4-1: config 14 has no interface number 1
[ 1936.939769][T28030] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1936.939791][T28030] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1936.939814][T28030] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1936.939838][T28030] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1936.939872][T28030] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1936.939896][T28030] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1936.939920][T28030] usb 4-1: config 14 interface 57 has no altsetting 0
[ 1936.939935][T28030] usb 4-1: config 14 interface 228 has no altsetting 0
[ 1936.942450][T28030] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1936.942475][T28030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1936.942493][T28030] usb 4-1: Product: syz
[ 1936.942506][T28030] usb 4-1: Manufacturer: syz
[ 1936.942519][T28030] usb 4-1: SerialNumber: syz
[ 1937.442616][T28030] legousbtower 4-1:14.57: interrupt endpoints not found
[ 1937.665767][T28030] legousbtower 4-1:14.228: get version request failed: -71
[ 1937.665941][T28030] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71
[ 1937.694743][T28030] usb 4-1: USB disconnect, device number 125
[ 1937.723769][T28653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5916'.
[ 1937.857589][T28655] netlink: 'syz.8.5917': attribute type 2 has an invalid length.
[ 1938.647443][ T5733] usb 4-1: new full-speed USB device number 126 using dummy_hcd
[ 1938.767391][   T37] audit: type=1326 audit(1783260393.874:34200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.6.5926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989137de59 code=0x0
[ 1938.809304][ T5733] usb 4-1: config 0 has an invalid interface number: 146 but max is -1
[ 1938.809321][ T5733] usb 4-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config
[ 1938.809331][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1938.809342][ T5733] usb 4-1: config 0 has no interface number 0
[ 1938.809371][ T5733] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 1938.809384][ T5733] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1938.809395][ T5733] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1938.809407][ T5733] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[ 1938.809420][ T5733] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1938.809431][ T5733] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid maxpacket 16454, setting to 64
[ 1938.811315][ T5733] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1938.811330][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1938.811340][ T5733] usb 4-1: Product: syz
[ 1938.811347][ T5733] usb 4-1: Manufacturer: syz
[ 1938.811354][ T5733] usb 4-1: SerialNumber: syz
[ 1938.815679][ T5733] usb 4-1: config 0 descriptor??
[ 1938.816869][T28666] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1938.819223][T28666] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1938.827953][ T5733] usb 4-1: will this work? Command EP is not usually 12
[ 1938.827973][ T5733] usb 4-1: will this work? Response EP is not usually 3
[ 1938.827987][ T5733] usb 4-1: will this work? Image data EP is not usually 2
[ 1938.832267][ T5733] scsi host1: microtekX6
[ 1938.885051][T28680] binder: 28676:28680 ioctl c018620c 200000000400 returned -1
[ 1938.896322][T27993] usb 4-1: error -90 submitting URB
[ 1938.914678][   T57] usb 4-1: error -90 submitting URB
[ 1938.971278][   T57] usb 4-1: error -90 submitting URB
[ 1939.009778][   T57] usb 4-1: error -90 submitting URB
[ 1939.230444][T13896] usb 4-1: USB disconnect, device number 126
[ 1939.260321][T28682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5927'.
[ 1939.421332][T28684] tracefs: Bad value for 'mode'
[ 1939.498500][T28686] 9p: Could not find request transport: fd0x0000000000000004
[ 1940.081897][T28030] usb 10-1: new full-speed USB device number 60 using dummy_hcd
[ 1940.372883][T28030] usb 10-1: config 0 has an invalid interface number: 146 but max is -1
[ 1940.372910][T28030] usb 10-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config
[ 1940.372928][T28030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1940.372947][T28030] usb 10-1: config 0 has no interface number 0
[ 1940.372989][T28030] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 1940.373012][T28030] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1940.373032][T28030] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1940.373054][T28030] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[ 1940.373077][T28030] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1940.373099][T28030] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid maxpacket 16454, setting to 64
[ 1940.375791][T28030] usb 10-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1940.375817][T28030] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1940.375835][T28030] usb 10-1: Product: syz
[ 1940.375848][T28030] usb 10-1: Manufacturer: syz
[ 1940.375860][T28030] usb 10-1: SerialNumber: syz
[ 1940.384037][T28030] usb 10-1: config 0 descriptor??
[ 1940.385217][T28693] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1940.385395][T28693] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1940.391569][T28030] usb 10-1: will this work? Command EP is not usually 12
[ 1940.391591][T28030] usb 10-1: will this work? Response EP is not usually 3
[ 1940.391606][T28030] usb 10-1: will this work? Image data EP is not usually 2
[ 1940.577730][T28030] scsi host2: microtekX6
[ 1940.741633][T28030] usb 10-1: USB disconnect, device number 60
[ 1940.755867][T25322] usb 10-1: error -19 submitting URB
[ 1940.845245][  T943] usb 10-1: error -19 submitting URB
[ 1940.912872][  T943] usb 10-1: error -19 submitting URB
[ 1941.030198][  T943] usb 10-1: error -19 submitting URB
[ 1941.719324][T28722] 9p: Could not find request transport: fd0x0000000000000004
[ 1941.725109][T17809] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1941.885583][T17809] usb 9-1: Using ep0 maxpacket: 16
[ 1941.887750][T17809] usb 9-1: config 3 has an invalid interface number: 88 but max is 0
[ 1941.887773][T17809] usb 9-1: config 3 has no interface number 0
[ 1941.887799][T17809] usb 9-1: config 3 interface 88 has no altsetting 0
[ 1941.890039][T17809] usb 9-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8
[ 1941.890065][T17809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1941.890084][T17809] usb 9-1: Product: syz
[ 1941.890096][T17809] usb 9-1: Manufacturer: syz
[ 1941.890108][T17809] usb 9-1: SerialNumber: syz
[ 1942.119282][   T37] audit: type=1326 audit(1783260397.008:34201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28728 comm="syz.3.5945" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f209d83de59 code=0x0
[ 1942.308307][T28730] binder: 28728:28730 ioctl c018620c 200000000400 returned -1
[ 1942.319933][T17809] kl5kusb105 9-1:3.88: KL5KUSB105D / PalmConnect converter detected
[ 1942.333524][T17809] usb 9-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[ 1942.354898][T17809] usb 9-1: USB disconnect, device number 7
[ 1942.368631][T17809] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[ 1942.370720][T17809] kl5kusb105 9-1:3.88: device disconnected
[ 1942.426409][T28732] netlink: 'syz.9.5946': attribute type 64 has an invalid length.
[ 1942.962627][T28740] FAULT_INJECTION: forcing a failure.
[ 1942.962627][T28740] name failslab, interval 1, probability 0, space 0, times 0
[ 1942.962655][T28740] CPU: 0 UID: 0 PID: 28740 Comm: syz.1.5948 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1942.962675][T28740] Tainted: [L]=SOFTLOCKUP
[ 1942.962680][T28740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1942.962688][T28740] Call Trace:
[ 1942.962694][T28740]  <TASK>
[ 1942.962700][T28740]  dump_stack_lvl+0xe8/0x150
[ 1942.962724][T28740]  should_fail_ex+0x467/0x600
[ 1942.962747][T28740]  should_failslab+0xa8/0x100
[ 1942.962764][T28740]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1942.962785][T28740]  ? __alloc_skb+0x1d7/0x7a0
[ 1942.962802][T28740]  ? __alloc_skb+0x1d7/0x7a0
[ 1942.962824][T28740]  __alloc_skb+0x1d7/0x7a0
[ 1942.962844][T28740]  netlink_sendmsg+0x5d4/0xb40
[ 1942.962865][T28740]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1942.962879][T28740]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1942.962898][T28740]  ? __kernel_text_address+0xd/0x30
[ 1942.962912][T28740]  ? unwind_get_return_address+0x4d/0x90
[ 1942.962928][T28740]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1942.962940][T28740]  sock_sendmsg_nosec+0x13a/0x180
[ 1942.962959][T28740]  ____sys_sendmsg+0x565/0x870
[ 1942.962972][T28740]  ? __might_fault+0xaf/0x130
[ 1942.962991][T28740]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1942.963011][T28740]  ? import_iovec+0x73/0xa0
[ 1942.963027][T28740]  ___sys_sendmsg+0x2a5/0x360
[ 1942.963039][T28740]  ? __lock_acquire+0x683/0x2ce0
[ 1942.963056][T28740]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1942.963094][T28740]  ? __fget_files+0x2a/0x420
[ 1942.963107][T28740]  ? __fget_files+0x3a8/0x420
[ 1942.963126][T28740]  __x64_sys_sendmsg+0x1b7/0x290
[ 1942.963141][T28740]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1942.963167][T28740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1942.963182][T28740]  do_syscall_64+0x174/0x580
[ 1942.963199][T28740]  ? trace_irq_disable+0x3b/0x140
[ 1942.963212][T28740]  ? clear_bhb_loop+0x40/0x90
[ 1942.963228][T28740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1942.963241][T28740] RIP: 0033:0x7fabe4b3de59
[ 1942.963255][T28740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1942.963266][T28740] RSP: 002b:00007fabe2d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1942.963282][T28740] RAX: ffffffffffffffda RBX: 00007fabe4dc5fa0 RCX: 00007fabe4b3de59
[ 1942.963292][T28740] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003
[ 1942.963301][T28740] RBP: 00007fabe2d96090 R08: 0000000000000000 R09: 0000000000000000
[ 1942.963310][T28740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1942.963326][T28740] R13: 00007fabe4dc6038 R14: 00007fabe4dc5fa0 R15: 00007ffdc61cf758
[ 1942.963348][T28740]  </TASK>
[ 1943.905952][T28750] 9p: Could not find request transport: fd0x0000000000000004
[ 1944.158254][   T37] audit: type=1326 audit(1783260398.916:34202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28764 comm="syz.3.5960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f209d83de59 code=0x0
[ 1944.214694][T28766] binder: 28764:28766 ioctl c018620c 200000000400 returned -1
[ 1944.276213][T28762] Invalid argument reading file caps for ./file0
[ 1944.750815][T28772] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5961'.
[ 1944.753175][T28772] dummy0: left promiscuous mode
[ 1944.898984][T28773] netlink: 'syz.9.5961': attribute type 10 has an invalid length.
[ 1944.899005][T28773] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5961'.
[ 1944.980366][T28775] FAULT_INJECTION: forcing a failure.
[ 1944.980366][T28775] name failslab, interval 1, probability 0, space 0, times 0
[ 1944.980400][T28775] CPU: 0 UID: 0 PID: 28775 Comm: syz.1.5962 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1944.980426][T28775] Tainted: [L]=SOFTLOCKUP
[ 1944.980433][T28775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1944.980444][T28775] Call Trace:
[ 1944.980452][T28775]  <TASK>
[ 1944.980459][T28775]  dump_stack_lvl+0xe8/0x150
[ 1944.980491][T28775]  should_fail_ex+0x467/0x600
[ 1944.980521][T28775]  should_failslab+0xa8/0x100
[ 1944.980560][T28775]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 1944.980580][T28775]  ? io_ring_ctx_alloc+0x53/0xc60
[ 1944.980597][T28775]  ? io_ring_ctx_alloc+0x53/0xc60
[ 1944.980622][T28775]  io_ring_ctx_alloc+0x53/0xc60
[ 1944.980639][T28775]  ? io_prepare_config+0x8c8/0xc70
[ 1944.980665][T28775]  io_uring_create+0x50/0x990
[ 1944.980688][T28775]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 1944.980709][T28775]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1944.980731][T28775]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1944.980767][T28775]  ? __pfx_ksys_write+0x10/0x10
[ 1944.980795][T28775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1944.980813][T28775]  do_syscall_64+0x174/0x580
[ 1944.980834][T28775]  ? trace_irq_disable+0x3b/0x140
[ 1944.980865][T28775]  ? clear_bhb_loop+0x40/0x90
[ 1944.980884][T28775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1944.980901][T28775] RIP: 0033:0x7fabe4b3de59
[ 1944.980918][T28775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1944.980932][T28775] RSP: 002b:00007fabe2d95ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1944.980952][T28775] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007fabe4b3de59
[ 1944.980966][T28775] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 0000000000000e26
[ 1944.980978][T28775] RBP: 0000200000000500 R08: 0000200000000340 R09: 0000000000000000
[ 1944.980990][T28775] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588
[ 1944.981002][T28775] R13: 0000200000000590 R14: 00007fabe2d95fd8 R15: 0000000000000000
[ 1944.981029][T28775]  </TASK>
[ 1945.345691][T28780] netlink: 'syz.1.5964': attribute type 64 has an invalid length.
[ 1945.402213][T28781] FAULT_INJECTION: forcing a failure.
[ 1945.402213][T28781] name failslab, interval 1, probability 0, space 0, times 0
[ 1945.402235][T28781] CPU: 1 UID: 0 PID: 28781 Comm: syz.1.5964 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1945.402250][T28781] Tainted: [L]=SOFTLOCKUP
[ 1945.402253][T28781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1945.402260][T28781] Call Trace:
[ 1945.402265][T28781]  <TASK>
[ 1945.402270][T28781]  dump_stack_lvl+0xe8/0x150
[ 1945.402290][T28781]  should_fail_ex+0x467/0x600
[ 1945.402308][T28781]  should_failslab+0xa8/0x100
[ 1945.402321][T28781]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1945.402337][T28781]  ? __alloc_skb+0x1d7/0x7a0
[ 1945.402351][T28781]  ? __alloc_skb+0x1d7/0x7a0
[ 1945.402367][T28781]  __alloc_skb+0x1d7/0x7a0
[ 1945.402382][T28781]  tcp_stream_alloc_skb+0x3f/0x5c0
[ 1945.402399][T28781]  tcp_sendmsg_locked+0x143d/0x55c0
[ 1945.402424][T28781]  ? __lock_acquire+0x683/0x2ce0
[ 1945.402448][T28781]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[ 1945.402477][T28781]  ? __local_bh_enable_ip+0x1ae/0x2b0
[ 1945.402497][T28781]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1945.402524][T28781]  tcp_sendmsg+0x2f/0x50
[ 1945.402545][T28781]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1945.402574][T28781]  sock_sendmsg_nosec+0x10e/0x180
[ 1945.402598][T28781]  ____sys_sendmsg+0x565/0x870
[ 1945.402615][T28781]  ? __might_fault+0xaf/0x130
[ 1945.402639][T28781]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1945.402663][T28781]  ? import_iovec+0x73/0xa0
[ 1945.402686][T28781]  ___sys_sendmsg+0x2a5/0x360
[ 1945.402701][T28781]  ? __lock_acquire+0x683/0x2ce0
[ 1945.402714][T28781]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1945.402726][T28781]  ? kstrtouint+0x6e/0xe0
[ 1945.402752][T28781]  ? __fget_files+0x2a/0x420
[ 1945.402762][T28781]  ? __fget_files+0x3a8/0x420
[ 1945.402776][T28781]  __sys_sendmmsg+0x279/0x4d0
[ 1945.402789][T28781]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1945.402804][T28781]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1945.402822][T28781]  ? ksys_write+0x248/0x270
[ 1945.402834][T28781]  ? __pfx_ksys_write+0x10/0x10
[ 1945.402849][T28781]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1945.402859][T28781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1945.402870][T28781]  do_syscall_64+0x174/0x580
[ 1945.402882][T28781]  ? trace_irq_disable+0x3b/0x140
[ 1945.402892][T28781]  ? clear_bhb_loop+0x40/0x90
[ 1945.402904][T28781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1945.402913][T28781] RIP: 0033:0x7fabe4b3de59
[ 1945.402924][T28781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1945.402932][T28781] RSP: 002b:00007fabe2d75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1945.402943][T28781] RAX: ffffffffffffffda RBX: 00007fabe4dc6090 RCX: 00007fabe4b3de59
[ 1945.402950][T28781] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003
[ 1945.402956][T28781] RBP: 00007fabe2d75090 R08: 0000000000000000 R09: 0000000000000000
[ 1945.402962][T28781] R10: 0000000000002090 R11: 0000000000000246 R12: 0000000000000001
[ 1945.402968][T28781] R13: 00007fabe4dc6128 R14: 00007fabe4dc6090 R15: 00007ffdc61cf758
[ 1945.402984][T28781]  </TASK>
[ 1945.960158][T28773] dummy0: entered promiscuous mode
[ 1946.196056][T28792] FAULT_INJECTION: forcing a failure.
[ 1946.196056][T28792] name failslab, interval 1, probability 0, space 0, times 0
[ 1946.196095][T28792] CPU: 0 UID: 0 PID: 28792 Comm: syz.3.5969 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1946.196116][T28792] Tainted: [L]=SOFTLOCKUP
[ 1946.196121][T28792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1946.196131][T28792] Call Trace:
[ 1946.196137][T28792]  <TASK>
[ 1946.196143][T28792]  dump_stack_lvl+0xe8/0x150
[ 1946.196171][T28792]  should_fail_ex+0x467/0x600
[ 1946.196195][T28792]  should_failslab+0xa8/0x100
[ 1946.196213][T28792]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1946.196236][T28792]  ? __alloc_skb+0x1d7/0x7a0
[ 1946.196256][T28792]  ? __alloc_skb+0x1d7/0x7a0
[ 1946.196279][T28792]  __alloc_skb+0x1d7/0x7a0
[ 1946.196301][T28792]  netlink_sendmsg+0x5d4/0xb40
[ 1946.196323][T28792]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1946.196339][T28792]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1946.196360][T28792]  ? __kernel_text_address+0xd/0x30
[ 1946.196374][T28792]  ? unwind_get_return_address+0x4d/0x90
[ 1946.196392][T28792]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1946.196406][T28792]  sock_sendmsg_nosec+0x13a/0x180
[ 1946.196426][T28792]  ____sys_sendmsg+0x565/0x870
[ 1946.196440][T28792]  ? __might_fault+0xaf/0x130
[ 1946.196459][T28792]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1946.196508][T28792]  ? import_iovec+0x73/0xa0
[ 1946.196527][T28792]  ___sys_sendmsg+0x2a5/0x360
[ 1946.196541][T28792]  ? __lock_acquire+0x683/0x2ce0
[ 1946.196559][T28792]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1946.196600][T28792]  ? __fget_files+0x2a/0x420
[ 1946.196614][T28792]  ? __fget_files+0x3a8/0x420
[ 1946.196635][T28792]  __x64_sys_sendmsg+0x1b7/0x290
[ 1946.196667][T28792]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1946.196695][T28792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1946.196712][T28792]  do_syscall_64+0x174/0x580
[ 1946.196743][T28792]  ? trace_irq_disable+0x3b/0x140
[ 1946.196759][T28792]  ? clear_bhb_loop+0x40/0x90
[ 1946.196776][T28792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1946.196791][T28792] RIP: 0033:0x7f209d83de59
[ 1946.196806][T28792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1946.196830][T28792] RSP: 002b:00007f209ba96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1946.196846][T28792] RAX: ffffffffffffffda RBX: 00007f209dac5fa0 RCX: 00007f209d83de59
[ 1946.196857][T28792] RDX: 0000000000000040 RSI: 0000200000000400 RDI: 0000000000000003
[ 1946.196867][T28792] RBP: 00007f209ba96090 R08: 0000000000000000 R09: 0000000000000000
[ 1946.196875][T28792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1946.196896][T28792] R13: 00007f209dac6038 R14: 00007f209dac5fa0 R15: 00007fff7e92dff8
[ 1946.196931][T28792]  </TASK>
[ 1946.657095][   T37] audit: type=1326 audit(1783260401.255:34203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28801 comm="syz.3.5973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f209d83de59 code=0x0
[ 1946.718612][T28804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5974'.
[ 1946.841016][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5976'.
[ 1946.965313][T28811] netlink: 'syz.1.5976': attribute type 10 has an invalid length.
[ 1946.965334][T28811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5976'.
[ 1947.074567][T28798] EXT4-fs (loop12): unable to read superblock
[ 1947.135876][T28810] dummy0: left promiscuous mode
[ 1947.138365][T28811] dummy0: entered promiscuous mode
[ 1948.960087][T28841] FAULT_INJECTION: forcing a failure.
[ 1948.960087][T28841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1948.960136][T28841] CPU: 1 UID: 0 PID: 28841 Comm: syz.8.5988 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1948.960161][T28841] Tainted: [L]=SOFTLOCKUP
[ 1948.960168][T28841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1948.960179][T28841] Call Trace:
[ 1948.960186][T28841]  <TASK>
[ 1948.960194][T28841]  dump_stack_lvl+0xe8/0x150
[ 1948.960225][T28841]  should_fail_ex+0x467/0x600
[ 1948.960255][T28841]  _copy_to_user+0x31/0xb0
[ 1948.960278][T28841]  simple_read_from_buffer+0xe1/0x170
[ 1948.960301][T28841]  proc_fail_nth_read+0x1be/0x230
[ 1948.960323][T28841]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1948.960342][T28841]  ? rw_verify_area+0x250/0x4d0
[ 1948.960364][T28841]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1948.960381][T28841]  vfs_read+0x219/0xa90
[ 1948.960407][T28841]  ? __pfx_vfs_read+0x10/0x10
[ 1948.960428][T28841]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1948.960451][T28841]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1948.960473][T28841]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1948.960493][T28841]  ? mutex_lock_nested+0x152/0x1d0
[ 1948.960511][T28841]  ? fdget_pos+0x252/0x320
[ 1948.960533][T28841]  ksys_read+0x156/0x270
[ 1948.960554][T28841]  ? __pfx_ksys_read+0x10/0x10
[ 1948.960568][T28841]  ? fput+0xa0/0xd0
[ 1948.960598][T28841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1948.960616][T28841]  do_syscall_64+0x174/0x580
[ 1948.960637][T28841]  ? trace_irq_disable+0x3b/0x140
[ 1948.960653][T28841]  ? clear_bhb_loop+0x40/0x90
[ 1948.960678][T28841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1948.960694][T28841] RIP: 0033:0x7fec99fce68e
[ 1948.960720][T28841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1948.960734][T28841] RSP: 002b:00007fec98265fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1948.960754][T28841] RAX: ffffffffffffffda RBX: 00007fec982666c0 RCX: 00007fec99fce68e
[ 1948.960766][T28841] RDX: 000000000000000f RSI: 00007fec982660a0 RDI: 0000000000000004
[ 1948.960776][T28841] RBP: 00007fec98266090 R08: 0000000000000000 R09: 0000000000000000
[ 1948.960787][T28841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1948.960798][T28841] R13: 00007fec9a296038 R14: 00007fec9a295fa0 R15: 00007ffdfab9e678
[ 1948.960830][T28841]  </TASK>
[ 1949.863053][T13896] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[ 1949.910107][T28844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5985'.
[ 1950.027111][T13896] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1950.027694][T13896] usb 2-1: not running at top speed; connect to a high speed hub
[ 1950.028879][T13896] usb 2-1: config 162 has an invalid interface number: 93 but max is 0
[ 1950.028902][T13896] usb 2-1: config 162 has no interface number 0
[ 1950.028945][T13896] usb 2-1: config 162 interface 93 altsetting 6 endpoint 0x1 has invalid maxpacket 1519, setting to 64
[ 1950.028969][T13896] usb 2-1: config 162 interface 93 has no altsetting 0
[ 1950.034591][T13896] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=ac.c6
[ 1950.034619][T13896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1950.034638][T13896] usb 2-1: Product: syz
[ 1950.034651][T13896] usb 2-1: Manufacturer: syz
[ 1950.034672][T13896] usb 2-1: SerialNumber: syz
[ 1950.063139][T13896] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1951.478490][T28030] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1951.598640][T28874] ieee802154 phy0 wpan0: encryption failed: -22
[ 1951.650341][T28030] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1951.650366][T28030] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1951.650401][T28030] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1951.650422][T28030] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1951.674920][T28030] usb 9-1: config 0 descriptor??
[ 1951.897779][T28863] FAULT_INJECTION: forcing a failure.
[ 1951.897779][T28863] name failslab, interval 1, probability 0, space 0, times 0
[ 1951.897813][T28863] CPU: 0 UID: 0 PID: 28863 Comm: syz.8.5996 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1951.897839][T28863] Tainted: [L]=SOFTLOCKUP
[ 1951.897845][T28863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1951.897855][T28863] Call Trace:
[ 1951.897863][T28863]  <TASK>
[ 1951.897872][T28863]  dump_stack_lvl+0xe8/0x150
[ 1951.897904][T28863]  should_fail_ex+0x467/0x600
[ 1951.897937][T28863]  should_failslab+0xa8/0x100
[ 1951.897961][T28863]  __kmalloc_noprof+0xfe/0x780
[ 1951.897981][T28863]  ? tomoyo_encode+0x2ad/0x570
[ 1951.898001][T28863]  ? tomoyo_encode+0x2ad/0x570
[ 1951.898028][T28863]  tomoyo_encode+0x2ad/0x570
[ 1951.898053][T28863]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1951.898084][T28863]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1951.898112][T28863]  tomoyo_path_number_perm+0x246/0x5f0
[ 1951.898141][T28863]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1951.898165][T28863]  ? __lock_acquire+0x683/0x2ce0
[ 1951.898198][T28863]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1951.898222][T28863]  ? hook_file_ioctl+0x1f3/0x600
[ 1951.898244][T28863]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1951.898286][T28863]  ? __fget_files+0x2a/0x420
[ 1951.898306][T28863]  ? __fget_files+0x2a/0x420
[ 1951.898322][T28863]  ? __fget_files+0x3a8/0x420
[ 1951.898339][T28863]  ? __fget_files+0x2a/0x420
[ 1951.898367][T28863]  security_file_ioctl+0xc3/0x2a0
[ 1951.898387][T28863]  __se_sys_ioctl+0x47/0x170
[ 1951.898410][T28863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1951.898431][T28863]  do_syscall_64+0x174/0x580
[ 1951.898453][T28863]  ? trace_irq_disable+0x3b/0x140
[ 1951.898471][T28863]  ? clear_bhb_loop+0x40/0x90
[ 1951.898494][T28863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1951.898512][T28863] RIP: 0033:0x7fec9a00de59
[ 1951.898530][T28863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1951.898545][T28863] RSP: 002b:00007fec98266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1951.898564][T28863] RAX: ffffffffffffffda RBX: 00007fec9a295fa0 RCX: 00007fec9a00de59
[ 1951.898577][T28863] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000004
[ 1951.898589][T28863] RBP: 00007fec98266090 R08: 0000000000000000 R09: 0000000000000000
[ 1951.898600][T28863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1951.898612][T28863] R13: 00007fec9a296038 R14: 00007fec9a295fa0 R15: 00007ffdfab9e678
[ 1951.898643][T28863]  </TASK>
[ 1951.900816][T28863] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1951.907745][T28030] usb 9-1: USB disconnect, device number 8
[ 1952.928377][ T5733] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1952.951346][T28838] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1953.264154][ T5733] usb 4-1: Using ep0 maxpacket: 8
[ 1953.310260][ T5733] usb 4-1: config 0 has no interfaces?
[ 1953.322864][ T5733] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[ 1953.322894][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1953.322964][ T5733] usb 4-1: Product: syz
[ 1953.322977][ T5733] usb 4-1: Manufacturer: syz
[ 1953.322991][ T5733] usb 4-1: SerialNumber: syz
[ 1953.418002][ T5733] usb 4-1: config 0 descriptor??
[ 1953.575412][T28907] netlink: 'syz.8.6008': attribute type 1 has an invalid length.
[ 1953.622155][T28907] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1953.676378][T13896] r8152 2-1:162.93: Expected endpoints are not found
[ 1953.706680][T28881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1953.720322][T28901] vcan0: tx drop: invalid da for name 0x0000000000000002
[ 1953.748593][T28881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1953.785866][T28911] netlink: 'syz.8.6008': attribute type 10 has an invalid length.
[ 1953.785885][T28911] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6008'.
[ 1953.793239][T13896] r8152-cfgselector 2-1: USB disconnect, device number 18
[ 1953.862982][T28909] dummy0: left promiscuous mode
[ 1953.935567][ T5733] usb 4-1: USB disconnect, device number 127
[ 1953.962585][T28909] bond3: (slave dummy0): making interface the new active one
[ 1953.993057][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6010'.
[ 1954.015664][T28909] bond3: (slave dummy0): Enslaving as an active interface with an up link
[ 1954.015823][T28911] dummy0: entered promiscuous mode
[ 1954.052245][T28911] bond3: (slave dummy0): Releasing active interface
[ 1954.168946][T13896] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1954.243791][   T31] usb 10-1: new full-speed USB device number 61 using dummy_hcd
[ 1954.331166][T13896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1954.331191][T13896] usb 2-1: config 0 has no interfaces?
[ 1954.331219][T13896] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1954.331238][T13896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1954.334450][T13896] usb 2-1: config 0 descriptor??
[ 1954.405732][   T31] usb 10-1: too many configurations: 15, using maximum allowed: 8
[ 1954.420156][T28028] IPVS: starting estimator thread 0...
[ 1954.442604][   T31] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[ 1954.442633][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1954.445517][   T31] usb 10-1: config 0 descriptor??
[ 1954.473150][   T31] hub 10-1:0.0: Invalid hub with more than one config or interface
[ 1954.473188][   T31] hub 10-1:0.0: probe with driver hub failed with error -22
[ 1954.475107][   T31] sierra 10-1:0.0: Sierra USB modem converter detected
[ 1954.521892][T28917] IPVS: using max 10 ests per chain, 24000 per kthread
[ 1954.679368][   T31] usb 10-1: Sierra USB modem converter now attached to ttyUSB0
[ 1954.696107][   T31] usb 10-1: USB disconnect, device number 61
[ 1954.696768][T28924] netlink: 'syz.8.6013': attribute type 2 has an invalid length.
[ 1954.731427][   T31] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1954.732163][   T31] sierra 10-1:0.0: device disconnected
[ 1954.757143][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6012'.
[ 1954.785200][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6012'.
[ 1954.802308][T28030] usb 2-1: USB disconnect, device number 19
[ 1955.034937][T13896] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1955.195305][T13896] usb 4-1: Using ep0 maxpacket: 32
[ 1955.197731][T13896] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1955.198872][T13896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1955.198886][T13896] usb 4-1: config 0 has no interfaces?
[ 1955.201124][T13896] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice= 3.13
[ 1955.201139][T13896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1955.201149][T13896] usb 4-1: Product: syz
[ 1955.201156][T13896] usb 4-1: Manufacturer: syz
[ 1955.201164][T13896] usb 4-1: SerialNumber: syz
[ 1955.204990][T13896] usb 4-1: config 0 descriptor??
[ 1955.493639][T28935] FAULT_INJECTION: forcing a failure.
[ 1955.493639][T28935] name failslab, interval 1, probability 0, space 0, times 0
[ 1955.493662][T28935] CPU: 1 UID: 0 PID: 28935 Comm: syz.1.6016 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1955.493677][T28935] Tainted: [L]=SOFTLOCKUP
[ 1955.493681][T28935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1955.493688][T28935] Call Trace:
[ 1955.493692][T28935]  <TASK>
[ 1955.493697][T28935]  dump_stack_lvl+0xe8/0x150
[ 1955.493718][T28935]  should_fail_ex+0x467/0x600
[ 1955.493735][T28935]  should_failslab+0xa8/0x100
[ 1955.493749][T28935]  __kmalloc_noprof+0xfe/0x780
[ 1955.493760][T28935]  ? tomoyo_encode+0x2ad/0x570
[ 1955.493772][T28935]  ? tomoyo_encode+0x2ad/0x570
[ 1955.493789][T28935]  tomoyo_encode+0x2ad/0x570
[ 1955.493814][T28935]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1955.493844][T28935]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1955.493871][T28935]  tomoyo_path_number_perm+0x246/0x5f0
[ 1955.493898][T28935]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1955.493923][T28935]  ? __lock_acquire+0x683/0x2ce0
[ 1955.493955][T28935]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1955.493971][T28935]  ? hook_file_ioctl+0x1f3/0x600
[ 1955.493985][T28935]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1955.494007][T28935]  ? __fget_files+0x2a/0x420
[ 1955.494019][T28935]  ? __fget_files+0x2a/0x420
[ 1955.494028][T28935]  ? __fget_files+0x3a8/0x420
[ 1955.494037][T28935]  ? __fget_files+0x2a/0x420
[ 1955.494048][T28935]  security_file_ioctl+0xc3/0x2a0
[ 1955.494060][T28935]  __se_sys_ioctl+0x47/0x170
[ 1955.494073][T28935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1955.494086][T28935]  do_syscall_64+0x174/0x580
[ 1955.494099][T28935]  ? trace_irq_disable+0x3b/0x140
[ 1955.494108][T28935]  ? clear_bhb_loop+0x40/0x90
[ 1955.494120][T28935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1955.494130][T28935] RIP: 0033:0x7fabe4b3de59
[ 1955.494141][T28935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1955.494150][T28935] RSP: 002b:00007fabe2d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1955.494161][T28935] RAX: ffffffffffffffda RBX: 00007fabe4dc5fa0 RCX: 00007fabe4b3de59
[ 1955.494169][T28935] RDX: 0000200000000040 RSI: 00000000000007b1 RDI: 0000000000000003
[ 1955.494175][T28935] RBP: 00007fabe2d96090 R08: 0000000000000000 R09: 0000000000000000
[ 1955.494181][T28935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1955.494187][T28935] R13: 00007fabe4dc6038 R14: 00007fabe4dc5fa0 R15: 00007ffdc61cf758
[ 1955.494203][T28935]  </TASK>
[ 1955.494215][T28935] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1955.927854][    C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[ 1956.063488][T28947] vcan0: tx drop: invalid da for name 0x0000000000000002
[ 1956.129909][T28951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6022'.
[ 1956.166834][T28951] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1956.182284][T28951] dummy0: left promiscuous mode
[ 1956.187349][T28951] bond4: (slave dummy0): Enslaving as an active interface with an up link
[ 1956.193625][T28951] netlink: 'syz.8.6022': attribute type 10 has an invalid length.
[ 1956.193646][T28951] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6022'.
[ 1956.231876][T28951] dummy0: entered promiscuous mode
[ 1956.254578][T28951] bond4: (slave dummy0): Releasing backup interface
[ 1956.680935][T28973] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[ 1956.715307][T28975] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[ 1956.715328][T28975] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1956.717303][T28975] vhci_hcd vhci_hcd.0: Device attached
[ 1956.725815][T28975] FAULT_INJECTION: forcing a failure.
[ 1956.725815][T28975] name failslab, interval 1, probability 0, space 0, times 0
[ 1956.725846][T28975] CPU: 1 UID: 0 PID: 28975 Comm: syz.8.6031 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1956.725871][T28975] Tainted: [L]=SOFTLOCKUP
[ 1956.725877][T28975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1956.725888][T28975] Call Trace:
[ 1956.725895][T28975]  <TASK>
[ 1956.725902][T28975]  dump_stack_lvl+0xe8/0x150
[ 1956.725934][T28975]  should_fail_ex+0x467/0x600
[ 1956.725964][T28975]  should_failslab+0xa8/0x100
[ 1956.725986][T28975]  __kmalloc_noprof+0xfe/0x780
[ 1956.726004][T28975]  ? tomoyo_encode+0x2ad/0x570
[ 1956.726024][T28975]  ? tomoyo_encode+0x2ad/0x570
[ 1956.726049][T28975]  tomoyo_encode+0x2ad/0x570
[ 1956.726074][T28975]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1956.726104][T28975]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1956.726130][T28975]  tomoyo_path_number_perm+0x246/0x5f0
[ 1956.726158][T28975]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1956.726182][T28975]  ? __lock_acquire+0x683/0x2ce0
[ 1956.726214][T28975]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1956.726236][T28975]  ? hook_file_ioctl+0x1f3/0x600
[ 1956.726257][T28975]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1956.726297][T28975]  ? __fget_files+0x2a/0x420
[ 1956.726318][T28975]  ? __fget_files+0x2a/0x420
[ 1956.726333][T28975]  ? __fget_files+0x3a8/0x420
[ 1956.726347][T28975]  ? __fget_files+0x2a/0x420
[ 1956.726367][T28975]  security_file_ioctl+0xc3/0x2a0
[ 1956.726395][T28975]  __se_sys_ioctl+0x47/0x170
[ 1956.726417][T28975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1956.726436][T28975]  do_syscall_64+0x174/0x580
[ 1956.726457][T28975]  ? trace_irq_disable+0x3b/0x140
[ 1956.726475][T28975]  ? clear_bhb_loop+0x40/0x90
[ 1956.726496][T28975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1956.726513][T28975] RIP: 0033:0x7fec9a00de59
[ 1956.726531][T28975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1956.726546][T28975] RSP: 002b:00007fec98266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1956.726564][T28975] RAX: ffffffffffffffda RBX: 00007fec9a295fa0 RCX: 00007fec9a00de59
[ 1956.726578][T28975] RDX: 00002000000005c0 RSI: 000000004008af03 RDI: 0000000000000005
[ 1956.726589][T28975] RBP: 00007fec98266090 R08: 0000000000000000 R09: 0000000000000000
[ 1956.726600][T28975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1956.726610][T28975] R13: 00007fec9a296038 R14: 00007fec9a295fa0 R15: 00007ffdfab9e678
[ 1956.726642][T28975]  </TASK>
[ 1956.726669][T28975] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1956.873877][T28971] sctp: [Deprecated]: syz.9.6028 (pid 28971) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1956.873877][T28971] Use struct sctp_sack_info instead
[ 1956.887845][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6028'.
[ 1956.907246][T13896] vhci_hcd vhci_hcd.8: vhci_device speed not set
[ 1956.969917][T13896] usb 49-1: new full-speed USB device number 3 using vhci_hcd
[ 1957.701503][T28976] vhci_hcd: connection reset by peer
[ 1957.705264][T25322] vhci_hcd vhci_hcd.8: stop threads
[ 1957.705287][T25322] vhci_hcd vhci_hcd.8: release socket
[ 1957.705380][T25322] vhci_hcd vhci_hcd.8: disconnect device
[ 1957.860778][ T5733] usb 4-1: USB disconnect, device number 2
[ 1958.171938][T29012] ==================================================================
[ 1958.171950][T29012] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350
[ 1958.172054][T29012] Read of size 8 at addr ffff88802ca94418 by task syz.6.6044/29012
[ 1958.172074][T29012] 
[ 1958.172089][T29012] CPU: 1 UID: 0 PID: 29012 Comm: syz.6.6044 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1958.172113][T29012] Tainted: [L]=SOFTLOCKUP
[ 1958.172118][T29012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1958.172125][T29012] Call Trace:
[ 1958.172130][T29012]  <TASK>
[ 1958.172135][T29012]  dump_stack_lvl+0xe8/0x150
[ 1958.172163][T29012]  print_address_description+0x55/0x1e0
[ 1958.172183][T29012]  ? dvb_device_open+0xc4/0x350
[ 1958.172195][T29012]  print_report+0x58/0x70
[ 1958.172209][T29012]  kasan_report+0x117/0x150
[ 1958.172222][T29012]  ? dvb_device_open+0xc4/0x350
[ 1958.172235][T29012]  dvb_device_open+0xc4/0x350
[ 1958.172248][T29012]  ? rt_spin_unlock+0x163/0x200
[ 1958.172261][T29012]  chrdev_open+0x4dc/0x600
[ 1958.172280][T29012]  ? __pfx_chrdev_open+0x10/0x10
[ 1958.172294][T29012]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 1958.172309][T29012]  ? __pfx_chrdev_open+0x10/0x10
[ 1958.172323][T29012]  do_dentry_open+0x849/0x1420
[ 1958.172341][T29012]  vfs_open+0x3b/0x350
[ 1958.172355][T29012]  ? path_openat+0x2e49/0x3850
[ 1958.172369][T29012]  path_openat+0x2e60/0x3850
[ 1958.172383][T29012]  ? kmem_cache_alloc_noprof+0x355/0x650
[ 1958.172400][T29012]  ? __x64_sys_openat+0x138/0x170
[ 1958.172409][T29012]  ? do_syscall_64+0x174/0x580
[ 1958.172423][T29012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.172440][T29012]  do_file_open+0x23e/0x4a0
[ 1958.172452][T29012]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1958.172467][T29012]  ? __pfx_do_file_open+0x10/0x10
[ 1958.172486][T29012]  ? alloc_fd+0x654/0x6d0
[ 1958.172503][T29012]  do_sys_openat2+0x115/0x200
[ 1958.172514][T29012]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1958.172531][T29012]  ? __task_pid_nr_ns+0x28/0x470
[ 1958.172547][T29012]  __x64_sys_openat+0x138/0x170
[ 1958.172558][T29012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.172570][T29012]  do_syscall_64+0x174/0x580
[ 1958.172591][T29012]  ? trace_irq_disable+0x3b/0x140
[ 1958.172603][T29012]  ? clear_bhb_loop+0x40/0x90
[ 1958.172618][T29012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.172630][T29012] RIP: 0033:0x7f989133e68e
[ 1958.172643][T29012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1958.172653][T29012] RSP: 002b:00007f988f5d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1958.172670][T29012] RAX: ffffffffffffffda RBX: 00007f988f5d66c0 RCX: 00007f989133e68e
[ 1958.172679][T29012] RDX: 0000000000000002 RSI: 00007f988f5d5c00 RDI: ffffffffffffff9c
[ 1958.172688][T29012] RBP: 00007f988f5d5c00 R08: 0000000000000000 R09: 0000000000000000
[ 1958.172696][T29012] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1958.172703][T29012] R13: 00007f9891606038 R14: 00007f9891605fa0 R15: 00007ffc05764848
[ 1958.172716][T29012]  </TASK>
[ 1958.172720][T29012] 
[ 1958.172732][T29012] Allocated by task 28701:
[ 1958.172740][T29012]  kasan_save_track+0x3e/0x80
[ 1958.172752][T29012]  __kasan_kmalloc+0x93/0xb0
[ 1958.172763][T29012]  __kmalloc_cache_noprof+0x3d2/0x6b0
[ 1958.172775][T29012]  sctp_endpoint_new+0xe1/0xa70
[ 1958.172833][T29012]  sctp_init_sock+0x94e/0x1380
[ 1958.172850][T29012]  inet_create+0xd2c/0x1000
[ 1958.172863][T29012]  __sock_create+0x4b3/0x9d0
[ 1958.172876][T29012]  __sys_socket+0xd6/0x1b0
[ 1958.172888][T29012]  __x64_sys_socket+0x7a/0x90
[ 1958.172900][T29012]  do_syscall_64+0x174/0x580
[ 1958.172913][T29012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.172923][T29012] 
[ 1958.172927][T29012] Freed by task 20:
[ 1958.172933][T29012]  kasan_save_track+0x3e/0x80
[ 1958.172942][T29012]  kasan_save_free_info+0x40/0x50
[ 1958.172954][T29012]  __kasan_slab_free+0x5c/0x80
[ 1958.172964][T29012]  kfree+0x1c5/0x6c0
[ 1958.172977][T29012]  rcu_cpu_kthread+0x950/0x1480
[ 1958.172987][T29012]  smpboot_thread_fn+0x57c/0xa80
[ 1958.173000][T29012]  kthread+0x388/0x470
[ 1958.173013][T29012]  ret_from_fork+0x514/0xb70
[ 1958.173026][T29012]  ret_from_fork_asm+0x1a/0x30
[ 1958.173037][T29012] 
[ 1958.173040][T29012] Last potentially related work creation:
[ 1958.173044][T29012]  kasan_save_stack+0x3e/0x60
[ 1958.173053][T29012]  kasan_record_aux_stack+0xbd/0xd0
[ 1958.173065][T29012]  call_rcu+0xee/0x8b0
[ 1958.173076][T29012]  sctp_destroy_sock+0x1ae/0x350
[ 1958.173088][T29012]  sk_common_release+0x75/0x330
[ 1958.173100][T29012]  sctp_close+0x79f/0x950
[ 1958.173112][T29012]  inet_release+0x143/0x190
[ 1958.173123][T29012]  sock_close+0xad/0x220
[ 1958.173134][T29012]  __fput+0x42a/0xa80
[ 1958.173142][T29012]  task_work_run+0x1d9/0x270
[ 1958.173171][T29012]  exit_to_user_mode_loop+0x1fa/0x730
[ 1958.173192][T29012]  do_syscall_64+0x353/0x580
[ 1958.173215][T29012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.173233][T29012] 
[ 1958.173239][T29012] The buggy address belongs to the object at ffff88802ca94400
[ 1958.173239][T29012]  which belongs to the cache kmalloc-512 of size 512
[ 1958.173256][T29012] The buggy address is located 24 bytes inside of
[ 1958.173256][T29012]  freed 512-byte region [ffff88802ca94400, ffff88802ca94600)
[ 1958.173277][T29012] 
[ 1958.173283][T29012] The buggy address belongs to the physical page:
[ 1958.173302][T29012] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ca94400 pfn:0x2ca94
[ 1958.173326][T29012] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1958.173342][T29012] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 1958.173353][T29012] page_type: f5(slab)
[ 1958.173363][T29012] raw: 0080000000000240 ffff88813ffb4c80 ffffea0001874210 ffffea0000ddd610
[ 1958.173374][T29012] raw: ffff88802ca94400 000000080010000f 00000000f5000000 0000000000000000
[ 1958.173386][T29012] head: 0080000000000240 ffff88813ffb4c80 ffffea0001874210 ffffea0000ddd610
[ 1958.173397][T29012] head: ffff88802ca94400 000000080010000f 00000000f5000000 0000000000000000
[ 1958.173407][T29012] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 1958.173415][T29012] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 1958.173422][T29012] page dumped because: kasan: bad access detected
[ 1958.173431][T29012] page_owner tracks the page as allocated
[ 1958.173436][T29012] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15176214854, free_ts 0
[ 1958.173456][T29012]  post_alloc_hook+0x1f9/0x250
[ 1958.173472][T29012]  get_page_from_freelist+0x262a/0x26a0
[ 1958.173484][T29012]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1958.173497][T29012]  allocate_slab+0x79/0x5e0
[ 1958.173510][T29012]  refill_objects+0x2d8/0x350
[ 1958.173522][T29012]  __pcs_replace_empty_main+0x330/0x690
[ 1958.173534][T29012]  __kmalloc_cache_noprof+0x468/0x6b0
[ 1958.173543][T29012]  device_add+0xb6/0xb80
[ 1958.173599][T29012]  cdev_device_add+0x1c6/0x380
[ 1958.173615][T29012]  i2cdev_attach_adapter+0x2e4/0x500
[ 1958.173659][T29012]  notifier_call_chain+0x1a5/0x3d0
[ 1958.173674][T29012]  blocking_notifier_call_chain+0x6a/0x90
[ 1958.173688][T29012]  bus_notify+0x146/0x180
[ 1958.173698][T29012]  device_add+0x53a/0xb80
[ 1958.173708][T29012]  i2c_register_adapter+0xc9f/0x1400
[ 1958.173744][T29012]  vidtv_bridge_probe+0x29d/0xf60
[ 1958.173781][T29012] page_owner free stack trace missing
[ 1958.173787][T29012] 
[ 1958.173790][T29012] Memory state around the buggy address:
[ 1958.173798][T29012]  ffff88802ca94300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1958.173806][T29012]  ffff88802ca94380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1958.173814][T29012] >ffff88802ca94400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1958.173819][T29012]                             ^
[ 1958.173825][T29012]  ffff88802ca94480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1958.173833][T29012]  ffff88802ca94500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1958.173838][T29012] ==================================================================
[ 1958.174055][T29012] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1958.174075][T29012] CPU: 1 UID: 0 PID: 29012 Comm: syz.6.6044 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1958.174103][T29012] Tainted: [L]=SOFTLOCKUP
[ 1958.174111][T29012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1958.174122][T29012] Call Trace:
[ 1958.174131][T29012]  <TASK>
[ 1958.174139][T29012]  vpanic+0x56c/0xa60
[ 1958.174171][T29012]  ? __pfx_vpanic+0x10/0x10
[ 1958.174185][T29012]  ? __pfx___schedule+0x10/0x10
[ 1958.174201][T29012]  panic+0xc5/0xd0
[ 1958.174210][T29012]  ? __pfx_panic+0x10/0x10
[ 1958.174220][T29012]  ? preempt_schedule_thunk+0x16/0x40
[ 1958.174234][T29012]  ? dvb_device_open+0xc4/0x350
[ 1958.174245][T29012]  check_panic_on_warn+0x89/0xb0
[ 1958.174264][T29012]  ? dvb_device_open+0xc4/0x350
[ 1958.174274][T29012]  end_report+0x73/0x170
[ 1958.174284][T29012]  ? dvb_device_open+0xc4/0x350
[ 1958.174294][T29012]  kasan_report+0x128/0x150
[ 1958.174305][T29012]  ? dvb_device_open+0xc4/0x350
[ 1958.174317][T29012]  dvb_device_open+0xc4/0x350
[ 1958.174328][T29012]  ? rt_spin_unlock+0x163/0x200
[ 1958.174339][T29012]  chrdev_open+0x4dc/0x600
[ 1958.174353][T29012]  ? __pfx_chrdev_open+0x10/0x10
[ 1958.174367][T29012]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 1958.174386][T29012]  ? __pfx_chrdev_open+0x10/0x10
[ 1958.174408][T29012]  do_dentry_open+0x849/0x1420
[ 1958.174438][T29012]  vfs_open+0x3b/0x350
[ 1958.174460][T29012]  ? path_openat+0x2e49/0x3850
[ 1958.174482][T29012]  path_openat+0x2e60/0x3850
[ 1958.174506][T29012]  ? kmem_cache_alloc_noprof+0x355/0x650
[ 1958.174527][T29012]  ? __x64_sys_openat+0x138/0x170
[ 1958.174536][T29012]  ? do_syscall_64+0x174/0x580
[ 1958.174549][T29012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.174564][T29012]  do_file_open+0x23e/0x4a0
[ 1958.174575][T29012]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1958.174589][T29012]  ? __pfx_do_file_open+0x10/0x10
[ 1958.174606][T29012]  ? alloc_fd+0x654/0x6d0
[ 1958.174623][T29012]  do_sys_openat2+0x115/0x200
[ 1958.174633][T29012]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1958.174650][T29012]  ? __task_pid_nr_ns+0x28/0x470
[ 1958.174668][T29012]  __x64_sys_openat+0x138/0x170
[ 1958.174678][T29012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.174689][T29012]  do_syscall_64+0x174/0x580
[ 1958.174702][T29012]  ? trace_irq_disable+0x3b/0x140
[ 1958.174711][T29012]  ? clear_bhb_loop+0x40/0x90
[ 1958.174722][T29012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1958.174732][T29012] RIP: 0033:0x7f989133e68e
[ 1958.174742][T29012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1958.174751][T29012] RSP: 002b:00007f988f5d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1958.174763][T29012] RAX: ffffffffffffffda RBX: 00007f988f5d66c0 RCX: 00007f989133e68e
[ 1958.174771][T29012] RDX: 0000000000000002 RSI: 00007f988f5d5c00 RDI: ffffffffffffff9c
[ 1958.174779][T29012] RBP: 00007f988f5d5c00 R08: 0000000000000000 R09: 0000000000000000
[ 1958.174785][T29012] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1958.174792][T29012] R13: 00007f9891606038 R14: 00007f9891605fa0 R15: 00007ffc05764848
[ 1958.174804][T29012]  </TASK>
[ 1958.175078][T29012] Kernel Offset: disabled